Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32342e302f32342d3234203d3e20343030303332.roa
File:                     3136352e3134302e32342e302f32342d3234203d3e20343030303332.roa (raw, json)
Hash identifier:          /uOm3NZhfzbO8K0EaDwD6+mnAwKqohKi5U32Ftdk/DE=
Subject key identifier:   30:07:25:0C:72:F9:83:63:84:97:15:32:6E:DD:16:22:00:50:8D:78
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       4C5EF8E1B40A288AB398B5F4828AD51DEF7617EC
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32342e302f32342d3234203d3e20343030303332.roa
Signing time:             Wed 03 Sep 2025 10:53:14 +0000
ROA not before:           Wed 03 Sep 2025 10:48:14 +0000
ROA not after:            Wed 02 Sep 2026 10:53:14 +0000
asID:                     400032
IP address blocks:        165.140.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 15:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5e:f8:e1:b4:0a:28:8a:b3:98:b5:f4:82:8a:d5:1d:ef:76:17:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Sep  3 10:48:14 2025 GMT
            Not After : Sep  2 10:53:14 2026 GMT
        Subject: CN=3007250C72F98363849715326EDD162200508D78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:14:3c:e0:4c:7b:28:c8:e1:68:72:0f:03:7f:
                    f8:2b:d6:5e:9c:51:93:2e:97:b1:e3:63:cb:a6:ff:
                    e1:70:ba:64:14:20:a2:f0:4f:f9:8c:03:87:fd:fb:
                    60:f4:39:77:66:cd:5a:b7:8e:7c:81:27:17:7c:64:
                    d5:5f:c6:a0:04:21:5a:50:9e:91:9b:9a:62:77:df:
                    c9:9c:fb:95:94:c5:bb:f9:b8:13:a1:82:dc:58:73:
                    b8:85:31:9b:b0:31:64:fd:e6:80:80:dd:f7:c9:6e:
                    1e:1d:98:5e:01:c3:86:9b:cf:9e:c4:32:b0:d8:2b:
                    b0:89:dd:ec:ad:25:63:2c:55:03:fc:3f:37:f4:46:
                    f8:6d:96:4e:89:3f:d7:8c:bb:99:6c:d2:35:07:28:
                    f9:70:e2:54:ff:21:62:b4:e5:64:f8:f7:b3:96:40:
                    1b:6c:79:94:41:8d:ed:77:38:c8:34:d9:53:9b:92:
                    5b:0d:66:c8:05:a0:7b:23:d7:ed:3c:4d:1e:17:5b:
                    1c:32:84:f7:2b:3c:54:ab:0f:cb:ce:6b:53:45:08:
                    ba:1d:27:e6:08:cc:8d:74:ad:2e:77:69:dd:4d:e7:
                    0d:4b:3a:b8:b7:eb:9d:09:d7:d6:41:bd:65:2c:ba:
                    33:39:e0:67:33:60:21:04:4f:2d:cf:82:80:54:67:
                    5b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:07:25:0C:72:F9:83:63:84:97:15:32:6E:DD:16:22:00:50:8D:78
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32342e302f32342d3234203d3e20343030303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9f:cf:9e:66:b2:f0:bb:43:7c:ec:8d:09:fc:9c:fb:f4:56:
         f5:02:9a:ca:3a:d6:40:2d:3a:1e:4f:98:83:79:8a:c2:0f:70:
         34:07:81:2b:02:97:c6:56:f3:5a:c7:51:36:ff:30:e8:e4:c5:
         e8:01:b5:16:e6:7b:c2:22:49:f7:c9:c9:b6:3f:d4:d1:a4:73:
         52:0b:b6:de:bf:7f:c8:f9:f4:3c:2b:6d:34:85:17:0d:00:ec:
         a4:12:91:a7:78:09:ca:32:3f:cb:6c:1f:ca:ad:b6:6e:42:e6:
         6f:8b:33:1a:66:3a:fa:57:46:82:dc:82:89:cb:2e:a8:78:ca:
         66:42:da:36:5e:ac:b0:a3:67:19:9e:98:c9:4d:3f:fd:12:37:
         d3:3f:10:98:0c:c6:e4:a0:f3:43:b9:ec:4c:4b:94:af:71:70:
         f3:eb:8e:fb:4c:51:23:9e:86:cb:05:c9:60:ff:3c:eb:7b:bf:
         f5:47:4a:d3:52:13:5a:4d:d5:e1:2b:ce:23:8c:70:23:c4:66:
         3a:da:9c:af:2c:da:48:a9:2b:ba:dc:b6:47:7a:0b:14:60:a3:
         20:40:94:ff:d2:65:4d:30:be:0b:ce:13:61:62:75:e0:60:08:
         9c:85:79:df:16:77:8e:00:db:23:d8:9e:5c:95:cc:10:7d:ef:
         67:5c:ee:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:09:48 2025 by rpki-client