Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3134302e3233352e3132312e302f32342d3234203d3e20393435.roa
File:                     3134302e3233352e3132312e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          /nfYs+yiv8Ub0+VjRv5yg2S8TAGlia+vBrvTzyVZiFE=
Subject key identifier:   10:BD:BB:46:27:AE:AE:30:A7:27:34:6C:24:7A:E8:9A:57:C3:D7:90
Certificate issuer:       /CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
Certificate serial:       6DECA8B1B6907ADE9408923D8137B95D99E8ECB7
Authority key identifier: 26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3134302e3233352e3132312e302f32342d3234203d3e20393435.roa
Signing time:             Fri 04 Jul 2025 04:04:34 +0000
ROA not before:           Fri 04 Jul 2025 03:59:34 +0000
ROA not after:            Fri 03 Jul 2026 04:04:34 +0000
asID:                     945
IP address blocks:        140.235.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 17:42:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:ec:a8:b1:b6:90:7a:de:94:08:92:3d:81:37:b9:5d:99:e8:ec:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
        Validity
            Not Before: Jul  4 03:59:34 2025 GMT
            Not After : Jul  3 04:04:34 2026 GMT
        Subject: CN=10BDBB4627AEAE30A727346C247AE89A57C3D790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:05:74:09:8f:b6:00:6f:93:67:30:e4:76:
                    67:fb:5e:8b:b0:5e:db:17:0a:d5:03:03:49:dd:44:
                    66:0f:a4:52:d7:50:8e:28:2d:91:1c:1a:ce:fc:78:
                    6d:ee:19:e6:c9:ba:96:e0:57:7e:e4:ae:8c:11:c5:
                    cb:16:1e:0a:d7:d3:b1:16:93:77:2a:11:3f:3b:b9:
                    e5:bb:0f:45:0f:bc:c4:6d:48:6b:0b:32:52:bc:37:
                    7f:d4:24:93:79:a7:ec:4a:7c:70:df:20:77:62:5b:
                    13:a3:80:2b:c2:94:6d:f0:f0:a2:e8:f4:20:f4:20:
                    81:89:e5:6d:2b:7e:e1:24:8e:17:85:81:85:7a:f7:
                    a3:68:8d:e6:12:89:4b:33:76:55:db:6b:9b:0e:c9:
                    57:d2:9e:44:3e:63:56:29:98:af:57:c6:97:35:74:
                    f6:d1:34:5b:d0:96:76:be:3d:f2:b8:80:4c:12:8f:
                    f3:72:cc:29:5b:51:c2:5e:d8:73:ab:a3:d6:e6:40:
                    2e:ff:89:f5:d8:20:23:15:21:10:5c:17:40:30:af:
                    9a:4c:dd:a8:32:d0:e7:2a:ad:e3:7b:75:a3:e1:8b:
                    45:fc:ec:12:c9:2b:a5:0d:bf:c4:51:4c:39:63:b5:
                    43:82:a7:38:24:a5:19:2c:51:43:39:da:ba:05:b7:
                    f1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BD:BB:46:27:AE:AE:30:A7:27:34:6C:24:7A:E8:9A:57:C3:D7:90
            X509v3 Authority Key Identifier:
                keyid:26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3134302e3233352e3132312e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:ba:46:36:df:5f:93:bd:b3:41:f1:9a:05:20:5f:63:b9:a4:
         ea:7e:d8:56:73:6b:1c:63:0a:24:63:dd:37:5c:e0:72:ff:b5:
         fe:e7:7c:a4:c1:e1:23:d8:7c:72:07:ac:aa:0a:e3:49:46:1f:
         6d:3a:da:c6:42:b9:65:1a:fd:52:b2:6e:b9:b3:ae:73:17:c8:
         3a:83:c4:d3:06:95:6b:0d:dd:0f:c8:58:38:95:d4:c0:69:01:
         dd:fe:01:bf:0a:d6:7d:2e:87:15:a8:fe:59:83:c8:67:10:2f:
         fb:bc:cb:45:3a:73:84:ce:f3:39:8d:e8:ea:79:0e:36:18:66:
         fb:72:ce:43:e3:7b:91:ab:cf:13:10:cb:21:4f:9f:be:53:b9:
         ed:0e:ed:79:6d:8b:f9:3f:48:72:a3:03:f4:e6:1c:6b:eb:d5:
         49:ba:2c:ac:04:91:2b:18:87:60:9e:89:e0:7d:ba:a7:51:f1:
         7b:0b:ee:7a:5e:7a:76:cc:e7:e5:cb:06:30:10:50:7a:ff:1b:
         b8:6b:ed:f6:84:2c:d3:c0:cd:cd:b7:74:91:80:0f:d5:85:87:
         5e:39:d0:1c:31:e9:be:3f:b3:1c:36:61:ef:9f:bf:d4:d9:44:
         51:b1:01:c1:de:41:ce:3f:ea:cf:d7:47:b5:0f:c3:dd:c4:5d:
         be:47:9a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 20:59:37 2025 by rpki-client