Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e2032393134.roa
File:                     3134302e3233352e32372e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          ZFAz5kD0yOz+Itz1vhb/I02FJW5vKrzXEl6t3TKBHIo=
Subject key identifier:   75:66:BB:73:96:46:0A:02:16:4B:16:13:0C:1A:E1:B8:E1:D5:E3:7E
Certificate issuer:       /CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Certificate serial:       3FE66CBAFF38095BE675BD442B19EB7789655E81
Authority key identifier: A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e2032393134.roa
Signing time:             Wed 01 Jul 2026 07:26:45 +0000
ROA not before:           Wed 01 Jul 2026 07:21:45 +0000
ROA not after:            Wed 30 Jun 2027 07:26:45 +0000
asID:                     2914
IP address blocks:        140.235.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
                          rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 23:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:e6:6c:ba:ff:38:09:5b:e6:75:bd:44:2b:19:eb:77:89:65:5e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
        Validity
            Not Before: Jul  1 07:21:45 2026 GMT
            Not After : Jun 30 07:26:45 2027 GMT
        Subject: CN=7566BB7396460A02164B16130C1AE1B8E1D5E37E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:51:cb:9c:3a:a9:3f:74:67:a2:71:fa:53:
                    32:bb:26:61:29:9a:1c:2c:fe:81:ae:d9:ee:6f:fb:
                    f4:89:26:ae:13:75:62:1c:97:16:2d:89:a0:a0:4e:
                    37:60:73:9f:f1:a4:6a:84:25:2a:22:13:33:65:ad:
                    4a:25:c0:17:89:75:cd:eb:23:d0:22:5f:f5:b5:e3:
                    21:71:20:a0:2a:13:9e:f7:c0:0e:55:7e:6e:59:39:
                    2b:ff:5e:c5:68:f3:08:d9:9e:0c:b9:08:4c:9e:b9:
                    d5:c7:9e:12:83:d1:08:61:d8:cb:3d:9e:65:6d:31:
                    e0:d2:13:bb:72:58:99:09:25:cb:0b:2b:8e:ff:de:
                    85:b1:19:ba:4d:f1:5e:a8:b0:49:b4:5b:1b:94:54:
                    36:98:a6:60:0a:a0:17:6f:3c:00:15:d2:98:9a:08:
                    c5:b1:e8:96:f3:9f:a3:31:42:a3:5e:74:39:49:4f:
                    33:fc:14:54:a9:08:a9:7e:1b:e1:f2:dc:88:5a:23:
                    4d:85:dc:03:f2:b9:f9:f8:d7:6e:96:33:21:41:3d:
                    55:4c:e8:f3:0a:06:54:3f:e7:60:32:d9:64:e4:f8:
                    f9:c2:57:80:45:5c:f0:a0:c5:61:1d:e5:86:3d:ec:
                    35:b7:ff:64:43:10:93:d0:8f:6b:19:19:ac:67:a9:
                    f1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:66:BB:73:96:46:0A:02:16:4B:16:13:0C:1A:E1:B8:E1:D5:E3:7E
            X509v3 Authority Key Identifier:
                keyid:A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32372e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:2b:69:fa:de:c1:d9:1d:3e:2c:61:7c:5c:03:2e:41:a0:98:
         1d:3f:59:b9:1f:e0:d9:5a:88:f0:a5:bd:e0:9d:3f:ca:ab:b4:
         7e:b4:1c:0d:8c:52:ef:bb:af:9e:a3:f0:4f:8c:1f:38:a0:75:
         a4:aa:e8:d6:7d:9b:55:47:c7:a0:39:14:9e:4a:13:0e:3d:80:
         4f:db:96:51:33:59:58:22:ae:66:ea:69:a3:7f:11:4d:d8:e6:
         72:d2:8e:45:a1:9b:b8:af:32:15:53:e1:d7:98:83:c3:ab:69:
         67:43:38:aa:10:7b:44:6a:81:75:b9:84:ac:17:26:85:40:82:
         5c:24:fc:97:72:3a:fd:f6:a3:af:6b:9b:94:82:a5:bb:e5:ae:
         ec:e2:4b:f8:4f:08:40:1f:c6:d6:e1:51:60:82:43:2d:83:c3:
         8e:f6:08:9d:b7:b3:59:e9:4e:a2:ea:68:06:db:0e:67:b2:17:
         54:d6:0b:b6:33:d4:34:5e:75:41:be:46:0e:a9:ad:e1:38:c9:
         8f:b9:51:0d:7a:45:4d:b4:20:01:54:11:f6:8f:bb:4a:e5:18:
         1b:6e:07:e2:16:e0:b4:91:f0:a2:2d:11:8b:18:a9:00:c1:a6:
         06:e4:80:0c:bf:fa:2e:bb:b4:17:41:3d:44:dd:a9:38:5f:4c:
         b0:84:09:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:02 2026 by rpki-client