Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e20313939353239.roa
File:                     3134302e3233352e32372e302f32342d3234203d3e20313939353239.roa (raw, json)
Hash identifier:          3kh/HaF9Hz25o4npHqf3kydDBr8MYG56N4dDMkbXQsw=
Subject key identifier:   6E:D6:9C:7F:DD:88:BF:AE:23:3F:4F:E4:E6:AE:AA:DF:1C:D9:77:35
Certificate issuer:       /CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Certificate serial:       6575E85D6E3DC0365532FA708A1952B8433555A3
Authority key identifier: A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e20313939353239.roa
Signing time:             Tue 01 Sep 2026 19:54:43 +0000
ROA not before:           Tue 01 Sep 2026 19:49:43 +0000
ROA not after:            Tue 31 Aug 2027 19:54:43 +0000
asID:                     199529
IP address blocks:        140.235.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
                          rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Sep 2026 12:47:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:75:e8:5d:6e:3d:c0:36:55:32:fa:70:8a:19:52:b8:43:35:55:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
        Validity
            Not Before: Sep  1 19:49:43 2026 GMT
            Not After : Aug 31 19:54:43 2027 GMT
        Subject: CN=6ED69C7FDD88BFAE233F4FE4E6AEAADF1CD97735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:41:c2:f4:bd:ce:0c:81:76:86:b4:8a:60:6d:
                    b5:92:e1:ca:aa:6d:b5:f7:ed:9d:c2:26:ff:d1:51:
                    2b:6b:b4:8c:27:1b:bc:a2:bf:56:51:d8:84:ed:27:
                    a1:82:22:c6:37:61:9e:56:a4:7c:7a:9b:ae:a6:91:
                    7a:c6:6c:6d:58:f9:9a:6d:4d:43:e7:8e:de:4a:cf:
                    80:d2:ed:0e:28:4b:9d:77:b8:da:b0:2c:ff:3a:2f:
                    91:c1:b1:d9:58:19:2b:ad:ef:de:f5:60:c2:c5:a2:
                    6f:14:70:9f:26:93:43:f9:cb:6f:b4:66:75:93:af:
                    07:e1:d1:86:0b:56:7c:70:69:61:1d:02:f7:d9:b4:
                    20:17:65:35:39:03:50:e7:d6:5a:e5:e7:10:af:ad:
                    fc:8c:61:85:42:c3:e7:88:ba:1a:ba:50:81:ed:5c:
                    1d:f6:4a:59:34:3d:f6:0e:08:d0:dc:6b:3a:9f:d2:
                    69:cf:7c:44:3c:c2:7a:31:ad:5c:d7:35:ff:1a:16:
                    7e:e5:2a:42:6c:46:a9:f4:18:80:e7:de:f5:7f:5d:
                    6f:4d:b9:8b:2a:d8:e7:29:96:e8:c5:90:c0:8a:d3:
                    b0:a7:19:a3:4c:2f:21:2e:43:03:1e:6a:21:bd:db:
                    59:b5:ba:66:5d:fe:01:cc:cc:36:90:92:44:54:29:
                    f9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D6:9C:7F:DD:88:BF:AE:23:3F:4F:E4:E6:AE:AA:DF:1C:D9:77:35
            X509v3 Authority Key Identifier:
                keyid:A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e20313939353239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:e6:a1:66:a9:8c:30:6a:d7:c3:23:c6:67:60:0a:56:47:b5:
         98:2a:7b:04:8f:e5:6f:20:35:56:72:86:22:4f:48:af:6a:11:
         60:15:ee:28:e4:d9:6b:3e:33:43:d8:98:1e:23:3b:41:e7:aa:
         6f:52:c7:73:e8:cf:4a:d7:40:03:6e:cb:35:ed:cb:19:dc:ea:
         4e:a6:33:8c:c0:23:0b:de:41:a9:4b:58:f0:d8:3c:3b:ad:12:
         24:c6:b3:d8:2d:ad:47:27:76:5f:d0:13:6d:e9:ed:35:e6:1e:
         93:d1:f1:77:db:fb:40:dd:7f:43:2a:12:21:51:f1:5f:88:13:
         21:da:88:13:79:52:5b:70:2b:22:69:b0:2e:6b:7c:04:1f:c2:
         89:65:3d:a0:43:1e:0c:5a:87:10:fa:04:f3:1e:dc:d0:e0:43:
         18:e3:08:60:aa:8e:fc:0d:4b:8d:18:5c:e0:62:4d:a4:7e:e5:
         75:85:e3:ac:4b:cd:8a:71:dd:54:54:1c:16:3f:81:fc:b2:e5:
         af:af:ea:95:77:39:0c:8d:b0:1b:73:7e:b1:8e:a9:5a:ae:3a:
         5d:20:07:88:09:15:46:c5:e8:41:0d:3b:29:e9:7b:f7:4e:72:
         3c:dd:13:45:eb:ee:81:fe:c1:fa:ff:1d:6a:c7:b1:01:a6:bf:
         61:2b:50:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 18:33:41 2026 by rpki-client