Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32342d3234203d3e203534323138.roa
File:                     3134302e3233352e3132382e302f32342d3234203d3e203534323138.roa (raw, json)
Hash identifier:          QsrYqLbxz9IIiS6E1vQ89klZr7N+/tTu40IaPKeBvDA=
Subject key identifier:   D4:BC:E1:A8:F7:A4:4C:51:27:56:DC:3E:3B:72:8F:F8:B2:6C:AE:BA
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       797CE32B1041887574D4333A3FF5708D594462A6
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32342d3234203d3e203534323138.roa
Signing time:             Sun 17 Aug 2025 16:37:33 +0000
ROA not before:           Sun 17 Aug 2025 16:32:33 +0000
ROA not after:            Sun 16 Aug 2026 16:37:33 +0000
asID:                     54218
IP address blocks:        140.235.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 16:50:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7c:e3:2b:10:41:88:75:74:d4:33:3a:3f:f5:70:8d:59:44:62:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Aug 17 16:32:33 2025 GMT
            Not After : Aug 16 16:37:33 2026 GMT
        Subject: CN=D4BCE1A8F7A44C512756DC3E3B728FF8B26CAEBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:de:1b:59:f4:89:a0:07:bb:03:c5:a2:f6:5c:
                    76:a0:f4:4c:5c:92:c8:26:80:e9:15:77:4e:33:c3:
                    c3:cb:de:6d:4e:e8:1f:0c:3e:a1:1e:6e:2b:68:a3:
                    3b:db:83:5b:14:e1:58:59:cc:f7:bb:60:6e:78:85:
                    0e:8e:17:4c:3b:ca:92:62:c9:f1:85:22:a9:ed:1e:
                    56:2e:b7:4d:92:ed:1e:f5:b6:f0:6b:5f:95:d1:82:
                    7e:fc:05:8f:71:e7:2d:ee:7b:08:e7:79:84:99:90:
                    1c:0b:eb:38:cf:51:c5:8f:30:ed:cd:24:3e:9f:e6:
                    5f:1d:0f:9b:d3:51:c1:93:16:6f:30:e4:3a:c9:cc:
                    03:a8:8f:92:cd:56:02:52:6b:79:12:c8:cc:db:d5:
                    67:c8:29:0f:31:4d:be:2d:c8:1e:db:68:67:bf:20:
                    1a:86:0f:86:3d:9d:0f:2d:9e:a6:79:b8:32:d9:6e:
                    c0:02:15:11:23:8d:14:f5:c6:11:0b:e3:02:8a:f9:
                    c7:95:3f:84:5b:70:da:af:b7:30:1e:32:10:57:dc:
                    9d:4c:0b:d3:7f:65:c3:2e:f3:6f:a2:0f:9c:de:4f:
                    4b:05:35:9d:40:02:fb:b3:7e:1c:6b:3b:34:24:79:
                    32:01:da:3c:72:db:cf:44:08:c5:26:c5:69:3e:67:
                    81:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:BC:E1:A8:F7:A4:4C:51:27:56:DC:3E:3B:72:8F:F8:B2:6C:AE:BA
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132382e302f32342d3234203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:13:c6:a2:9b:aa:d6:6e:1c:84:5f:e9:71:a6:14:2b:f3:18:
         76:7f:d4:b6:fa:a2:b2:27:0f:b3:c4:a9:6f:81:9e:59:a0:29:
         d7:82:9b:81:25:fe:49:12:e4:1a:81:fc:a1:82:fb:e0:9e:72:
         11:ac:60:aa:ae:d5:e6:55:bf:80:c5:17:af:d7:ab:35:75:47:
         ab:58:e3:30:7a:c0:b0:0a:a3:66:18:ba:e5:b8:44:0b:6e:b4:
         d8:7e:65:c4:b0:c5:0d:2d:4c:a7:63:2c:83:13:78:50:9c:22:
         3c:79:d7:e8:c3:7e:87:49:c8:85:5b:5e:b5:35:75:fd:f8:0b:
         4c:cc:59:db:53:9e:89:e1:86:cb:fb:48:07:b9:18:3e:7e:44:
         47:8e:f7:2a:62:c0:d8:14:76:fc:e5:fb:4a:45:21:06:2b:e9:
         fe:67:b8:b8:c3:61:48:25:28:a7:d9:c9:34:eb:28:22:4c:da:
         20:40:14:b1:f9:39:b9:ac:80:4c:3e:b2:39:98:94:39:94:1d:
         f6:77:a8:96:a8:3d:c2:e9:a3:8a:73:05:25:fb:06:fa:11:48:
         b6:4c:a9:84:e4:2f:3a:07:0e:a4:7f:34:54:0f:21:75:6b:4d:
         b1:8a:eb:7e:63:c1:f9:cf:74:4b:96:7e:9b:63:9a:53:28:93:
         38:c0:eb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 03:18:16 2025 by rpki-client