Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62240.roa
File:                     AS62240.roa (raw, json)
Hash identifier:          onLmqB41+KEH4yeq6oMiANBiY0ymhEIifBWrRtdoLUs=
Subject key identifier:   92:D6:69:95:3C:8C:7A:57:C4:89:45:7B:63:5C:A3:19:C7:D2:F7:16
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       1EF545C329A67E3470985B6BF4435DBCFBE339FA
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62240.roa
Signing time:             Fri 12 Sep 2025 00:07:15 +0000
ROA not before:           Fri 12 Sep 2025 00:02:15 +0000
ROA not after:            Fri 11 Sep 2026 00:07:15 +0000
asID:                     62240
IP address blocks:        192.227.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:f5:45:c3:29:a6:7e:34:70:98:5b:6b:f4:43:5d:bc:fb:e3:39:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 12 00:02:15 2025 GMT
            Not After : Sep 11 00:07:15 2026 GMT
        Subject: CN=92D669953C8C7A57C489457B635CA319C7D2F716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:12:69:45:a2:42:90:8a:6c:94:a2:40:f9:ba:
                    6a:a8:ad:a9:38:f9:68:ca:68:95:12:f0:94:6c:06:
                    e1:9b:fe:85:04:0a:61:70:5f:7d:b4:ec:e2:7f:a3:
                    67:93:56:17:36:77:5c:32:35:1d:f3:fc:39:c2:90:
                    4e:fe:57:2e:1a:5a:4d:f0:44:8d:0a:5e:e3:67:5e:
                    41:22:73:2b:2d:7b:01:1c:e9:e2:c8:23:7b:f3:ad:
                    e5:67:91:f0:71:19:fe:87:9f:06:eb:b7:8c:8e:b5:
                    db:f3:a5:08:ef:7e:ac:b5:6d:27:b2:d8:00:1f:8a:
                    c2:32:c3:cd:fe:98:a9:2e:bb:89:7b:6b:c3:f4:40:
                    ca:d6:c0:d9:43:a7:94:0c:f7:de:08:16:d4:5f:90:
                    31:49:e2:8f:1a:5e:e5:f2:70:80:2c:37:62:2b:3e:
                    f4:1d:8b:b7:60:a0:7b:31:f9:5e:df:64:37:e9:b9:
                    fa:ec:7e:55:05:39:e3:af:f1:b8:4e:1d:ff:33:0f:
                    a0:88:03:f3:5f:74:5a:bb:c1:b1:f0:37:12:50:7b:
                    01:7c:8a:dd:02:81:f4:31:ea:24:bf:c0:49:d7:da:
                    dd:1d:2b:ad:5f:b0:64:17:0a:3d:3b:36:7d:eb:bc:
                    ae:22:d6:26:ad:ca:b3:e2:89:dd:65:da:7e:5a:a0:
                    13:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:D6:69:95:3C:8C:7A:57:C4:89:45:7B:63:5C:A3:19:C7:D2:F7:16
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62240.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.227.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:91:07:31:01:f7:f7:26:27:26:10:f7:80:f0:83:9a:99:e3:
         48:10:eb:d4:25:c4:d9:d4:41:36:b5:64:17:c3:df:c6:ef:67:
         6c:9d:cb:ab:5b:cc:c2:47:31:fc:77:5b:35:2b:81:83:3a:80:
         b8:df:21:6c:86:98:54:40:5f:36:c4:48:19:d7:0a:74:85:c9:
         95:d3:2b:86:be:53:9c:18:bc:5e:af:da:27:47:85:b3:27:d1:
         0f:53:b5:1e:bb:38:41:9f:b5:9a:d7:6e:99:75:34:3e:4f:ed:
         3b:64:d8:bc:df:b6:b2:b8:29:48:ae:0f:ae:86:ba:4a:4a:2f:
         51:8e:32:de:99:a1:f9:78:86:92:24:56:42:3a:48:b8:55:37:
         e5:d6:1d:57:67:67:c9:62:96:20:3c:d8:f9:5c:39:71:3a:fd:
         e4:78:0a:c4:37:f0:c9:7e:f8:fd:19:c6:94:a3:fd:d4:3f:8f:
         d4:c2:ec:0e:be:ab:c6:a6:75:5b:67:15:15:32:d2:cf:12:dd:
         3f:fb:e8:e5:7f:80:b6:7c:89:3b:94:ae:4d:7e:56:f0:38:b2:
         20:5a:33:de:cb:1f:a7:35:d7:b5:e6:cb:73:52:e4:c3:5f:e6:
         5c:25:5c:48:62:d0:0d:28:8e:68:37:10:4e:ab:8f:a4:5e:35:
         e2:55:e0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 03:39:27 2025 by rpki-client