Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e2036303739.roa
File:                     3136352e3134302e32352e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          1xwUbX6vsIqWCN2+cEYDhgZLIRwOro7g3fzJdK8K3Xo=
Subject key identifier:   40:B0:CA:BC:94:F4:3E:54:21:FD:40:92:32:1D:09:45:D2:DE:4B:FE
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       7CD2ACD5B7563649C3B3E6C760D9B63CBA61E51E
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e2036303739.roa
Signing time:             Thu 20 Aug 2026 13:53:41 +0000
ROA not before:           Thu 20 Aug 2026 13:48:41 +0000
ROA not after:            Thu 19 Aug 2027 13:53:41 +0000
asID:                     6079
IP address blocks:        165.140.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 02:08:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:d2:ac:d5:b7:56:36:49:c3:b3:e6:c7:60:d9:b6:3c:ba:61:e5:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Aug 20 13:48:41 2026 GMT
            Not After : Aug 19 13:53:41 2027 GMT
        Subject: CN=40B0CABC94F43E5421FD4092321D0945D2DE4BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:a6:8d:15:00:b9:0e:1e:8e:9f:46:75:28:b2:
                    ef:1a:ed:34:d7:b6:cd:06:fc:9e:7c:c9:69:60:ab:
                    82:69:7e:de:88:a3:27:03:6a:c5:c8:85:b5:4d:58:
                    20:42:67:d0:95:21:54:c3:90:ac:2a:bd:f5:30:5e:
                    27:45:95:f3:94:e5:ba:72:9b:78:8e:fc:6c:c1:54:
                    15:86:ef:1f:07:b7:05:71:34:b1:56:81:51:ed:d2:
                    7c:17:6c:72:06:00:a7:9b:4e:8a:50:47:4f:84:58:
                    79:a1:0a:a8:52:84:e5:11:2c:c4:87:06:0c:21:ca:
                    6a:d2:99:f4:c5:da:8d:9a:b3:ea:8d:93:5e:68:26:
                    54:fb:35:15:ae:73:a5:5c:90:81:48:7a:8c:55:c7:
                    7c:48:2f:ca:6f:e4:a2:ad:ca:8e:0b:cf:4b:5d:f6:
                    62:5f:f1:f5:95:33:15:ae:47:a4:18:16:53:33:b2:
                    02:4a:4f:4b:db:78:b3:57:43:64:89:b3:b5:45:21:
                    e7:ea:60:30:c2:b8:64:b9:92:d3:91:5d:9c:a5:03:
                    c4:a4:6f:e2:07:e8:73:cd:72:f4:56:df:74:42:4e:
                    cd:ed:3f:01:af:00:31:c6:3b:55:7d:a1:49:45:34:
                    69:93:c4:c8:ba:15:a5:ae:9b:de:d6:f2:ec:91:f6:
                    bf:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:B0:CA:BC:94:F4:3E:54:21:FD:40:92:32:1D:09:45:D2:DE:4B:FE
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:b8:09:b8:81:62:3e:03:b8:20:5b:d5:d9:4f:0e:a1:cf:0b:
         5b:c5:86:51:1d:b5:98:df:5f:92:b8:9d:bf:db:1b:98:6a:06:
         ab:a7:c7:ec:56:a7:9d:26:8c:da:86:80:58:c5:c6:71:9b:aa:
         38:5c:ac:29:14:31:b0:ce:26:6b:0f:1a:48:ab:4c:30:2e:00:
         ff:a5:32:ea:5c:a6:ea:cb:e7:5e:83:82:1a:fd:fd:04:72:ec:
         2f:62:99:b3:5c:c2:2c:a5:8b:85:55:19:08:cf:22:77:7f:2c:
         cf:45:c7:5d:7c:35:ac:84:e8:e7:07:3b:d1:69:da:e5:a3:78:
         10:bd:c6:5a:c7:e3:cb:e3:26:bb:de:73:59:bf:b5:1b:eb:c6:
         56:6e:92:5a:1c:1b:53:ed:fd:c6:89:e9:23:2b:3d:b5:62:7c:
         90:09:47:f3:c5:de:c7:a2:2c:1a:9e:54:a6:b3:16:aa:9b:ce:
         ce:7d:4d:8b:09:3c:b9:f5:02:42:02:20:29:39:b5:b1:e4:75:
         50:21:e7:92:b4:33:fe:b2:f9:10:ef:36:7c:25:5f:d0:9a:56:
         29:92:9a:0e:1b:09:9a:f6:2a:4e:91:12:91:58:25:f8:ef:8e:
         fa:70:d7:f7:11:f8:b3:12:ef:b6:8a:b7:63:ad:6f:d7:1e:0d:
         9b:35:e4:ee
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUfNKs1bdWNknDs+bHYNm2PLph5R4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNGJhMzM3Y2NmZmJhODUwYWVlMThmMTlhZmRlNzhkZjMy
YzBiYTE1NzY5MWFiYWM0MGYwHhcNMjYwODIwMTM0ODQxWhcNMjcwODE5MTM1MzQx
WjAzMTEwLwYDVQQDEyg0MEIwQ0FCQzk0RjQzRTU0MjFGRDQwOTIzMjFEMDk0NUQy
REU0QkZFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qaNFQC5Dh6O
n0Z1KLLvGu0017bNBvyefMlpYKuCaX7eiKMnA2rFyIW1TVggQmfQlSFUw5CsKr31
MF4nRZXzlOW6cpt4jvxswVQVhu8fB7cFcTSxVoFR7dJ8F2xyBgCnm06KUEdPhFh5
oQqoUoTlESzEhwYMIcpq0pn0xdqNmrPqjZNeaCZU+zUVrnOlXJCBSHqMVcd8SC/K
b+SircqOC89LXfZiX/H1lTMVrkekGBZTM7ICSk9L23izV0NkibO1RSHn6mAwwrhk
uZLTkV2cpQPEpG/iB+hzzXL0Vt90Qk7N7T8BrwAxxjtVfaFJRTRpk8TIuhWlrpve
1vLskfa/JQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFECwyryU9D5UIf1AkjIdCUXS
3kv+MB8GA1UdIwQYMBaAFN0PZAw9zgXK9SVNir/Qn4577j4RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1YTU0NmU2ZWY0LzAv
REQwRjY0MEMzRENFMDVDQUY1MjU0RDhBQkZEMDlGOEU3QkVFM0UxMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2NmOTBkN2JmLWRhZDYtNDg1MS1hYzMzLWYxY2E4YjMyZWM2OC80YmEz
MzdjY2ZmYmE4NTBhZWUxOGYxOWFmZGU3OGRmMzJjMGJhMTU3NjkxYWJhYzQwZi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yZWU0ZDA4MGY5NzE0Zjk5YjI5Y2E1
NWE1NDZlNmVmNC8wLzMxMzYzNTJlMzEzNDMwMmUzMjM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACljBkwDQYJKoZIhvcNAQELBQAD
ggEBAEa4CbiBYj4DuCBb1dlPDqHPC1vFhlEdtZjfX5K4nb/bG5hqBqunx+xWp50m
jNqGgFjFxnGbqjhcrCkUMbDOJmsPGkirTDAuAP+lMupcpurL516Dghr9/QRy7C9i
mbNcwiyli4VVGQjPInd/LM9Fx118NayE6OcHO9Fp2uWjeBC9xlrH48vjJrvec1m/
tRvrxlZuklocG1Pt/caJ6SMrPbVifJAJR/PF3seiLBqeVKazFqqbzs59TYsJPLn1
AkICICk5tbHkdVAh55K0M/6y+RDvNnwlX9CaVimSmg4bCZr2Kk6REpFYJfjvjvpw
1/cR+LMS77aKt2Otb9ceDZs15O4=
-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:18 2026 by rpki-client