Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e20313938353636.roa
File:                     3134302e3233352e32372e302f32342d3234203d3e20313938353636.roa (raw, json)
Hash identifier:          frGJH3j93mCqz0WgjvIukAUqRYFAPjhwlaSSljlCCUs=
Subject key identifier:   86:32:78:EE:46:DE:FB:75:23:1D:B0:91:64:6E:46:67:53:F4:65:01
Certificate issuer:       /CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Certificate serial:       20411F5763E4A0770CA4B60EEE32E8B7B331766D
Authority key identifier: A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e20313938353636.roa
Signing time:             Sun 04 Oct 2026 20:19:55 +0000
ROA not before:           Sun 04 Oct 2026 20:14:55 +0000
ROA not after:            Sun 03 Oct 2027 20:19:55 +0000
asID:                     198566
IP address blocks:        140.235.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
                          rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:58:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:41:1f:57:63:e4:a0:77:0c:a4:b6:0e:ee:32:e8:b7:b3:31:76:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
        Validity
            Not Before: Oct  4 20:14:55 2026 GMT
            Not After : Oct  3 20:19:55 2027 GMT
        Subject: CN=863278EE46DEFB75231DB091646E466753F46501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:16:3e:c9:2f:96:bc:6d:b2:1f:70:29:4b:6e:
                    36:61:aa:ea:5f:c0:c3:cf:8c:97:2d:d1:c8:d0:bc:
                    7f:6f:ab:1e:e3:11:93:60:78:16:8c:45:29:0d:33:
                    c8:3b:e7:98:44:8c:54:d6:82:ee:3c:95:cf:9d:d1:
                    ea:ea:1c:3b:88:e6:e3:be:fe:11:4f:d0:17:02:29:
                    c3:20:db:e3:1e:b5:db:2f:14:71:2e:d2:c4:68:43:
                    04:cd:32:e2:6f:4b:00:7d:dc:4c:59:20:23:6d:7a:
                    9a:5b:64:27:35:2b:82:8d:1f:dc:71:60:23:28:b3:
                    86:a4:83:b4:ba:14:06:a7:11:f3:71:02:6f:01:be:
                    e5:5c:50:20:72:78:a6:dc:34:7b:dd:63:49:2d:e7:
                    ea:ff:54:ee:b4:f9:cb:e9:b7:9a:cd:75:b4:6a:3f:
                    10:90:b3:a2:cd:16:bc:dd:04:77:f6:dd:79:32:72:
                    2b:2f:5c:73:8b:52:da:e4:27:de:8d:d8:ab:4c:47:
                    82:5f:b4:d1:4f:85:11:36:a1:6f:5d:66:43:e9:f1:
                    c7:77:8f:42:5e:34:76:ea:30:23:e1:44:3e:88:26:
                    86:c5:9f:79:84:d1:bf:65:72:04:c6:4f:79:65:53:
                    b8:b3:bd:12:17:d5:e4:40:70:9d:84:83:b6:7d:a7:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:32:78:EE:46:DE:FB:75:23:1D:B0:91:64:6E:46:67:53:F4:65:01
            X509v3 Authority Key Identifier:
                keyid:A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e20313938353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:6e:b9:ed:fb:03:91:3a:d5:89:9a:f4:11:2a:59:44:13:b9:
         45:a5:52:07:35:a4:c8:98:7a:13:d5:e7:09:18:3e:e9:f4:3a:
         5a:01:0a:8c:cf:27:37:99:d8:db:4d:04:e8:74:e0:b2:04:4a:
         f0:c8:bf:88:86:17:9c:d9:10:05:b0:de:98:c8:85:34:c5:57:
         a8:d2:8e:e3:df:0a:13:68:7d:5d:57:78:87:fe:c3:46:69:ad:
         78:06:2e:98:2b:bc:58:f3:e0:ab:0e:5c:4c:88:00:39:fd:a4:
         45:61:25:68:e8:1f:ab:43:b8:f3:3e:0e:75:e2:12:85:55:a2:
         82:e9:67:48:a5:85:52:26:04:44:ea:ce:65:a9:1e:17:00:a2:
         6b:ee:0e:2b:0a:1a:85:f6:c9:8c:9c:a5:00:80:a1:0d:38:cb:
         b1:56:96:05:23:cc:0a:8a:38:ca:61:4e:ea:8c:b7:da:52:9b:
         8c:56:db:b5:41:99:91:90:8c:ae:84:4e:a7:d2:bc:75:0d:a5:
         93:92:2c:b8:43:e6:6c:3a:64:d3:2e:05:20:c3:fc:3b:d9:34:
         f0:c0:4d:8d:29:27:e1:f3:53:bd:f4:10:18:26:22:c5:ea:c4:
         51:0c:85:1b:d7:7a:50:ac:40:e9:34:dd:3e:ca:7a:b1:fd:4f:
         5e:d2:0c:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:21:48 2026 by rpki-client