Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133312e302f32342d3234203d3e20323131373433.roa
File:                     3134302e3233352e3133312e302f32342d3234203d3e20323131373433.roa (raw, json)
Hash identifier:          MasC0v5T3MWXEYf769OguotRKTUvaMx6FVVwx/ALCoc=
Subject key identifier:   B5:BC:D7:4D:CD:22:66:C4:DB:F6:97:36:43:E6:E4:A2:30:FE:B4:3D
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       2B28F53DD16DA85FA7756C9186B034BD444ACC3B
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133312e302f32342d3234203d3e20323131373433.roa
Signing time:             Tue 07 Jul 2026 23:06:24 +0000
ROA not before:           Tue 07 Jul 2026 23:01:24 +0000
ROA not after:            Tue 06 Jul 2027 23:06:24 +0000
asID:                     211743
IP address blocks:        140.235.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 09:06:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:28:f5:3d:d1:6d:a8:5f:a7:75:6c:91:86:b0:34:bd:44:4a:cc:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Jul  7 23:01:24 2026 GMT
            Not After : Jul  6 23:06:24 2027 GMT
        Subject: CN=B5BCD74DCD2266C4DBF6973643E6E4A230FEB43D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:55:10:b0:df:f2:f8:11:8d:18:26:72:7e:
                    3e:53:33:ea:d0:1e:51:34:cc:9e:50:1e:30:32:3e:
                    52:be:10:f0:6a:59:2e:03:c7:2e:6f:ae:52:4b:85:
                    e2:ac:e1:95:9e:57:f3:08:76:2b:bd:75:72:1b:d6:
                    58:7b:9e:37:77:47:8c:c4:35:30:d3:d7:45:c3:a0:
                    be:d2:fa:3a:82:19:04:8f:bc:b3:4a:62:01:b0:e8:
                    0a:2c:63:31:2c:e9:48:d0:27:8a:46:94:e2:0f:d4:
                    33:92:d0:53:d1:91:91:30:d5:32:9a:93:15:2d:71:
                    a5:8c:a0:56:e5:64:5f:ac:72:13:2c:94:fd:fa:9b:
                    8a:37:cf:5a:99:36:3c:54:28:20:05:ae:5c:11:b1:
                    59:cc:18:de:fb:74:55:af:9b:e7:8b:0a:84:7f:ee:
                    ce:a0:d7:23:1a:40:0a:64:49:e0:2b:d3:95:a6:d6:
                    b8:b2:6a:2b:a9:93:2e:ff:20:c1:6e:ca:60:e0:d7:
                    79:2e:ab:aa:1d:61:7c:3c:5b:b0:7a:23:50:70:d8:
                    6b:6a:a2:83:97:a2:02:5e:50:e7:0b:f5:e7:38:38:
                    11:a8:84:0e:ed:92:12:ad:21:ec:bd:50:9f:ef:9d:
                    7d:2c:5c:ac:c3:29:07:52:7e:7c:84:5c:5e:08:d3:
                    e1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:BC:D7:4D:CD:22:66:C4:DB:F6:97:36:43:E6:E4:A2:30:FE:B4:3D
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133312e302f32342d3234203d3e20323131373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:11:02:dd:34:01:25:4d:10:9f:ba:29:4f:11:d4:27:86:fa:
         92:1a:5e:37:bb:4d:6f:1d:11:89:88:e2:cd:79:a0:8e:12:8b:
         c9:04:a1:b1:95:7c:3f:90:7e:06:41:a1:f7:97:ce:d1:11:51:
         55:3e:26:3b:d8:a2:69:cf:69:a3:5d:f7:bc:9a:1b:f0:b9:d4:
         51:5e:d7:60:2e:35:f4:47:83:47:61:ef:be:ad:af:c6:85:76:
         28:95:7f:e6:bb:d4:de:07:ac:4a:9c:6c:c6:82:d5:29:6b:a9:
         d2:c4:0d:4c:45:2f:97:12:ab:ff:1a:c9:7b:fb:f2:65:1b:d6:
         17:3b:37:da:81:24:70:9d:7f:e7:ef:da:66:bf:b3:56:bb:10:
         aa:3b:05:5e:fd:20:14:5e:fe:94:8d:02:f6:db:6e:a0:f0:54:
         8d:5e:1a:11:bb:e5:7c:d2:25:31:75:00:a2:e6:c8:89:49:9f:
         e9:43:e6:c9:1a:e8:a7:2e:8c:c0:2f:68:3f:80:fa:36:56:ff:
         90:83:c9:9f:f1:73:75:e2:81:dc:02:d5:d4:d5:6e:6a:31:92:
         4e:57:ea:e6:d7:50:07:fb:88:be:d1:e1:01:2a:20:6c:82:f7:
         d9:27:3c:dc:60:d5:33:f2:73:94:00:12:b3:f0:36:dd:71:04:
         34:b0:86:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:53 2026 by rpki-client