Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62998.roa
File:                     AS62998.roa (raw, json)
Hash identifier:          V7/02xAkQ4ZWOwFYkJq+/O/xN0Rw8WRw9ZMlIOod6sI=
Subject key identifier:   0C:B6:D2:A1:78:55:99:7F:C5:05:41:62:0E:45:37:95:5A:C2:BE:C1
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       6F3A102E7EA7C04AE120070EC70FF878C95508D3
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62998.roa
Signing time:             Thu 11 Sep 2025 14:34:54 +0000
ROA not before:           Thu 11 Sep 2025 14:29:54 +0000
ROA not after:            Thu 10 Sep 2026 14:34:54 +0000
asID:                     62998
IP address blocks:        107.150.26.0/24 maxlen: 24
                          107.174.106.0/24 maxlen: 24
                          155.94.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 02:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:3a:10:2e:7e:a7:c0:4a:e1:20:07:0e:c7:0f:f8:78:c9:55:08:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep 11 14:29:54 2025 GMT
            Not After : Sep 10 14:34:54 2026 GMT
        Subject: CN=0CB6D2A17855997FC50541620E4537955AC2BEC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:42:c6:6c:b3:61:a6:7d:9c:9d:11:1e:dc:
                    4f:cf:88:61:90:13:bc:69:3e:d0:a6:3d:13:ce:ac:
                    cc:a5:88:8b:bd:05:df:ff:81:b9:3e:c3:9c:77:63:
                    dd:76:20:76:ee:ca:35:50:11:79:f7:24:1b:a7:c8:
                    67:5c:4e:cd:2f:f4:63:56:a0:a0:4e:d2:a6:62:02:
                    ff:53:b6:e3:bc:1a:78:e4:a9:6a:2d:d4:bf:e6:59:
                    17:5f:1a:af:24:e5:a2:72:e6:b6:c8:97:f8:5c:7e:
                    40:4b:7e:d3:c2:8a:0d:3d:ee:c0:24:75:6f:b7:f2:
                    4d:c7:99:e0:5a:c4:be:ce:53:4a:10:72:23:d0:2a:
                    02:20:93:db:cf:a4:28:8d:83:d4:20:c2:99:3f:80:
                    33:79:63:f6:5c:0b:e6:d0:a0:e1:56:73:98:31:36:
                    45:fb:db:f1:c9:5f:64:4b:df:63:23:6e:92:c1:57:
                    4f:f1:57:7c:9f:12:7a:44:b2:b4:fb:45:4c:9e:4e:
                    10:ec:0d:ad:21:4e:dc:17:8c:b8:b6:1b:05:f4:00:
                    9b:e2:80:e3:d3:a3:52:68:77:2e:81:91:5a:53:d8:
                    ef:7c:3e:85:77:cf:3d:6e:ff:22:54:cb:71:33:c1:
                    e6:49:90:37:aa:39:fa:e2:19:89:69:36:10:ec:d3:
                    46:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:B6:D2:A1:78:55:99:7F:C5:05:41:62:0E:45:37:95:5A:C2:BE:C1
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS62998.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.150.26.0/24
                  107.174.106.0/24
                  155.94.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:64:33:f0:c2:f9:aa:24:16:66:21:b4:64:07:ed:86:b0:d2:
         4a:d2:26:61:6b:d0:14:c0:a6:0a:90:df:ba:f9:73:83:9e:3c:
         3a:eb:d8:06:fd:f2:2d:85:5d:34:a4:7c:5f:88:9e:de:52:73:
         4b:3d:60:6c:7d:5a:c1:2a:9a:bc:18:e8:f5:87:59:bb:97:dc:
         30:bf:bc:ef:96:76:60:6e:5d:c7:fa:25:0a:0b:60:6a:66:50:
         c4:55:69:c5:2e:ef:38:45:f3:85:c2:1a:75:b2:e1:51:98:fd:
         03:1f:91:26:f5:c6:68:76:b4:25:5e:9b:8c:19:54:5f:44:b7:
         29:57:91:3d:20:f5:42:49:b1:5a:85:6d:81:75:53:e1:37:14:
         ac:ce:b6:5e:60:8c:35:d7:df:4e:38:67:5b:4e:da:51:91:ae:
         2f:38:84:8b:67:5b:f6:ce:83:77:87:d3:60:68:53:cb:8f:c8:
         ed:41:15:f4:56:99:9e:98:fc:dc:8c:42:8c:9a:af:3c:02:ba:
         fb:da:cd:2f:65:47:63:42:7b:52:b3:60:c0:8a:71:d4:bf:9e:
         d3:a2:de:cc:9f:28:fa:0f:14:ab:03:b0:5a:5a:c6:26:2c:cd:
         f4:c8:bf:11:65:54:41:7f:96:4d:c8:20:63:ee:02:62:17:22:
         2e:fd:66:f4
-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIUbzoQLn6nwErhIAcOxw/4eMlVCNMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjUwOTExMTQyOTU0WhcNMjYwOTEwMTQzNDU0
WjAzMTEwLwYDVQQDEygwQ0I2RDJBMTc4NTU5OTdGQzUwNTQxNjIwRTQ1Mzc5NTVB
QzJCRUMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxxCxmyzYaZ9
nJ0RHtxPz4hhkBO8aT7Qpj0TzqzMpYiLvQXf/4G5PsOcd2PddiB27so1UBF59yQb
p8hnXE7NL/RjVqCgTtKmYgL/U7bjvBp45KlqLdS/5lkXXxqvJOWicua2yJf4XH5A
S37TwooNPe7AJHVvt/JNx5ngWsS+zlNKEHIj0CoCIJPbz6QojYPUIMKZP4AzeWP2
XAvm0KDhVnOYMTZF+9vxyV9kS99jI26SwVdP8Vd8nxJ6RLK0+0VMnk4Q7A2tIU7c
F4y4thsF9ACb4oDj06NSaHcugZFaU9jvfD6Fd889bv8iVMtxM8HmSZA3qjn64hmJ
aTYQ7NNGowIDAQABo4ICijCCAoYwHQYDVR0OBBYEFAy20qF4VZl/xQVBYg5FN5Va
wr7BMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbwYIKwYBBQUHAQsEYzBhMF8GCCsGAQUFBzALhlNyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzYyOTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCsG
CCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAa5YaAwQAa65qAwQAm16KMA0GCSqG
SIb3DQEBCwUAA4IBAQBrZDPwwvmqJBZmIbRkB+2GsNJK0iZha9AUwKYKkN+6+XOD
njw669gG/fIthV00pHxfiJ7eUnNLPWBsfVrBKpq8GOj1h1m7l9wwv7zvlnZgbl3H
+iUKC2BqZlDEVWnFLu84RfOFwhp1suFRmP0DH5Em9cZodrQlXpuMGVRfRLcpV5E9
IPVCSbFahW2BdVPhNxSszrZeYIw1199OOGdbTtpRka4vOISLZ1v2zoN3h9NgaFPL
j8jtQRX0VpmemPzcjEKMmq88Arr72s0vZUdjQntSs2DAinHUv57Tot7Mnyj6DxSr
A7BaWsYmLM30yL8RZVRBf5ZNyCBj7gJiFyIu/Wb0
-----END CERTIFICATE-----
Generated at Tue Sep 16 03:45:52 2025 by rpki-client