Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203334393237.roa
File:                     3134302e3233352e3132392e302f32342d3234203d3e203334393237.roa (raw, json)
Hash identifier:          T9ALVtgSm7xwbZwcmrnefPNteoo7iJoTS9iqPVryIAo=
Subject key identifier:   FE:EF:B8:26:50:90:8D:73:64:22:35:E8:62:C7:1E:67:BC:54:BD:CF
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       0916E354C31516555710A04FB12EF22482BC3A04
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203334393237.roa
Signing time:             Mon 14 Jul 2025 11:27:22 +0000
ROA not before:           Mon 14 Jul 2025 11:22:22 +0000
ROA not after:            Mon 13 Jul 2026 11:27:22 +0000
asID:                     34927
IP address blocks:        140.235.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 13:37:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:16:e3:54:c3:15:16:55:57:10:a0:4f:b1:2e:f2:24:82:bc:3a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jul 14 11:22:22 2025 GMT
            Not After : Jul 13 11:27:22 2026 GMT
        Subject: CN=FEEFB82650908D73642235E862C71E67BC54BDCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:2d:91:4c:d6:76:6e:e9:2c:ab:f2:a7:5f:
                    27:77:64:11:49:51:ff:a0:ba:3c:ba:5a:de:29:26:
                    7e:ae:e1:ac:6c:5e:de:35:8a:20:c6:bb:d9:9a:22:
                    c7:62:4b:52:f5:ea:bf:d1:c4:af:e3:5b:32:b2:c9:
                    86:6f:8d:66:7f:86:56:bf:93:88:96:b3:99:27:df:
                    d2:fd:ee:fe:e5:ea:83:8f:91:02:37:69:2e:99:35:
                    6b:61:6e:49:96:ec:5d:91:77:e3:3e:31:bb:d6:13:
                    ae:8f:b5:19:c2:06:73:f0:72:07:b0:ed:a6:f4:33:
                    21:a3:25:2e:bd:d1:8a:c9:9c:8a:2b:ae:5c:16:da:
                    38:91:99:86:48:9b:a9:92:e3:5c:ff:ee:72:23:0d:
                    a6:63:83:22:18:01:2d:83:35:93:75:ed:8f:a5:a7:
                    68:95:26:58:df:55:35:83:5f:5c:10:38:51:61:e7:
                    6f:d1:b9:33:bd:46:12:c7:06:6b:52:77:81:8a:9a:
                    69:9f:5c:eb:7a:83:77:ac:94:06:18:1f:d5:cf:5c:
                    88:13:5f:3f:70:93:92:2f:38:95:98:6f:f5:b7:aa:
                    b6:e5:29:01:ea:49:32:b2:cb:d7:71:78:40:e4:b1:
                    48:3a:83:26:a8:f6:c3:72:8b:5d:72:81:45:2a:3e:
                    fe:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:EF:B8:26:50:90:8D:73:64:22:35:E8:62:C7:1E:67:BC:54:BD:CF
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:da:5d:ce:f4:cf:8a:0e:d7:85:40:2e:ae:85:29:f4:39:05:
         a8:a4:e0:0f:b1:08:a9:b9:d9:f2:23:42:8c:ae:10:03:3a:cf:
         65:f6:31:9f:60:ff:68:62:da:62:8b:78:f8:5c:e8:9e:71:5d:
         f9:fb:df:8c:ef:25:25:ed:a4:0d:9e:86:08:d3:46:a5:22:02:
         bb:4d:58:d1:ab:37:d9:1c:f5:b8:cc:b2:a2:08:ac:36:5f:6d:
         d6:36:f8:d8:a8:ee:ac:8b:bb:65:ea:e6:f0:e6:41:1c:38:0b:
         69:c1:05:72:a8:ef:2b:95:92:cc:8c:62:05:35:89:f1:27:f1:
         6c:3c:77:4a:f8:90:2e:f2:cf:a9:67:ec:ea:a5:ea:8c:cf:9f:
         60:11:1b:64:e3:a4:26:a2:06:98:42:22:15:d2:e3:a0:2c:b3:
         d6:d7:89:95:f1:08:50:8f:fb:17:f1:b6:2b:9c:e8:db:84:94:
         1e:82:76:7a:87:00:69:2d:f3:8c:6c:9b:fb:b6:1d:9e:02:89:
         a8:9f:ed:8d:f6:47:e7:f5:dc:82:54:d4:2c:04:ea:3c:fb:6f:
         1f:b8:07:16:1c:d8:83:07:f9:c4:28:ca:43:e7:05:06:40:e2:
         34:03:98:79:a3:c8:f6:66:3a:39:f1:8b:53:e7:03:bf:8f:c1:
         d8:77:35:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 18:10:51 2025 by rpki-client