Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e20383334.roa
File:                     3136352e3134302e32352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          JVgr6bRKEoERJGqqXKQkeNqC2V7Icd94gQ5oLgAm2eI=
Subject key identifier:   7D:0D:CA:04:BE:07:51:A6:24:D8:57:4B:6F:A3:75:26:B9:B5:5D:1F
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       16B7B2A029A93C2611F63C474414E11586A639B1
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e20383334.roa
Signing time:             Wed 03 Sep 2025 10:53:09 +0000
ROA not before:           Wed 03 Sep 2025 10:48:09 +0000
ROA not after:            Wed 02 Sep 2026 10:53:09 +0000
asID:                     834
IP address blocks:        165.140.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 15:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:b7:b2:a0:29:a9:3c:26:11:f6:3c:47:44:14:e1:15:86:a6:39:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Sep  3 10:48:09 2025 GMT
            Not After : Sep  2 10:53:09 2026 GMT
        Subject: CN=7D0DCA04BE0751A624D8574B6FA37526B9B55D1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:c9:51:d0:04:33:ca:d8:7a:03:e0:02:7b:
                    a9:17:f1:24:dc:1e:58:12:18:01:80:9f:81:e1:aa:
                    74:d5:ae:18:ef:07:b0:fc:89:6d:6b:de:b6:7c:e6:
                    3f:67:36:2b:fe:fc:61:01:a1:34:d2:98:d1:d9:fc:
                    05:44:ae:c1:ed:45:9b:4d:79:52:5f:ee:7d:41:91:
                    2e:d1:dd:e7:f0:d1:4a:51:40:50:21:27:13:92:f1:
                    14:cc:21:f6:2e:4e:40:dd:64:e7:ea:57:27:03:51:
                    71:c0:e5:c0:b2:70:9c:37:46:1a:7c:bf:30:d3:9f:
                    06:5c:d5:46:b6:4d:df:c7:d0:8c:b8:db:04:97:4c:
                    5c:fa:59:09:85:80:44:53:ab:d3:e5:a2:86:ea:45:
                    39:53:31:7d:5c:64:60:aa:a1:57:a5:ec:84:6d:58:
                    1d:00:2d:c8:3c:3d:50:f5:24:23:38:55:8a:80:32:
                    f3:e5:dc:a8:d8:94:67:75:e3:6d:9c:79:d8:c8:22:
                    6d:e4:cc:f3:e2:9c:cf:9a:7c:80:e3:35:6d:bc:33:
                    08:fc:2b:27:e9:cf:7b:38:e2:50:19:aa:91:f7:77:
                    ce:c8:bd:32:db:34:07:d2:03:4f:77:11:df:9f:c0:
                    b7:d8:74:4d:08:92:63:12:b0:29:e8:45:72:a9:86:
                    8e:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:0D:CA:04:BE:07:51:A6:24:D8:57:4B:6F:A3:75:26:B9:B5:5D:1F
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:b5:82:02:8d:5e:87:be:75:d3:56:18:39:bd:32:3a:f9:20:
         6f:31:1f:c5:ed:cc:e0:cd:cf:ad:6b:d2:4d:99:b8:54:5b:8a:
         16:c9:1a:18:a6:e6:1c:9a:6f:4d:b9:31:b0:09:37:31:d7:b7:
         bb:d2:7b:38:7a:04:c7:0a:27:05:cf:4d:e4:6b:32:c3:cc:4b:
         d2:70:c4:2c:9a:f6:e0:a3:fe:58:30:75:09:ee:a3:c1:9d:b4:
         b5:d1:0d:ca:bc:10:4e:2a:7d:98:ae:1d:13:ba:dc:08:7e:1b:
         bf:c1:2e:65:1a:77:b2:ef:6c:36:0f:26:fa:50:13:c9:76:e7:
         f6:f9:a0:bc:cb:f4:47:01:99:0f:6b:90:c3:50:1f:14:b8:9a:
         7d:c3:7d:0a:b7:53:a6:57:bc:85:fc:a2:0a:c6:bb:5c:49:5a:
         36:7c:31:33:3d:47:db:7b:be:b9:b2:90:4f:11:11:9f:c0:3e:
         e6:af:d0:cc:08:32:24:67:aa:ce:75:ab:4d:98:7d:2b:1f:6a:
         67:78:24:1a:a0:09:50:b4:f8:4c:6d:4b:fb:0f:65:ee:88:12:
         f6:52:00:e6:c9:01:13:ab:36:d3:7e:51:7d:08:f4:db:d1:69:
         fb:e0:e9:75:b6:df:6c:6b:55:18:0b:42:26:b2:2a:f6:8f:bc:
         ab:b1:24:bd
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUFreyoCmpPCYR9jxHRBThFYamObEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNGJhMzM3Y2NmZmJhODUwYWVlMThmMTlhZmRlNzhkZjMy
YzBiYTE1NzY5MWFiYWM0MGYwHhcNMjUwOTAzMTA0ODA5WhcNMjYwOTAyMTA1MzA5
WjAzMTEwLwYDVQQDEyg3RDBEQ0EwNEJFMDc1MUE2MjREODU3NEI2RkEzNzUyNkI5
QjU1RDFGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/XJUdAEM8rY
egPgAnupF/Ek3B5YEhgBgJ+B4ap01a4Y7wew/Ilta962fOY/ZzYr/vxhAaE00pjR
2fwFRK7B7UWbTXlSX+59QZEu0d3n8NFKUUBQIScTkvEUzCH2Lk5A3WTn6lcnA1Fx
wOXAsnCcN0YafL8w058GXNVGtk3fx9CMuNsEl0xc+lkJhYBEU6vT5aKG6kU5UzF9
XGRgqqFXpeyEbVgdAC3IPD1Q9SQjOFWKgDLz5dyo2JRndeNtnHnYyCJt5Mzz4pzP
mnyA4zVtvDMI/Csn6c97OOJQGaqR93fOyL0y2zQH0gNPdxHfn8C32HRNCJJjErAp
6EVyqYaOkQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFH0NygS+B1GmJNhXS2+jdSa5
tV0fMB8GA1UdIwQYMBaAFN0PZAw9zgXK9SVNir/Qn4577j4RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1YTU0NmU2ZWY0LzAv
REQwRjY0MEMzRENFMDVDQUY1MjU0RDhBQkZEMDlGOEU3QkVFM0UxMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2NmOTBkN2JmLWRhZDYtNDg1MS1hYzMzLWYxY2E4YjMyZWM2OC80YmEz
MzdjY2ZmYmE4NTBhZWUxOGYxOWFmZGU3OGRmMzJjMGJhMTU3NjkxYWJhYzQwZi5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1
YTU0NmU2ZWY0LzAvMzEzNjM1MmUzMTM0MzAyZTMyMzUyZTMwMmYzMjM0MmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACljBkwDQYJKoZIhvcNAQELBQADggEB
AEG1ggKNXoe+ddNWGDm9Mjr5IG8xH8XtzODNz61r0k2ZuFRbihbJGhim5hyab025
MbAJNzHXt7vSezh6BMcKJwXPTeRrMsPMS9JwxCya9uCj/lgwdQnuo8GdtLXRDcq8
EE4qfZiuHRO63Ah+G7/BLmUad7LvbDYPJvpQE8l25/b5oLzL9EcBmQ9rkMNQHxS4
mn3DfQq3U6ZXvIX8ogrGu1xJWjZ8MTM9R9t7vrmykE8REZ/APuav0MwIMiRnqs51
q02YfSsfamd4JBqgCVC0+ExtS/sPZe6IEvZSAObJAROrNtN+UX0I9NvRafvg6XW2
32xrVRgLQiayKvaPvKuxJL0=
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:09:48 2025 by rpki-client