Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133302e302f32342d3234203d3e20323133383433.roa
File:                     3134302e3233352e3133302e302f32342d3234203d3e20323133383433.roa (raw, json)
Hash identifier:          SHOJn7ZnO8hrYAQaX3Ke7cRYjyNCdiKnb42+hMK2t9k=
Subject key identifier:   45:8A:C3:1E:1B:F6:10:0E:87:CA:22:5B:54:91:8F:54:97:19:37:31
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       232FA39561348DDD4ABEDBC61842CE9B7A5FFB7D
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133302e302f32342d3234203d3e20323133383433.roa
Signing time:             Mon 06 Jul 2026 11:06:24 +0000
ROA not before:           Mon 06 Jul 2026 11:01:24 +0000
ROA not after:            Mon 05 Jul 2027 11:06:24 +0000
asID:                     213843
IP address blocks:        140.235.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 09:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2f:a3:95:61:34:8d:dd:4a:be:db:c6:18:42:ce:9b:7a:5f:fb:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jul  6 11:01:24 2026 GMT
            Not After : Jul  5 11:06:24 2027 GMT
        Subject: CN=458AC31E1BF6100E87CA225B54918F5497193731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cc:71:01:4d:53:39:1f:e2:86:5c:39:f5:ab:
                    7a:03:cc:88:f2:96:62:1e:7a:e6:c7:80:c7:31:78:
                    96:9a:87:37:fd:f9:e9:0d:5a:34:a9:ef:b3:a3:46:
                    14:42:6d:34:3d:6f:97:5e:ce:1e:f7:46:e4:fe:e0:
                    22:e6:a6:bc:be:44:a1:08:fe:e2:43:8f:62:fe:ec:
                    e8:0a:a8:c2:dc:48:fa:af:5a:b9:79:3b:75:b9:54:
                    d7:96:db:e9:4f:47:b3:6e:63:cf:5c:7c:45:3c:5c:
                    1d:0b:3a:5a:84:94:97:59:fe:85:90:fe:82:26:89:
                    06:66:ae:01:ba:a1:17:a8:9c:9c:6f:0f:4b:1a:18:
                    86:b0:16:17:90:38:e7:ca:08:b6:07:9f:69:80:8d:
                    70:6a:9d:a7:0b:ee:51:b1:fc:0c:71:1b:b0:ac:09:
                    20:0d:74:ab:ce:c4:3e:e8:9e:9e:a3:0b:b9:95:20:
                    86:5b:18:fb:df:1e:52:86:42:8e:8e:79:61:19:58:
                    ba:2d:97:32:a9:0b:af:c0:d5:80:96:36:8e:05:72:
                    c2:7a:8b:e1:a3:50:30:6b:04:18:f2:5f:c9:74:61:
                    65:c5:3c:39:ec:00:d3:da:70:3e:a2:2c:2c:d0:1c:
                    1e:f5:05:75:2f:fb:ca:f1:d6:e9:f3:e5:c3:9a:67:
                    7c:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8A:C3:1E:1B:F6:10:0E:87:CA:22:5B:54:91:8F:54:97:19:37:31
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133302e302f32342d3234203d3e20323133383433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:e8:53:5c:e0:9a:9b:14:31:98:aa:a2:1b:24:fb:71:7c:dd:
         10:d0:af:f9:0d:0a:73:4d:b8:13:39:df:db:c1:d8:ff:db:12:
         89:66:6d:37:f6:68:eb:50:16:e9:e7:52:8d:79:dc:8d:ad:25:
         f7:89:1e:99:5e:f6:ca:fd:77:3b:9e:d6:c3:43:32:3f:fc:09:
         67:9d:0e:f8:61:6d:4e:4c:4c:8a:1f:ea:b6:76:ab:54:0d:9c:
         a6:89:93:f2:84:9a:f4:6d:7e:38:68:42:97:97:0e:15:36:f2:
         d5:31:5f:1c:ef:66:13:45:f6:4b:b1:b1:93:d2:b3:ba:1c:dd:
         32:5c:4e:05:ac:24:a7:47:a2:5c:e9:95:c5:c0:4e:40:7a:e4:
         b7:d5:ef:54:8e:bd:be:18:a3:1c:4f:4c:a9:37:e8:6a:5a:1f:
         74:06:d5:9d:a9:b0:ab:da:96:8e:07:b7:a5:4c:7f:85:3f:8b:
         45:eb:1b:db:a0:d2:7d:04:a7:19:93:d3:20:3e:96:dc:c9:f4:
         b6:4e:a8:99:5f:fe:bc:87:31:c0:dc:ee:8c:56:54:ca:f7:55:
         e3:38:dc:90:92:58:41:8f:26:fa:2e:4f:22:f2:01:d5:6a:1e:
         aa:79:ef:d2:84:d3:fe:4b:c3:11:a4:08:e7:2e:9b:c4:ec:56:
         29:ec:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:12:09 2026 by rpki-client