Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e2039333034.roa
File:                     3136352e3134302e32352e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          oXxBG78HnQQPoVcVjfijLvrQF/Qc12X4uwNAXz0AYZw=
Subject key identifier:   E3:63:F1:FD:A9:9B:0D:AE:F5:1E:2B:B2:13:13:A6:1F:AB:68:7C:8F
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       349EAEB5B709DCB389F77A7E1D0CA914266BDF28
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 21 Sep 2025 07:02:33 +0000
ROA not before:           Sun 21 Sep 2025 06:57:33 +0000
ROA not after:            Sun 20 Sep 2026 07:02:33 +0000
asID:                     9304
IP address blocks:        165.140.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9e:ae:b5:b7:09:dc:b3:89:f7:7a:7e:1d:0c:a9:14:26:6b:df:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Sep 21 06:57:33 2025 GMT
            Not After : Sep 20 07:02:33 2026 GMT
        Subject: CN=E363F1FDA99B0DAEF51E2BB21313A61FAB687C8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:74:c7:b0:1e:d8:e2:3f:5a:bf:6d:aa:79:09:
                    0f:24:33:c4:45:87:22:e5:fc:25:77:45:11:6d:2b:
                    c8:83:6f:4a:29:5c:e0:ac:84:d8:bd:aa:66:8d:bb:
                    9d:5b:7e:e0:c2:4c:bf:da:0f:8d:6a:23:48:69:02:
                    bb:39:b4:f0:20:56:c5:94:26:54:3e:56:e2:75:93:
                    b8:26:f6:f0:fa:de:71:0c:4d:aa:8e:b4:a3:1c:1c:
                    d5:30:80:52:ea:57:5a:73:06:09:ed:d9:60:2b:bc:
                    10:aa:01:b9:75:6f:10:51:22:e8:65:a5:5d:65:3b:
                    ad:9c:1e:db:57:d9:4e:6e:a0:99:dd:b3:81:fc:71:
                    a4:11:0d:81:bd:d9:f5:e8:38:68:4f:4a:bb:8d:23:
                    ac:a3:5d:47:f2:9f:5b:48:fa:a7:10:af:34:6b:9e:
                    75:4f:ad:c1:29:1b:ca:3e:2a:2c:08:11:cc:12:6b:
                    15:c8:76:0d:47:55:4c:4d:a4:e5:26:d0:ad:24:50:
                    e5:f9:73:b9:c7:e3:7d:1b:a3:7c:38:f9:3f:8d:86:
                    a9:9e:1a:34:19:71:10:e6:9d:ed:30:da:e9:25:48:
                    79:26:e9:42:89:c9:8a:08:a7:d5:aa:c5:b5:f4:06:
                    36:f3:b4:52:04:8f:2c:2c:35:b2:85:76:25:51:3a:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:63:F1:FD:A9:9B:0D:AE:F5:1E:2B:B2:13:13:A6:1F:AB:68:7C:8F
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32352e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:e6:52:47:53:58:ed:a2:82:ca:de:35:19:38:18:cf:5f:fa:
         0f:bd:68:1f:1d:29:ba:15:7f:19:88:87:62:c7:49:c0:66:ba:
         57:27:5a:ea:00:24:3b:72:44:29:0e:fd:2c:67:4d:78:37:1f:
         cf:7b:87:0c:6b:2d:73:d1:6a:91:ac:30:e1:a3:5e:57:53:fd:
         ed:08:6a:0f:b1:8e:53:80:d1:85:13:98:fd:d7:9e:8e:31:3a:
         95:41:f1:cf:2a:30:88:f1:76:ce:50:24:c8:cb:19:a3:88:f7:
         09:7b:00:81:2e:11:81:b2:45:65:4e:b9:0f:27:11:49:35:b8:
         51:e7:96:32:3f:4c:85:94:b3:f6:ef:95:c9:49:9c:10:83:3c:
         4a:06:8e:c1:11:76:5e:6a:37:00:21:40:4b:82:f4:37:a2:4f:
         40:5d:d5:e9:67:dd:b2:8b:63:0b:bb:f8:ab:ea:9c:be:a2:90:
         af:e6:0c:e1:e3:44:e6:a4:e1:32:33:df:24:e7:18:ba:98:92:
         a8:77:4b:b3:5e:a1:bd:e3:f5:88:a9:7c:3f:82:0a:cb:7d:63:
         13:70:90:07:74:24:af:5c:02:07:95:6e:6c:44:e7:c1:c7:65:
         b3:83:4a:7f:e6:de:73:ac:e0:de:95:70:01:cf:f8:27:32:6e:
         f5:b0:09:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:10 2025 by rpki-client