Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e20323633373032.roa
File:                     3137322e39392e32312e302f32342d3234203d3e20323633373032.roa (raw, json)
Hash identifier:          7A4zvJArBosf21x8KD5//UViQxAsMiviSG9iUFXj/dA=
Subject key identifier:   85:4A:7C:68:12:DA:42:05:B7:C8:AF:97:5E:C1:55:C1:CF:7E:AB:A5
Certificate issuer:       /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial:       69CA73495241E738F45D3B64E7992F91A5EEF12A
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e20323633373032.roa
Signing time:             Tue 21 Oct 2025 03:28:18 +0000
ROA not before:           Tue 21 Oct 2025 03:23:18 +0000
ROA not after:            Tue 20 Oct 2026 03:28:18 +0000
asID:                     263702
IP address blocks:        172.99.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Oct 2025 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:ca:73:49:52:41:e7:38:f4:5d:3b:64:e7:99:2f:91:a5:ee:f1:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
        Validity
            Not Before: Oct 21 03:23:18 2025 GMT
            Not After : Oct 20 03:28:18 2026 GMT
        Subject: CN=854A7C6812DA4205B7C8AF975EC155C1CF7EABA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8c:b1:c9:dc:78:de:54:1d:fd:11:c0:0a:2c:
                    07:71:3e:29:6a:e8:38:39:d5:ba:63:ed:19:1c:61:
                    d4:d5:ae:e2:c8:1d:57:76:89:a7:9c:d2:e1:95:0e:
                    5f:af:dc:42:6d:29:47:aa:68:0f:26:d5:77:2e:f0:
                    00:94:33:38:4f:13:60:69:4b:33:66:3f:74:a6:08:
                    88:4d:51:d3:85:e2:20:21:da:4b:e3:40:4b:bc:22:
                    76:ae:2f:9f:36:fd:05:9a:2a:30:75:ef:0c:72:bd:
                    ef:0f:f7:0b:72:36:cb:df:02:5e:20:d0:f8:38:dc:
                    99:a8:45:55:47:af:9a:20:b8:f2:92:29:81:88:78:
                    3b:03:a8:e0:85:ad:e7:91:6c:bd:b1:61:5e:b5:b4:
                    52:62:c8:a3:fb:0c:df:6e:e0:25:ad:02:0b:e0:03:
                    61:51:ca:ef:ff:f5:81:42:39:8c:b3:9a:d2:05:28:
                    49:1f:d3:09:6e:d6:f8:da:02:97:63:ba:20:b9:25:
                    a8:79:63:6a:a4:e6:f0:7d:8b:f8:02:1c:ae:22:63:
                    94:94:87:ce:a5:e1:e6:2f:95:ca:e9:8f:0b:ec:7c:
                    2c:1f:1f:ce:1f:c6:a3:43:3f:ca:59:64:9e:27:cc:
                    3e:92:d0:21:8b:62:89:ff:a1:26:36:dd:75:76:e6:
                    8b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4A:7C:68:12:DA:42:05:B7:C8:AF:97:5E:C1:55:C1:CF:7E:AB:A5
            X509v3 Authority Key Identifier:
                keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e20323633373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:bd:6e:f0:8a:8e:6c:f4:28:eb:47:ed:a4:71:45:34:bd:ac:
         bb:c9:3a:97:bc:c2:44:f5:9f:eb:a9:ee:10:a2:61:2e:80:05:
         e3:f9:9e:29:7f:a2:25:f8:56:27:3f:eb:02:d8:6a:c7:02:8f:
         d3:54:01:33:e8:98:27:47:de:41:f5:33:69:15:00:2c:e7:c7:
         b8:7a:4c:14:23:59:28:8a:fb:90:92:c5:ee:88:73:40:fa:f1:
         3b:c7:52:e7:4a:6b:44:9c:54:07:ca:57:d7:a4:79:20:a3:e7:
         58:91:72:b8:e9:7a:6f:86:7a:2e:0c:d5:97:3d:78:2e:9f:c6:
         e2:d0:8f:21:90:d1:e1:ee:4b:2f:6a:05:fe:28:d4:26:c1:d7:
         de:e8:f6:60:27:38:ed:96:9d:36:af:83:7e:82:46:e5:68:ee:
         5c:04:fa:f4:07:35:ad:a7:51:86:ae:f7:ac:d2:e8:c4:f0:56:
         5e:a0:d0:ff:e1:69:48:3c:b7:a9:6a:48:c5:b0:1c:1e:fe:99:
         e7:5a:31:b1:fa:a0:da:d3:e7:e0:ea:21:21:31:9d:37:ad:55:
         a3:f3:27:d9:25:48:1b:09:fe:a9:01:66:92:8d:52:d3:d8:38:
         c9:ff:cb:61:7a:52:4d:1d:d9:1f:e8:47:40:1f:99:b8:58:a8:
         9b:17:ee:f4
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUacpzSVJB5zj0XTtk55kvkaXu8SowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGFhODAwYTgxNGFmMGRlYjA2NmE5NWY3OTk2ZjgzY2Q3
MjlhNDhkMDc1YjA5NTJmYmUwHhcNMjUxMDIxMDMyMzE4WhcNMjYxMDIwMDMyODE4
WjAzMTEwLwYDVQQDEyg4NTRBN0M2ODEyREE0MjA1QjdDOEFGOTc1RUMxNTVDMUNG
N0VBQkE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxoyxydx43lQd
/RHACiwHcT4paug4OdW6Y+0ZHGHU1a7iyB1XdomnnNLhlQ5fr9xCbSlHqmgPJtV3
LvAAlDM4TxNgaUszZj90pgiITVHTheIgIdpL40BLvCJ2ri+fNv0Fmiowde8Mcr3v
D/cLcjbL3wJeIND4ONyZqEVVR6+aILjykimBiHg7A6jgha3nkWy9sWFetbRSYsij
+wzfbuAlrQIL4ANhUcrv//WBQjmMs5rSBShJH9MJbtb42gKXY7oguSWoeWNqpObw
fYv4AhyuImOUlIfOpeHmL5XK6Y8L7HwsHx/OH8ajQz/KWWSeJ8w+ktAhi2KJ/6Em
Nt11duaLUQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIVKfGgS2kIFt8ivl17BVcHP
fqulMB8GA1UdIwQYMBaAFEplnSvSDXBuifDpyKHoIvLdrr4fMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYWUwNTg0MGQwNDNiLzAv
NEE2NTlEMkJEMjBENzA2RTg5RjBFOUM4QTFFODIyRjJEREFFQkUxRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3Lzk0NmFmZDM0LTY5NzEtNDIzZi1iMjJhLTU3NWUyYzczYWIyNy84YWE4
MDBhODE0YWYwZGViMDY2YTk1Zjc5OTZmODNjZDcyOWE0OGQwNzViMDk1MmZiZS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmFl
MDU4NDBkMDQzYi8wLzMxMzczMjJlMzkzOTJlMzIzMTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzYzMzM3MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxjFTANBgkqhkiG9w0BAQsF
AAOCAQEAm71u8IqObPQo60ftpHFFNL2su8k6l7zCRPWf66nuEKJhLoAF4/meKX+i
JfhWJz/rAthqxwKP01QBM+iYJ0feQfUzaRUALOfHuHpMFCNZKIr7kJLF7ohzQPrx
O8dS50prRJxUB8pX16R5IKPnWJFyuOl6b4Z6LgzVlz14Lp/G4tCPIZDR4e5LL2oF
/ijUJsHX3uj2YCc47ZadNq+DfoJG5WjuXAT69Ac1radRhq73rNLoxPBWXqDQ/+Fp
SDy3qWpIxbAcHv6Z51oxsfqg2tPn4OohITGdN61Vo/Mn2SVIGwn+qQFmko1S09g4
yf/LYXpSTR3ZH+hHQB+ZuFiomxfu9A==
-----END CERTIFICATE-----
Generated at Wed Oct 22 16:35:28 2025 by rpki-client