Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e20313938353834.roa
File:                     3136352e3134302e32372e302f32342d3234203d3e20313938353834.roa (raw, json)
Hash identifier:          IV4Um7xe1XmrLaHaKY/U0gMCt3OadlgLJmT8VRldlW4=
Subject key identifier:   9B:3C:ED:07:12:BC:DF:81:97:1B:11:DF:E6:94:83:D8:52:9A:8E:1D
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       2EE00702E1A895E805513D2871F39D62BF7217BD
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e20313938353834.roa
Signing time:             Wed 03 Sep 2025 10:53:13 +0000
ROA not before:           Wed 03 Sep 2025 10:48:13 +0000
ROA not after:            Wed 02 Sep 2026 10:53:13 +0000
asID:                     198584
IP address blocks:        165.140.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 03:56:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:e0:07:02:e1:a8:95:e8:05:51:3d:28:71:f3:9d:62:bf:72:17:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Sep  3 10:48:13 2025 GMT
            Not After : Sep  2 10:53:13 2026 GMT
        Subject: CN=9B3CED0712BCDF81971B11DFE69483D8529A8E1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:97:78:b2:e6:ab:2f:8d:46:2e:1a:b0:a0:a2:
                    fb:20:e3:72:1d:02:14:89:f1:b7:67:c1:f5:90:19:
                    1a:f3:47:60:b5:c3:4c:8d:e4:1e:75:4c:d7:4e:b0:
                    f1:69:3b:4b:fa:5d:e9:a3:3a:c2:f9:ba:57:8f:45:
                    30:ea:5f:61:16:c1:d7:f9:e8:40:fc:c8:ab:95:b7:
                    9c:c4:36:b9:f8:36:e9:9c:e5:15:4f:b3:dd:33:87:
                    2a:c8:da:20:e2:a5:5b:bf:dd:11:09:7c:a1:bf:d1:
                    23:ae:4e:0b:4d:75:f1:0d:ed:54:ab:e2:e7:c3:8c:
                    d1:30:6c:38:38:34:59:35:f5:ff:d9:15:aa:3a:17:
                    5e:03:a1:48:db:cd:38:cb:24:15:8a:04:6b:c7:81:
                    d4:e3:cb:ea:47:67:07:3b:17:41:a3:12:39:f6:6f:
                    0e:cd:65:e8:b5:22:90:1d:f7:72:c8:00:4f:72:a6:
                    37:0f:eb:65:e1:70:58:57:93:cc:65:63:8c:11:0e:
                    f4:4e:0a:45:58:f7:97:25:0a:59:21:72:8a:c5:c0:
                    3a:5a:d8:13:72:b2:ae:62:aa:4a:8e:1a:62:99:55:
                    23:ca:c1:69:2d:7d:b6:6c:1f:3a:4f:7e:e1:a1:a2:
                    74:55:91:07:61:a0:4b:71:58:61:0d:30:a5:78:c9:
                    25:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:3C:ED:07:12:BC:DF:81:97:1B:11:DF:E6:94:83:D8:52:9A:8E:1D
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e20313938353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:2c:82:85:9a:6a:ee:de:80:f7:3f:ae:0e:58:8e:32:15:f3:
         49:f7:96:e6:c2:3a:28:0b:34:cc:99:ac:08:ac:52:26:a6:88:
         98:60:14:0e:63:63:51:02:b0:39:d6:c1:08:b7:9c:1b:dc:db:
         6d:06:dc:4e:04:eb:b9:ce:53:d3:8a:fa:6a:25:90:e1:c7:6d:
         8a:b9:2a:84:26:1f:11:1b:7c:0d:8f:4e:a8:fa:e5:43:ef:03:
         7c:11:2c:94:d3:9a:f2:5f:4d:67:5f:b9:6c:59:37:0f:73:37:
         f5:a5:ec:fc:24:53:a7:74:ec:6a:38:9e:f6:60:cb:17:45:a8:
         ae:c1:11:33:14:90:9a:f9:72:f6:76:20:dc:eb:a0:3d:21:bb:
         85:12:21:c6:c3:d3:94:19:ea:79:62:fe:ff:9c:a2:99:05:33:
         2d:02:0d:aa:f7:d7:e9:44:69:84:9f:67:91:78:f4:d2:e6:01:
         a4:75:6f:87:25:1c:9d:54:54:b8:86:96:0d:2c:d1:bf:49:d3:
         be:94:2a:c8:cc:54:49:6f:00:8c:7c:a1:2f:ce:fd:f1:ab:77:
         0d:40:7f:a8:0e:55:a6:db:84:07:c6:f7:fb:55:59:41:40:54:
         68:96:83:c2:5a:04:38:70:c3:21:2c:47:43:9a:52:80:2a:86:
         a1:d2:03:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:16 2025 by rpki-client