Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e302e302f32342d3234203d3e20313336383039.roa
File:                     3136352e3134302e302e302f32342d3234203d3e20313336383039.roa (raw, json)
Hash identifier:          i0pNSoKQGHmgm80sQYfq5E7Jrz/a4rI7AERlGIke658=
Subject key identifier:   DA:2D:2C:73:3A:CD:42:96:47:34:CC:C7:C4:ED:AF:C9:CE:2E:50:A9
Certificate issuer:       /CN=44dc66ddbee1444747edd0edf8d7f5798970715818115faa19
Certificate serial:       1C641B33AC66488CF6ED3B21EE0BFA773FB4DD2B
Authority key identifier: 0B:C5:8F:27:35:2A:20:44:56:6D:6D:BE:D9:44:10:08:90:7B:10:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e302e302f32342d3234203d3e20313336383039.roa
Signing time:             Sun 25 Oct 2026 04:42:52 +0000
ROA not before:           Sun 25 Oct 2026 04:37:52 +0000
ROA not after:            Sun 24 Oct 2027 04:42:52 +0000
asID:                     136809
IP address blocks:        165.140.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.crl
                          rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 00:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:64:1b:33:ac:66:48:8c:f6:ed:3b:21:ee:0b:fa:77:3f:b4:dd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44dc66ddbee1444747edd0edf8d7f5798970715818115faa19
        Validity
            Not Before: Oct 25 04:37:52 2026 GMT
            Not After : Oct 24 04:42:52 2027 GMT
        Subject: CN=DA2D2C733ACD42964734CCC7C4EDAFC9CE2E50A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:d7:b2:22:2b:7a:fe:76:ce:ab:e5:6e:19:
                    b5:af:65:01:a6:a3:3a:b0:b2:7f:d5:e9:1f:6b:b3:
                    b6:0c:03:73:f4:91:77:6f:f8:7b:3a:b0:ba:dc:2d:
                    13:3c:62:08:0a:60:41:35:9c:d9:46:c3:97:c9:e5:
                    82:8a:a2:53:bd:93:59:86:db:41:0f:c4:ab:8a:e5:
                    67:21:23:29:e2:43:ce:16:fa:0c:ae:d7:e7:64:21:
                    ab:d3:69:b1:1a:bc:62:32:01:47:c9:84:fe:ed:e4:
                    d8:de:89:9b:f8:43:9f:4c:43:05:30:ae:22:59:8b:
                    f0:16:cf:27:1e:92:64:ed:09:93:0f:ea:50:36:3b:
                    9d:28:b6:cb:81:5f:00:b0:cf:49:dd:6c:66:81:ac:
                    8a:7d:35:8a:4d:d7:93:86:4e:d7:7c:81:60:f6:74:
                    87:24:d9:dd:13:94:c6:13:a1:e8:4b:35:3b:ca:78:
                    ca:d9:95:fe:eb:8f:ec:4e:86:75:7b:fb:bc:f9:9e:
                    ea:5c:ed:56:a7:ed:5c:93:fa:0c:fb:9b:d1:77:ae:
                    4e:57:64:06:05:41:41:8a:4d:77:33:f1:f4:2f:a7:
                    ce:87:03:d4:b3:1f:ab:11:e4:5d:a5:27:d1:a7:b8:
                    d2:e7:1a:22:31:f3:28:a8:91:99:55:92:e0:00:36:
                    d1:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:2D:2C:73:3A:CD:42:96:47:34:CC:C7:C4:ED:AF:C9:CE:2E:50:A9
            X509v3 Authority Key Identifier:
                keyid:0B:C5:8F:27:35:2A:20:44:56:6D:6D:BE:D9:44:10:08:90:7B:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e302e302f32342d3234203d3e20313336383039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f0:f8:c6:29:3f:85:d6:22:d9:5c:73:71:5f:76:81:8c:a4:
         57:46:c3:ac:43:5a:60:9d:2c:05:3a:86:23:1b:de:33:e0:b7:
         18:67:c4:13:32:26:bd:4c:89:92:45:6b:47:b9:10:17:da:b3:
         d6:c8:9c:9d:5e:97:45:98:9a:3b:5d:3b:39:ca:32:21:13:bc:
         6f:27:ae:62:fb:e4:1d:d0:7a:7b:fc:e2:b2:29:61:cc:54:55:
         9c:a7:d6:e0:b0:9e:8a:4c:29:a6:94:51:d4:a4:9d:fd:c9:43:
         fc:de:ea:43:07:ac:c9:de:e8:d8:a2:41:cf:09:9d:fe:23:c8:
         05:e1:07:73:39:c9:3e:9d:02:02:cd:1f:79:a0:32:8e:7d:75:
         f4:d0:df:af:d3:11:e8:88:28:78:53:03:35:82:a0:d5:e9:60:
         1b:50:2f:46:b5:0a:a6:23:d7:f3:a4:23:8b:8d:20:c0:d2:6b:
         0e:ac:72:18:dc:08:d2:89:7b:86:80:7d:8f:3b:1d:47:46:65:
         1d:e1:5e:14:20:cf:11:b6:9e:75:20:34:76:22:b8:95:d7:6e:
         49:44:86:0f:bd:98:b3:4d:83:0b:d1:82:8e:4c:dc:b3:24:29:
         d9:10:fb:8f:d2:8c:c5:85:79:a3:ca:f5:f2:d4:93:4c:02:0d:
         c6:1b:7f:e2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUHGQbM6xmSIz27Tsh7gv6dz+03SswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYzY2ZGRiZWUxNDQ0NzQ3ZWRkMGVkZjhkN2Y1Nzk4
OTcwNzE1ODE4MTE1ZmFhMTkwHhcNMjYxMDI1MDQzNzUyWhcNMjcxMDI0MDQ0MjUy
WjAzMTEwLwYDVQQDEyhEQTJEMkM3MzNBQ0Q0Mjk2NDczNENDQzdDNEVEQUZDOUNF
MkU1MEE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8fXsiIrev52
zqvlbhm1r2UBpqM6sLJ/1ekfa7O2DANz9JF3b/h7OrC63C0TPGIICmBBNZzZRsOX
yeWCiqJTvZNZhttBD8SriuVnISMp4kPOFvoMrtfnZCGr02mxGrxiMgFHyYT+7eTY
3omb+EOfTEMFMK4iWYvwFs8nHpJk7QmTD+pQNjudKLbLgV8AsM9J3WxmgayKfTWK
TdeThk7XfIFg9nSHJNndE5TGE6HoSzU7ynjK2ZX+64/sToZ1e/u8+Z7qXO1Wp+1c
k/oM+5vRd65OV2QGBUFBik13M/H0L6fOhwPUsx+rEeRdpSfRp7jS5xoiMfMoqJGZ
VZLgADbROQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFNotLHM6zUKWRzTMx8Ttr8nO
LlCpMB8GA1UdIwQYMBaAFAvFjyc1KiBEVm1tvtlEEAiQexCuMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2M2YTdkYTJiM2VhZTQzODBhMGYzZDIxNTFmMWRjZTA5LzAv
MEJDNThGMjczNTJBMjA0NDU2NkQ2REJFRDk0NDEwMDg5MDdCMTBBRS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5LzlmMDE1ZTA5LWU2ZGMtNGQwZS04YjhlLWQ3ZGQ1ODYxMDVlOS80NGRj
NjZkZGJlZTE0NDQ3NDdlZGQwZWRmOGQ3ZjU3OTg5NzA3MTU4MTgxMTVmYWExOS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9jNmE3ZGEyYjNlYWU0MzgwYTBmM2Qy
MTUxZjFkY2UwOS8wLzMxMzYzNTJlMzEzNDMwMmUzMDJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMxMzMzNjM4MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKWMADANBgkqhkiG9w0BAQsF
AAOCAQEAHPD4xik/hdYi2VxzcV92gYykV0bDrENaYJ0sBTqGIxveM+C3GGfEEzIm
vUyJkkVrR7kQF9qz1sicnV6XRZiaO107OcoyIRO8byeuYvvkHdB6e/zisilhzFRV
nKfW4LCeikwpppRR1KSd/clD/N7qQwesyd7o2KJBzwmd/iPIBeEHcznJPp0CAs0f
eaAyjn119NDfr9MR6IgoeFMDNYKg1elgG1AvRrUKpiPX86Qji40gwNJrDqxyGNwI
0ol7hoB9jzsdR0ZlHeFeFCDPEbaedSA0diK4ldduSUSGD72Ys02DC9GCjkzcsyQp
2RD7j9KMxYV5o8r18tSTTAINxht/4g==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:01 2026 by rpki-client