Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203136323736.roa
File:                     3136352e3134302e32372e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          YgTVsFQUJvR8QXN4MIq5oYQiuNkPOrJdbReyfWEaz+8=
Subject key identifier:   61:BD:EF:13:87:24:89:C9:9B:7E:0E:9B:8B:E8:CE:D5:11:60:40:DA
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       6327CD0F5B99D73BA66EED742377F653695DC56E
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203136323736.roa
Signing time:             Sat 06 Sep 2025 11:33:39 +0000
ROA not before:           Sat 06 Sep 2025 11:28:39 +0000
ROA not after:            Sat 05 Sep 2026 11:33:39 +0000
asID:                     16276
IP address blocks:        165.140.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 09 Sep 2025 15:23:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:27:cd:0f:5b:99:d7:3b:a6:6e:ed:74:23:77:f6:53:69:5d:c5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Sep  6 11:28:39 2025 GMT
            Not After : Sep  5 11:33:39 2026 GMT
        Subject: CN=61BDEF13872489C99B7E0E9B8BE8CED5116040DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:45:ee:9e:39:cd:3f:a5:6a:22:0c:53:49:07:
                    3f:a0:35:54:ae:21:7e:72:39:0e:48:95:c6:fd:c3:
                    fd:db:c3:2b:77:c5:2d:d3:6d:33:73:90:c1:ea:1b:
                    22:2a:08:9f:02:62:7c:8b:a8:5b:41:32:71:ed:a9:
                    4c:c4:5b:19:74:aa:ac:88:5b:ca:eb:51:5b:52:e0:
                    42:b3:e5:67:87:9f:d8:72:5d:d1:e4:76:e8:cf:e1:
                    ff:f2:f5:06:ed:b8:6d:9f:38:41:2b:c1:f1:a5:1d:
                    9c:f4:36:c1:5b:80:05:58:b7:97:72:18:8c:cf:3e:
                    b6:14:ad:aa:21:8d:66:40:8b:af:b9:f5:cf:b6:b8:
                    6f:2e:77:f8:bb:73:62:dd:93:46:34:b9:87:2a:f4:
                    2e:d0:f0:dd:e3:48:d2:a3:7a:77:b1:ad:b9:59:9c:
                    bf:91:68:ef:75:dc:28:41:ff:80:d2:50:72:9d:d4:
                    f6:2d:86:db:c1:9b:c7:35:05:78:a9:a1:e9:99:7e:
                    3e:4c:cf:2f:6c:28:81:f1:dc:a0:c7:14:ee:a1:fe:
                    3b:b7:8f:f2:90:61:7d:b6:d4:01:9a:85:72:03:38:
                    76:09:03:a9:22:f3:51:44:78:f6:2f:b0:9b:f4:d7:
                    99:fc:c0:f9:ad:02:23:20:d6:8a:59:4a:43:55:58:
                    0a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:BD:EF:13:87:24:89:C9:9B:7E:0E:9B:8B:E8:CE:D5:11:60:40:DA
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:d8:60:a3:2b:e4:70:5f:6f:e8:91:c1:15:dd:95:3b:e2:4c:
         1d:5c:d6:bf:35:fb:92:52:d5:5d:48:f5:40:cb:46:f0:0d:18:
         f3:7e:64:1c:2f:24:d0:6c:7c:a6:df:19:88:12:60:b1:97:49:
         0c:96:21:85:c5:df:99:bc:5c:33:df:19:4f:7c:a8:9a:8c:9a:
         3c:b9:bb:3e:1e:d3:09:06:f7:24:b1:5c:ec:b3:30:e4:a3:a3:
         3d:4a:31:6b:e5:0c:56:04:0a:0d:3e:e0:4a:d1:ef:ab:87:16:
         21:be:ca:95:c3:0f:9f:a3:dc:5f:10:20:f2:df:80:c9:c0:08:
         cf:44:6d:02:2d:c0:06:1c:9d:f8:7b:7f:62:0c:49:e6:1b:76:
         8a:1d:42:40:ab:6a:56:60:d8:1e:25:e1:cb:cd:11:fe:72:fc:
         33:1d:50:62:0d:ff:47:18:6d:ef:55:fa:ae:f1:f3:7a:14:53:
         42:20:ec:89:95:b0:f6:d9:f4:e4:06:2d:c6:33:9f:3b:9f:76:
         25:56:0a:be:12:85:a3:c6:8e:c5:fb:d6:31:69:61:31:79:c6:
         f3:bf:37:9b:fa:50:13:b1:50:96:09:f7:4c:08:b9:9a:42:ee:
         c8:32:4a:c8:a4:f2:36:3d:4c:26:5b:26:31:9f:da:8b:4b:ec:
         25:37:6f:c9
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUYyfND1uZ1zumbu10I3f2U2ldxW4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNGJhMzM3Y2NmZmJhODUwYWVlMThmMTlhZmRlNzhkZjMy
YzBiYTE1NzY5MWFiYWM0MGYwHhcNMjUwOTA2MTEyODM5WhcNMjYwOTA1MTEzMzM5
WjAzMTEwLwYDVQQDEyg2MUJERUYxMzg3MjQ4OUM5OUI3RTBFOUI4QkU4Q0VENTEx
NjA0MERBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UXunjnNP6Vq
IgxTSQc/oDVUriF+cjkOSJXG/cP928Mrd8Ut020zc5DB6hsiKgifAmJ8i6hbQTJx
7alMxFsZdKqsiFvK61FbUuBCs+Vnh5/Ycl3R5Hboz+H/8vUG7bhtnzhBK8HxpR2c
9DbBW4AFWLeXchiMzz62FK2qIY1mQIuvufXPtrhvLnf4u3Ni3ZNGNLmHKvQu0PDd
40jSo3p3sa25WZy/kWjvddwoQf+A0lByndT2LYbbwZvHNQV4qaHpmX4+TM8vbCiB
8dygxxTuof47t4/ykGF9ttQBmoVyAzh2CQOpIvNRRHj2L7Cb9NeZ/MD5rQIjINaK
WUpDVVgKowIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFGG97xOHJInJm34Om4voztUR
YEDaMB8GA1UdIwQYMBaAFN0PZAw9zgXK9SVNir/Qn4577j4RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1YTU0NmU2ZWY0LzAv
REQwRjY0MEMzRENFMDVDQUY1MjU0RDhBQkZEMDlGOEU3QkVFM0UxMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2NmOTBkN2JmLWRhZDYtNDg1MS1hYzMzLWYxY2E4YjMyZWM2OC80YmEz
MzdjY2ZmYmE4NTBhZWUxOGYxOWFmZGU3OGRmMzJjMGJhMTU3NjkxYWJhYzQwZi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yZWU0ZDA4MGY5NzE0Zjk5YjI5Y2E1
NWE1NDZlNmVmNC8wLzMxMzYzNTJlMzEzNDMwMmUzMjM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNjMyMzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKWMGzANBgkqhkiG9w0BAQsF
AAOCAQEAY9hgoyvkcF9v6JHBFd2VO+JMHVzWvzX7klLVXUj1QMtG8A0Y835kHC8k
0Gx8pt8ZiBJgsZdJDJYhhcXfmbxcM98ZT3yomoyaPLm7Ph7TCQb3JLFc7LMw5KOj
PUoxa+UMVgQKDT7gStHvq4cWIb7KlcMPn6PcXxAg8t+AycAIz0RtAi3ABhyd+Ht/
YgxJ5ht2ih1CQKtqVmDYHiXhy80R/nL8Mx1QYg3/Rxht71X6rvHzehRTQiDsiZWw
9tn05AYtxjOfO592JVYKvhKFo8aOxfvWMWlhMXnG8783m/pQE7FQlgn3TAi5mkLu
yDJKyKTyNj1MJlsmMZ/ai0vsJTdvyQ==
-----END CERTIFICATE-----
Generated at Tue Sep 9 08:09:46 2025 by rpki-client