Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203334393237.roa
File:                     3134302e3233352e3132392e302f32342d3234203d3e203334393237.roa (raw, json)
Hash identifier:          uC5ZX5gVUelvFTfmhsiXcPtuvK1GbjjOI1HC58v+SAw=
Subject key identifier:   1E:98:76:EE:1F:59:B5:8E:49:EF:28:D0:2D:7B:2E:68:BE:DD:8D:72
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       6C3821C04878DC2EDE556DDA92AD2D84A7F96B94
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203334393237.roa
Signing time:             Fri 19 Jun 2026 23:06:22 +0000
ROA not before:           Fri 19 Jun 2026 23:01:22 +0000
ROA not after:            Fri 18 Jun 2027 23:06:22 +0000
asID:                     34927
IP address blocks:        140.235.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 09:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:38:21:c0:48:78:dc:2e:de:55:6d:da:92:ad:2d:84:a7:f9:6b:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jun 19 23:01:22 2026 GMT
            Not After : Jun 18 23:06:22 2027 GMT
        Subject: CN=1E9876EE1F59B58E49EF28D02D7B2E68BEDD8D72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ae:f1:d2:44:68:9f:7e:f9:0c:55:12:89:42:
                    77:a0:a1:9a:77:a9:a2:52:0a:fd:10:4a:96:ef:72:
                    dc:c4:01:89:52:77:f2:c2:dd:14:a8:2d:3c:d8:f7:
                    4d:f5:80:ee:57:51:3b:0d:3d:88:f0:5e:f5:3f:49:
                    8d:cd:a2:f8:10:4c:15:85:f4:84:95:c5:21:d6:84:
                    fb:4c:6b:41:93:f0:6b:9a:37:a6:de:12:ae:49:f6:
                    e0:79:25:59:b9:51:c3:38:42:e5:63:c8:68:c3:f5:
                    3d:e5:48:a0:25:0d:eb:9f:80:6b:f9:a9:5e:7f:ac:
                    ba:8e:e7:f1:5d:a6:ce:13:2c:95:f5:cd:a0:ae:60:
                    d3:94:04:f2:87:95:56:a2:0c:00:b7:71:c0:ed:6d:
                    32:0e:ff:43:18:c9:8f:53:14:13:03:b4:e6:ef:14:
                    0e:83:fd:08:77:ae:49:cb:47:8f:03:89:5a:bd:7f:
                    7b:eb:04:84:b8:2f:78:44:4a:3d:86:80:38:89:da:
                    35:e3:c8:8f:c9:6b:81:6d:d0:b9:99:fd:35:55:93:
                    43:fa:4c:28:c7:8a:f1:f3:7f:21:6a:f7:fa:02:b6:
                    c0:f3:82:a5:06:17:f3:6c:bc:04:96:ad:16:02:c1:
                    9c:92:9f:7f:95:a6:d8:c7:35:dd:06:28:09:ea:54:
                    69:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:98:76:EE:1F:59:B5:8E:49:EF:28:D0:2D:7B:2E:68:BE:DD:8D:72
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3132392e302f32342d3234203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:7d:f6:b1:3f:45:f6:ef:de:da:60:a5:f9:e4:d3:8b:ba:a7:
         05:d8:09:cd:52:79:77:a0:11:f6:25:be:38:ee:38:c1:86:96:
         88:c3:f2:fa:48:fc:94:2a:e3:85:67:a4:86:0d:e6:1f:c3:09:
         1f:2d:7a:77:d5:70:30:1d:d3:3e:ce:84:17:b6:6d:bf:7a:ec:
         95:f3:02:3b:b5:6e:79:44:97:36:31:30:1d:69:ab:a2:b2:8b:
         43:8e:f5:00:7a:60:52:3b:80:5c:2d:10:22:17:22:26:b6:4a:
         95:59:4b:5b:bb:25:e9:9f:3a:57:84:70:ec:9a:21:23:0d:9e:
         d6:71:e2:8d:55:25:87:52:67:e5:99:1c:92:6a:3d:ae:cc:f8:
         19:bb:71:b8:26:ef:03:fe:f1:0c:f4:7d:54:99:da:9c:c0:ba:
         6f:fc:16:5a:f1:fc:fc:2f:3f:3f:9a:38:b0:84:0a:12:9e:a4:
         24:30:20:04:c8:37:21:e7:de:26:61:d1:af:1c:78:f9:bd:2c:
         7e:06:b0:c7:d2:f3:c7:eb:d9:6d:4c:15:fb:e6:1b:93:9e:3e:
         c5:f9:d9:c0:a7:1f:c7:71:59:7d:62:19:67:80:30:86:9c:64:
         27:df:a6:e4:d3:30:61:d7:da:8c:5c:5f:66:a8:7b:24:0d:38:
         be:f4:00:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:20 2026 by rpki-client