Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e312e302f32342d3234203d3e20383334.roa
File:                     3136352e3134302e312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          n3h5yEITXbgEigSOrTRVejGR8fIZE5u585WY5DOVawQ=
Subject key identifier:   C1:15:78:D0:05:1B:69:D3:80:83:D6:5C:ED:BD:33:FB:6E:4C:F5:E8
Certificate issuer:       /CN=44dc66ddbee1444747edd0edf8d7f5798970715818115faa19
Certificate serial:       27F5CB8AA6EB7E451818735719C858250B3966D2
Authority key identifier: 0B:C5:8F:27:35:2A:20:44:56:6D:6D:BE:D9:44:10:08:90:7B:10:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e312e302f32342d3234203d3e20383334.roa
Signing time:             Sun 25 Oct 2026 04:43:04 +0000
ROA not before:           Sun 25 Oct 2026 04:38:04 +0000
ROA not after:            Sun 24 Oct 2027 04:43:04 +0000
asID:                     834
IP address blocks:        165.140.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.crl
                          rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:f5:cb:8a:a6:eb:7e:45:18:18:73:57:19:c8:58:25:0b:39:66:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44dc66ddbee1444747edd0edf8d7f5798970715818115faa19
        Validity
            Not Before: Oct 25 04:38:04 2026 GMT
            Not After : Oct 24 04:43:04 2027 GMT
        Subject: CN=C11578D0051B69D38083D65CEDBD33FB6E4CF5E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:46:9a:fd:0e:a0:2b:ea:0b:c7:89:5d:7b:
                    b6:3d:04:ce:3c:5f:14:dd:de:7d:c0:03:72:60:e8:
                    77:0a:c3:ca:e1:bf:df:a9:3c:76:ab:8e:38:26:e5:
                    0d:cd:77:0d:dd:ca:a5:76:b0:d6:a6:d7:ca:5b:8b:
                    bf:17:c9:3e:f7:e5:56:d5:21:e7:8a:d2:09:d1:ba:
                    e5:e5:3f:81:83:61:2f:ee:3e:14:fa:c0:e3:f1:60:
                    27:63:82:10:12:fe:f7:5c:0d:bc:73:ce:e7:4d:1f:
                    91:5a:95:42:9b:23:83:d7:08:e7:b5:b7:06:0f:c5:
                    a3:a5:30:c5:eb:ce:b6:60:5f:56:26:80:49:28:54:
                    95:4e:73:e5:5f:ef:b8:4f:64:56:bf:f3:5b:55:39:
                    bd:f8:52:1c:e1:bf:df:9c:18:33:ae:d5:5c:9f:05:
                    bb:8f:25:d4:19:15:4f:d3:b3:92:ad:29:b5:03:95:
                    26:2e:a5:4d:f3:ef:5d:6b:d3:93:dc:9c:f5:93:95:
                    37:80:ad:15:0d:f0:80:43:cc:51:ff:62:7f:94:03:
                    20:7e:e8:78:e7:43:22:b3:10:06:68:5c:bc:7e:7c:
                    12:a7:2f:e4:46:6a:c0:6e:89:16:4f:1a:8e:97:d5:
                    20:f2:16:66:3c:4d:40:32:9f:ae:c5:3e:1e:90:11:
                    6e:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:15:78:D0:05:1B:69:D3:80:83:D6:5C:ED:BD:33:FB:6E:4C:F5:E8
            X509v3 Authority Key Identifier:
                keyid:0B:C5:8F:27:35:2A:20:44:56:6D:6D:BE:D9:44:10:08:90:7B:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:9b:a6:9c:bd:de:b2:9b:b1:bd:24:e3:df:e9:21:bf:7f:ef:
         24:e4:ba:7b:e4:84:4b:5c:fb:8e:cd:cc:db:aa:7c:49:70:cf:
         29:fc:4e:42:21:6f:0e:27:d3:46:06:7c:81:58:38:3b:33:63:
         db:a4:21:c6:de:91:f9:0f:d6:56:95:34:0a:f4:1b:02:50:63:
         42:43:8a:c7:b4:3e:21:ef:d3:9d:12:7a:a6:50:42:65:9c:4f:
         14:96:24:aa:af:51:78:9c:26:6b:20:79:2a:15:40:af:32:b4:
         c1:5a:4a:7c:42:5f:4b:d4:d0:a1:d9:bf:89:ce:b4:3b:d4:00:
         12:35:88:9a:1d:89:b5:e4:e9:89:80:58:52:02:cb:ed:16:66:
         0a:57:86:ab:36:b0:e7:13:a9:e0:c7:2f:ee:16:1a:d2:3b:30:
         cb:bf:aa:d1:89:c7:67:9f:ae:27:1f:5d:b0:74:20:e6:27:02:
         04:9c:92:b0:27:94:d3:3d:83:f3:07:6b:fe:1d:35:d9:96:f2:
         87:6b:a8:a4:05:77:e7:2e:39:0b:1e:64:c2:35:48:9c:fb:d8:
         57:7a:04:b2:7e:6b:62:dc:2b:66:4e:52:f3:e0:d0:a4:34:2a:
         72:b2:3e:be:57:a6:44:09:3c:0e:7f:99:0d:07:f7:ad:bf:09:
         14:90:d6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:38 2026 by rpki-client