Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e20323030313639.roa
File:                     3134302e3233352e32372e302f32342d3234203d3e20323030313639.roa (raw, json)
Hash identifier:          sBuhLcGkZAYS6NMrP01IR3T+jUkTG+Nu2gYv0jg8MIw=
Subject key identifier:   E2:17:31:C1:27:42:50:5C:F7:F8:82:AD:E1:56:4D:4D:13:83:06:BA
Certificate issuer:       /CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Certificate serial:       6DF254547685DB91D424344A337D8CF141556F90
Authority key identifier: A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e20323030313639.roa
Signing time:             Sat 01 Aug 2026 06:49:06 +0000
ROA not before:           Sat 01 Aug 2026 06:44:06 +0000
ROA not after:            Sat 31 Jul 2027 06:49:06 +0000
asID:                     200169
IP address blocks:        140.235.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
                          rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 09:21:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:f2:54:54:76:85:db:91:d4:24:34:4a:33:7d:8c:f1:41:55:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
        Validity
            Not Before: Aug  1 06:44:06 2026 GMT
            Not After : Jul 31 06:49:06 2027 GMT
        Subject: CN=E21731C12742505CF7F882ADE1564D4D138306BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:09:f9:be:c4:8a:38:e5:10:e7:30:08:1c:75:
                    eb:5c:85:e3:aa:69:cd:c9:59:89:ce:88:8c:ee:3d:
                    4c:e9:a4:a9:5a:9c:fd:50:85:05:53:01:66:d8:65:
                    6c:24:1e:01:c0:60:c8:04:34:6e:ea:bb:fb:09:1f:
                    cb:9d:5c:f3:54:af:12:9c:16:24:51:27:d2:c4:17:
                    ac:53:a0:fc:de:69:ed:31:cb:66:39:35:05:07:bf:
                    76:b2:19:6e:7a:59:96:8c:10:1f:99:2a:d4:2d:eb:
                    fd:29:e6:a7:af:12:65:78:8f:e0:a8:c8:11:42:8d:
                    13:85:9e:ad:8b:92:a7:b5:21:14:00:3f:12:00:ec:
                    95:ea:3c:94:26:e4:a5:9e:b0:b8:bf:f5:56:34:68:
                    c4:28:e3:d5:10:b1:2a:52:1c:da:9d:97:18:1b:b9:
                    36:49:a8:b0:ae:a3:03:b5:be:b4:c7:77:e7:78:78:
                    5c:46:07:42:39:78:14:a9:34:9a:e3:e2:b4:82:e5:
                    f2:8a:99:9c:bb:e1:50:58:58:08:50:ab:7d:b7:06:
                    24:28:44:22:4a:b7:9c:6c:a0:b4:81:c1:be:04:20:
                    8b:db:ae:b3:84:99:51:5b:e4:b9:a5:8c:89:68:e7:
                    20:9b:de:6a:55:34:62:e4:2b:f3:c9:06:54:a6:24:
                    79:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:17:31:C1:27:42:50:5C:F7:F8:82:AD:E1:56:4D:4D:13:83:06:BA
            X509v3 Authority Key Identifier:
                keyid:A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e20323030313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:75:80:72:74:35:da:93:af:6a:64:f8:c3:9c:0a:57:cd:a8:
         68:d3:5e:58:0b:59:a6:5c:f6:8f:0a:3d:f2:e4:2c:c8:d4:2e:
         f7:3e:cc:58:54:86:0b:43:af:45:3f:2f:cb:6b:7f:19:74:7d:
         d8:10:c0:61:ef:4a:76:f6:52:6e:d0:71:4e:9f:5a:fd:07:2e:
         f5:93:dd:0e:c2:4d:68:02:f9:98:91:da:13:1b:98:a5:dc:fc:
         39:f5:9b:64:85:1d:32:d4:46:7c:4d:7c:b8:69:09:9f:b6:35:
         74:41:a4:77:fa:ce:a8:4e:0e:ab:dc:f4:82:28:91:b8:1f:fe:
         3c:6f:3e:e7:4c:9a:d6:59:ad:59:6a:7b:bf:5c:5d:3e:4c:61:
         16:62:a3:65:e3:59:81:32:e0:f3:77:7f:c0:54:70:7e:e4:af:
         30:f6:91:ef:cf:ca:86:8f:67:97:a2:c7:43:3f:4e:81:5a:32:
         c3:51:d1:46:7c:66:08:8e:79:1c:84:bb:0a:01:8e:80:56:2b:
         12:1a:8e:b4:ba:1c:dc:97:96:c1:16:28:1a:ce:2f:f0:8d:89:
         6b:c8:9f:0a:27:28:83:62:d0:38:26:4f:3c:c0:a0:b6:42:0e:
         54:ab:f8:af:64:32:6d:a7:2a:aa:14:0b:43:62:88:e3:c7:9f:
         3f:a7:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:34:26 2026 by rpki-client