Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3134302e3233352e3132312e302f32342d3234203d3e20313532313834.roa
File:                     3134302e3233352e3132312e302f32342d3234203d3e20313532313834.roa (raw, json)
Hash identifier:          50uieQ0kcTKVdun7LDHW3026DsNbNqeQIiT51H3ZUKU=
Subject key identifier:   21:BD:50:C4:33:84:C8:BB:A2:B9:1C:0A:23:F0:8D:2C:35:A1:79:E4
Certificate issuer:       /CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
Certificate serial:       25F86447FC09BA2116557039B8DEE6D1C7E24178
Authority key identifier: 26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3134302e3233352e3132312e302f32342d3234203d3e20313532313834.roa
Signing time:             Fri 04 Jul 2025 04:04:43 +0000
ROA not before:           Fri 04 Jul 2025 03:59:43 +0000
ROA not after:            Fri 03 Jul 2026 04:04:43 +0000
asID:                     152184
IP address blocks:        140.235.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 02:33:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f8:64:47:fc:09:ba:21:16:55:70:39:b8:de:e6:d1:c7:e2:41:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
        Validity
            Not Before: Jul  4 03:59:43 2025 GMT
            Not After : Jul  3 04:04:43 2026 GMT
        Subject: CN=21BD50C43384C8BBA2B91C0A23F08D2C35A179E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f3:62:e3:12:5e:5a:43:41:99:54:73:3a:0d:
                    fe:a4:79:c2:e6:c5:6d:7e:c7:48:ca:f3:76:23:32:
                    ab:ed:2c:bb:9a:94:0a:d9:36:3a:00:65:cf:6b:08:
                    04:c8:56:fa:54:78:79:27:48:24:ea:83:6b:28:14:
                    5c:7f:48:51:fe:fe:00:62:30:63:11:bd:ab:2e:72:
                    d0:52:f8:d1:c4:87:d1:4d:10:9f:c4:aa:7d:67:1a:
                    01:b5:21:7c:7e:ab:12:91:43:35:ca:42:89:5c:19:
                    73:84:eb:de:c3:c0:7e:60:99:00:06:46:b5:a0:52:
                    6d:74:95:16:9b:b8:22:b6:77:61:94:73:fd:37:0b:
                    d2:79:84:cd:99:54:23:d9:da:ef:9e:68:af:a1:5a:
                    19:6f:9b:e7:e4:d5:33:b0:08:cf:36:63:24:16:c2:
                    62:bc:e5:e7:16:59:7a:1d:e5:d0:40:f3:46:a8:54:
                    7d:ed:42:8a:fa:41:cd:c3:31:57:13:7e:bc:fd:51:
                    1f:97:bf:12:fe:c5:24:04:69:f0:c6:34:1c:d3:6d:
                    79:eb:aa:f3:c3:6d:96:e9:ff:96:d8:7e:fc:04:31:
                    72:9c:67:fc:05:cc:cf:c7:cd:cf:d2:79:87:37:f6:
                    82:54:61:74:81:dd:20:aa:4a:63:f3:b2:8e:70:ba:
                    72:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:BD:50:C4:33:84:C8:BB:A2:B9:1C:0A:23:F0:8D:2C:35:A1:79:E4
            X509v3 Authority Key Identifier:
                keyid:26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3134302e3233352e3132312e302f32342d3234203d3e20313532313834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:08:ca:76:70:ec:ba:d7:bc:5f:15:47:45:a2:6e:21:f2:6e:
         b6:28:13:d4:80:a3:96:7b:20:d8:5c:7e:ee:6e:19:73:f2:c2:
         a1:0e:81:e7:c2:f8:f8:e1:9a:4d:cf:13:24:48:11:94:95:62:
         f1:03:77:8f:ff:4f:09:11:c3:e4:07:d8:9d:29:be:8d:aa:35:
         6f:28:e5:9c:a8:8e:56:34:8f:4c:e8:e7:78:35:39:75:1e:1c:
         68:dd:ee:4e:41:e3:6e:84:5b:18:ce:32:06:79:d8:fa:2f:38:
         3e:c9:21:7f:09:6f:82:5b:f5:a7:c3:0a:13:60:83:c8:4a:f5:
         24:be:f7:5d:52:1d:cd:af:c5:c0:4d:96:79:66:5e:a6:26:8b:
         4c:a9:ab:ad:fd:2b:c3:33:ba:61:37:f8:1e:cb:79:c4:db:c2:
         4b:f5:75:fd:60:6a:5b:1c:02:ce:8d:21:63:18:09:63:92:ae:
         fb:9d:ac:b6:f4:20:16:7b:e1:7d:1c:5d:e1:ed:19:61:4d:01:
         a8:fc:cf:16:e0:f3:e4:22:fa:af:70:3e:7e:e6:1c:57:d0:b7:
         cf:05:78:93:25:a0:6a:17:4f:a3:3e:4c:6e:89:c7:49:22:56:
         4e:08:b1:ee:cb:cb:f6:e0:f5:a1:03:8f:43:f0:c8:d5:28:bf:
         1c:7f:f7:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 09:58:19 2025 by rpki-client