Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32362e302f32342d3234203d3e20323135303731.roa
File:                     3136352e3134302e32362e302f32342d3234203d3e20323135303731.roa (raw, json)
Hash identifier:          mR0orEvtKIkL20zPlaAFU9FEP0NSksRcINaI6HJd348=
Subject key identifier:   EF:7F:3A:EB:F5:78:D0:FC:A2:F0:0E:1C:4D:7B:C8:5E:C9:B2:C5:2F
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       1EA0E7F4262BEF820A316D8F5EA3CBBEC6EBC470
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32362e302f32342d3234203d3e20323135303731.roa
Signing time:             Wed 03 Sep 2025 10:53:16 +0000
ROA not before:           Wed 03 Sep 2025 10:48:16 +0000
ROA not after:            Wed 02 Sep 2026 10:53:16 +0000
asID:                     215071
IP address blocks:        165.140.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:a0:e7:f4:26:2b:ef:82:0a:31:6d:8f:5e:a3:cb:be:c6:eb:c4:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Sep  3 10:48:16 2025 GMT
            Not After : Sep  2 10:53:16 2026 GMT
        Subject: CN=EF7F3AEBF578D0FCA2F00E1C4D7BC85EC9B2C52F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:89:3d:54:4e:a9:15:37:65:20:8d:6b:65:
                    df:f4:62:a7:56:8d:50:5b:23:27:77:79:3d:83:99:
                    2a:74:59:40:13:f8:de:7b:5e:9c:34:9f:4c:1f:c6:
                    86:ca:d8:14:46:1d:81:a5:65:a2:9e:b3:5f:90:43:
                    e1:17:be:a8:95:c8:b6:90:eb:f5:f3:32:55:91:ce:
                    de:94:07:8a:ac:41:1c:02:ab:2e:64:02:64:36:56:
                    b7:e4:b7:f4:84:8f:4e:4f:c8:ee:71:7d:dc:43:c5:
                    52:5a:d3:92:27:cc:5b:f1:63:2b:a2:cf:4e:83:83:
                    a1:70:e4:ff:f8:4f:11:06:bb:69:f9:76:60:7d:08:
                    37:1f:6d:86:8a:03:e0:da:5f:14:2d:fa:0a:8c:32:
                    be:6e:c0:05:d4:93:04:22:3f:e8:83:07:c2:c8:f8:
                    26:a1:b4:44:df:4f:76:fd:6a:ed:60:01:c3:df:04:
                    f9:b6:fb:66:15:77:3f:a9:d4:53:67:a7:40:44:ae:
                    6d:c2:47:37:1f:0e:ea:0e:49:03:d9:fa:3b:81:f6:
                    4b:9a:cb:25:59:3a:03:30:f9:a5:5f:8e:b7:24:8f:
                    7c:d4:ea:fc:04:a0:46:1d:85:0d:08:e6:26:41:81:
                    cd:a5:79:dd:97:66:86:2d:ae:2a:f9:44:2f:ef:41:
                    85:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:7F:3A:EB:F5:78:D0:FC:A2:F0:0E:1C:4D:7B:C8:5E:C9:B2:C5:2F
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32362e302f32342d3234203d3e20323135303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:b3:fc:29:ee:09:3e:fd:6d:67:6d:01:cb:68:34:b8:4a:c3:
         d6:94:cf:fb:f1:bc:44:93:e4:f1:ac:ce:52:96:50:3d:9f:b2:
         e0:67:44:24:eb:ae:6e:e2:14:80:34:a7:8e:bb:78:9c:37:c2:
         36:9b:3c:21:ac:fd:38:57:33:d5:30:27:be:d4:10:2d:82:4a:
         0d:c0:24:94:80:7f:25:7d:0d:c0:fd:a3:9a:af:87:4a:ab:5a:
         28:7e:8a:14:d1:0f:48:e3:e3:69:9e:30:87:19:44:fb:ff:b2:
         ab:15:14:e7:e9:d2:5f:ae:e9:ce:66:a0:20:17:11:2e:75:cf:
         98:a1:df:6a:94:29:1a:93:b4:6d:26:f5:79:ac:f6:08:4b:a9:
         f8:12:2f:9a:f4:1d:c4:39:b5:ad:23:7c:8f:0a:00:42:db:46:
         1d:47:e0:9b:55:a0:77:64:9c:26:02:24:4a:1a:c2:de:78:ab:
         d7:f6:fb:48:21:5b:d7:c6:24:24:bd:94:af:12:f2:7a:84:25:
         5b:3c:a1:93:8a:60:7f:49:07:89:e7:fa:70:28:7a:f7:10:d3:
         73:f5:7b:ea:b1:f5:a8:58:3b:ae:b4:54:ab:b7:77:b6:71:7f:
         21:86:5b:67:4e:96:20:e6:11:c9:10:18:9d:aa:e5:c0:b1:3d:
         1f:6a:42:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:47:47 2025 by rpki-client