Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203634323637.roa
File:                     3136352e3134302e32372e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          mBpMZRqA+M1/2QICKQg1IZo1Jr3sbm99OsHu/PLGEos=
Subject key identifier:   DF:A9:7E:DA:19:0D:1B:6F:E1:D4:17:21:46:A2:7B:C2:58:E4:8A:ED
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       2D22E56AB564D8E62C1E4819E3C370754BC18D94
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203634323637.roa
Signing time:             Fri 11 Sep 2026 12:36:20 +0000
ROA not before:           Fri 11 Sep 2026 12:31:20 +0000
ROA not after:            Fri 10 Sep 2027 12:36:20 +0000
asID:                     64267
IP address blocks:        165.140.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Sep 2026 02:09:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:22:e5:6a:b5:64:d8:e6:2c:1e:48:19:e3:c3:70:75:4b:c1:8d:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Sep 11 12:31:20 2026 GMT
            Not After : Sep 10 12:36:20 2027 GMT
        Subject: CN=DFA97EDA190D1B6FE1D4172146A27BC258E48AED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:02:b2:18:52:7a:ff:62:2a:0e:1c:10:d2:86:
                    d4:73:ee:74:da:75:48:90:27:c6:a2:67:47:d9:09:
                    54:7e:de:62:bc:ef:b8:32:eb:27:69:6a:d4:fd:d7:
                    ee:23:32:1c:8c:45:5c:74:f5:86:e7:69:13:7d:fd:
                    4e:80:a8:b7:76:61:3e:6e:62:27:bc:5d:0e:a9:77:
                    14:3b:f0:a5:dd:f6:aa:4d:4b:c7:73:37:f8:10:4c:
                    36:31:e8:1c:4c:6f:a8:c7:e6:b6:45:41:e0:8d:ab:
                    13:b3:5a:35:ee:c9:76:a8:3c:72:9c:f5:0f:bd:fc:
                    c1:ef:da:21:ef:ae:c2:80:b6:e6:26:8d:e3:06:2a:
                    d7:6c:9c:d3:31:ea:9b:e4:18:7c:4b:06:20:99:f9:
                    58:40:98:b2:6f:44:f8:2a:db:d0:c4:3f:ef:ee:62:
                    b9:ab:19:c8:76:95:4f:d2:f2:89:d8:11:0a:ee:a3:
                    6e:05:3c:72:07:a9:f3:cf:99:3e:1d:3d:20:59:d1:
                    94:b8:80:52:aa:6d:40:07:3b:17:7c:bf:e2:92:3f:
                    c1:2b:fd:61:97:81:0b:b1:eb:36:c5:43:04:a1:82:
                    c0:2f:95:8a:88:be:b7:07:ee:22:90:e7:08:b0:b8:
                    55:bc:7d:6c:13:32:55:51:1b:fd:05:20:35:34:ed:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A9:7E:DA:19:0D:1B:6F:E1:D4:17:21:46:A2:7B:C2:58:E4:8A:ED
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:f5:f5:f0:96:b7:9c:93:0d:b4:c8:76:8c:df:e6:03:93:e9:
         72:3d:f8:af:b5:0e:25:90:c5:c8:7e:15:19:03:f5:62:24:f9:
         0d:0d:5a:f7:7e:14:fa:7a:23:73:8d:d0:87:9f:af:0d:de:74:
         8f:c2:78:e8:eb:8c:d2:3e:46:b6:67:af:27:0c:8e:cb:b0:3d:
         1d:dd:33:b2:fa:a4:50:31:57:ac:2f:5c:0c:d1:cc:29:ca:96:
         5a:bd:20:39:4a:6d:f4:aa:0a:f9:b2:76:5b:3f:a4:a9:bc:fc:
         2a:c1:2f:cd:3a:06:73:8e:b7:cc:55:ea:76:65:86:69:2f:5b:
         c7:83:ce:67:82:91:d5:ae:fc:78:00:58:c7:a6:d1:05:07:e7:
         45:45:0d:83:02:98:03:bb:f1:4a:ad:b2:a4:8c:64:54:9c:f3:
         66:57:17:d1:71:d9:ff:01:06:90:7b:78:c8:23:2c:68:fb:c5:
         2f:68:37:11:4b:8d:d2:fd:cc:0b:e3:19:fc:a0:15:02:a3:8a:
         02:84:27:c5:1a:5a:d0:72:fc:4b:c2:ab:1d:38:04:fc:eb:5c:
         51:19:78:e7:c0:8a:21:03:50:a9:20:59:64:be:c1:6d:fd:43:
         9b:34:bd:04:84:e4:dd:be:1b:35:5d:6a:f5:15:8a:9e:be:fe:
         82:ca:a4:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 09:18:03 2026 by rpki-client