Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32352e302f32342d3234203d3e20313534313332.roa
File:                     3134302e3233352e32352e302f32342d3234203d3e20313534313332.roa (raw, json)
Hash identifier:          taevadZa3JMqKlXyWEO+/M8Tf/yod32B0Xao9w6RfkI=
Subject key identifier:   AE:75:AB:A7:F8:1C:1A:2B:06:05:1F:1E:E4:57:90:B9:3A:41:CF:CD
Certificate issuer:       /CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Certificate serial:       2CF0A84B495FA54361217CB216FA4127B12ECF6A
Authority key identifier: A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32352e302f32342d3234203d3e20313534313332.roa
Signing time:             Sun 02 Aug 2026 04:04:36 +0000
ROA not before:           Sun 02 Aug 2026 03:59:36 +0000
ROA not after:            Sun 01 Aug 2027 04:04:36 +0000
asID:                     154132
IP address blocks:        140.235.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
                          rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 02:23:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f0:a8:4b:49:5f:a5:43:61:21:7c:b2:16:fa:41:27:b1:2e:cf:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
        Validity
            Not Before: Aug  2 03:59:36 2026 GMT
            Not After : Aug  1 04:04:36 2027 GMT
        Subject: CN=AE75ABA7F81C1A2B06051F1EE45790B93A41CFCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:70:0b:ad:50:4d:62:5e:48:8c:c6:3a:d8:7d:
                    af:6d:8a:4b:fd:03:38:a3:bb:f6:2a:f1:3c:75:12:
                    9e:e9:b9:ac:ee:6e:3e:ca:4d:04:0f:9b:b9:2c:b5:
                    d4:90:4b:04:2f:e4:0b:25:96:3c:84:8c:91:95:50:
                    24:55:8b:80:ae:83:67:f1:d5:d3:9e:bb:e4:14:00:
                    99:c3:7a:9f:99:e5:cc:79:48:c2:e1:55:1a:fd:cf:
                    6c:a4:df:fa:86:e6:7c:15:0e:4b:d5:d1:68:c6:70:
                    3b:5d:37:48:76:8e:0a:0b:10:8b:0d:b0:49:1d:66:
                    7a:15:fb:d7:33:6c:7e:9d:d4:9d:23:22:c8:6b:09:
                    ce:03:b3:12:d2:a3:d3:56:34:9c:36:47:10:03:dc:
                    32:41:89:44:84:e5:98:75:54:9f:ba:d7:8f:25:96:
                    e5:5e:86:23:1c:b6:48:0a:bd:6c:c2:7c:e5:eb:bc:
                    e8:ab:ea:62:73:8e:ab:96:62:38:06:28:db:b1:e2:
                    26:6b:de:ca:bc:13:1a:51:df:11:c7:a2:a4:c5:98:
                    bf:3a:89:55:6a:b0:e9:4e:b4:42:7b:18:27:a2:da:
                    e9:94:6d:6c:e7:00:0b:cd:4b:ae:76:ca:22:1f:d4:
                    34:8a:0d:05:bf:0b:74:0e:54:7a:ae:9a:df:ee:61:
                    b3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:75:AB:A7:F8:1C:1A:2B:06:05:1F:1E:E4:57:90:B9:3A:41:CF:CD
            X509v3 Authority Key Identifier:
                keyid:A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32352e302f32342d3234203d3e20313534313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:1f:1b:64:45:43:44:c2:01:10:c7:47:6b:1e:28:32:a9:6f:
         dd:cd:2c:eb:07:0f:cd:e7:ed:ca:6b:1d:a2:7f:8a:e7:6e:59:
         f9:97:bc:53:83:62:9d:14:98:ae:66:49:24:cb:3a:f5:f5:31:
         53:30:86:ee:9f:9e:2a:ad:f5:6b:8b:a5:b6:0d:03:c5:23:ad:
         03:65:85:7b:56:00:d1:b2:48:ee:f6:d9:1a:bd:0a:f9:8d:24:
         43:59:cf:a3:ce:96:f1:a1:59:51:c5:ca:39:ca:e7:44:fa:bd:
         16:f5:8a:eb:f1:9c:47:98:6c:d0:5f:9b:bb:48:c3:be:fc:fe:
         7a:89:f4:7e:51:f4:66:97:98:93:b1:ed:5e:70:08:62:e4:b0:
         0e:0b:1f:43:d6:d4:48:a4:67:16:d8:32:9b:60:78:88:87:dd:
         32:47:f2:a4:ca:0d:7f:ef:94:fd:dc:84:eb:2d:4d:bf:c6:db:
         68:22:4b:e8:4f:98:7c:76:de:c9:49:90:51:bb:d2:02:ad:89:
         c1:3e:42:84:53:45:f4:86:c7:f5:26:ea:19:7a:6b:08:27:4a:
         b5:63:aa:6e:3f:6b:7e:91:20:52:0e:1f:71:53:ea:c4:d6:b7:
         01:60:f5:5b:9e:c9:e7:1a:59:4b:5e:bf:f8:d0:6a:76:43:a9:
         d2:52:23:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 16:47:20 2026 by rpki-client