Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS140133.roa
File:                     AS140133.roa (raw, json)
Hash identifier:          q7MDSK/MjMuYAwpaY9ZqRd/iSAIzwcJWFjyzvlE2q8c=
Subject key identifier:   65:0F:F2:6C:9D:12:51:62:C6:AD:EF:B7:FD:4E:EA:A7:1A:0B:E6:3D
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       5BB9F04F5723105AB738DB65D47AD675B93FF6F6
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS140133.roa
Signing time:             Wed 30 Sep 2026 06:17:07 +0000
ROA not before:           Wed 30 Sep 2026 06:12:07 +0000
ROA not after:            Wed 29 Sep 2027 06:17:07 +0000
asID:                     140133
IP address blocks:        192.231.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 Oct 2026 00:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b9:f0:4f:57:23:10:5a:b7:38:db:65:d4:7a:d6:75:b9:3f:f6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Sep 30 06:12:07 2026 GMT
            Not After : Sep 29 06:17:07 2027 GMT
        Subject: CN=650FF26C9D125162C6ADEFB7FD4EEAA71A0BE63D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:3a:df:47:1e:fe:ed:af:e3:29:d1:d3:81:
                    e2:6c:56:fb:4a:b5:47:26:93:5b:af:33:f9:40:6a:
                    d7:4f:bd:cb:18:0e:3f:83:9d:2a:38:2a:40:8f:4a:
                    fb:a1:4b:0a:19:1f:28:27:ed:29:5a:aa:74:75:ac:
                    cf:9f:2c:fe:d7:97:01:8f:db:1b:87:0f:e9:cf:0e:
                    83:7c:8f:0b:91:0f:19:d0:8b:e8:69:40:46:1c:75:
                    67:bc:7d:84:1f:cf:98:0e:85:14:ca:95:27:87:3a:
                    bf:c7:22:79:94:0e:dd:af:23:e3:6e:98:54:60:db:
                    71:b3:b5:98:bd:86:b8:48:e0:85:ab:b5:5d:f4:82:
                    09:63:61:50:ee:cb:94:45:da:b8:bc:e7:ff:64:54:
                    d8:ef:95:da:f7:02:47:c5:8e:20:4b:3c:d3:59:ac:
                    2d:97:95:4f:12:5a:7a:61:60:c4:f6:39:d3:93:96:
                    8f:37:7d:e6:36:a5:ed:5c:7d:0d:e8:fe:26:eb:b0:
                    2c:4d:6b:bf:e3:5b:8c:e5:1d:9b:21:f9:d6:c3:ff:
                    2a:39:aa:47:60:e4:33:97:b0:09:d4:6f:bd:6f:a8:
                    2d:b3:db:74:8b:31:91:b2:0e:77:8d:5e:7d:2b:8d:
                    7d:d8:3c:ad:09:ab:73:95:a9:d5:83:da:c7:01:26:
                    f6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:0F:F2:6C:9D:12:51:62:C6:AD:EF:B7:FD:4E:EA:A7:1A:0B:E6:3D
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS140133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.231.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:6c:3f:eb:e1:4c:fc:89:ce:a0:a6:99:c8:f7:b7:2a:98:bd:
         a9:39:ab:20:6a:9b:d3:5f:a8:7b:da:f9:07:63:7c:f0:9c:7c:
         d7:d9:3a:b7:ce:74:4b:e9:da:47:ad:2e:fb:d0:28:c3:7c:ac:
         b5:1e:61:a0:76:cd:66:49:b5:98:2a:e5:8e:f8:f2:73:d9:b1:
         47:f6:2e:b1:fd:3f:89:65:c2:9a:86:f4:cb:24:46:d3:0b:54:
         0e:3f:16:f8:c9:3a:ef:f1:0e:86:85:88:08:4b:2e:3d:89:cb:
         c3:e9:b1:f5:22:43:9f:ab:c8:0f:ed:df:0d:b0:2e:82:0a:ba:
         d0:ba:2a:21:ea:c5:7a:ae:cb:4b:ce:2f:32:ae:e5:4d:41:a9:
         6f:eb:ed:33:c8:54:67:02:6a:d0:d9:d5:7e:04:b0:b1:9e:f2:
         31:a6:96:88:ec:ee:cd:2a:0e:db:63:d7:d3:56:5c:34:d5:49:
         c6:ac:e1:99:44:5e:17:e1:7a:f3:63:3b:0b:81:66:98:25:0d:
         32:e3:28:52:6e:d8:50:17:93:98:d5:fc:6e:9b:dc:51:01:47:
         50:01:f2:c9:fa:58:4d:a9:fe:d9:ae:03:45:3b:a9:b9:40:56:
         40:40:50:c4:bd:6e:28:7a:ce:40:55:be:0e:14:80:73:ec:89:
         f9:73:84:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 05:46:30 2026 by rpki-client