Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e322e302f32332d3234203d3e20383334.roa
File:                     3136352e3134302e322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          Yl/X3rUDC7w0nCDiY3xCTEiptWfdW/X3tX5xVuVKzH0=
Subject key identifier:   2B:01:F4:45:19:66:AC:DD:3D:AB:6D:0C:0D:A8:97:88:D5:A9:85:10
Certificate issuer:       /CN=44dc66ddbee1444747edd0edf8d7f5798970715818115faa19
Certificate serial:       40BCE08B8916EC73141CD82DC6957AAB3CEB7A58
Authority key identifier: 0B:C5:8F:27:35:2A:20:44:56:6D:6D:BE:D9:44:10:08:90:7B:10:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e322e302f32332d3234203d3e20383334.roa
Signing time:             Sun 25 Oct 2026 04:43:04 +0000
ROA not before:           Sun 25 Oct 2026 04:38:04 +0000
ROA not after:            Sun 24 Oct 2027 04:43:04 +0000
asID:                     834
IP address blocks:        165.140.2.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.crl
                          rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 19:41:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:bc:e0:8b:89:16:ec:73:14:1c:d8:2d:c6:95:7a:ab:3c:eb:7a:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44dc66ddbee1444747edd0edf8d7f5798970715818115faa19
        Validity
            Not Before: Oct 25 04:38:04 2026 GMT
            Not After : Oct 24 04:43:04 2027 GMT
        Subject: CN=2B01F4451966ACDD3DAB6D0C0DA89788D5A98510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c9:6d:c3:93:a7:fd:02:76:c1:17:56:27:6f:
                    db:27:76:d4:f5:ae:f0:db:a3:56:81:8e:b0:68:2a:
                    8c:c1:99:b3:a5:36:d2:69:b3:d2:06:ff:47:97:82:
                    7e:13:d8:d3:67:cc:80:3a:89:e9:3b:53:67:e3:68:
                    7c:05:98:4a:0b:4d:70:ac:28:ae:93:e9:8f:a4:af:
                    42:a6:dd:48:61:88:56:05:53:ba:a0:5b:6e:0b:8c:
                    f2:02:d9:84:3a:a5:bf:98:2c:1f:84:21:d3:1a:fc:
                    f7:a2:fc:e2:f6:e3:6a:9b:65:a1:ee:0d:ac:30:13:
                    2e:9e:cf:ab:eb:72:29:9c:a1:b1:4b:9f:2a:50:0a:
                    e5:56:40:c6:2d:e9:dd:71:8f:1f:4c:a2:39:bc:56:
                    27:7a:d6:dc:40:0b:3c:48:ae:32:45:71:34:3c:be:
                    ab:78:c4:66:3d:49:7f:c9:6b:73:2d:73:bd:35:2d:
                    1d:a6:41:d3:3d:96:cc:d2:72:41:aa:31:58:70:9f:
                    60:7a:b5:87:d5:22:94:b5:05:52:2d:e2:98:9b:f6:
                    e2:fe:ec:7e:be:33:6b:88:52:23:0d:48:96:53:6d:
                    9c:3c:09:04:9d:57:eb:5c:d4:4e:1d:d1:7e:7f:46:
                    ee:cd:04:ee:67:2b:63:3c:ec:85:23:16:e4:58:67:
                    55:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:01:F4:45:19:66:AC:DD:3D:AB:6D:0C:0D:A8:97:88:D5:A9:85:10
            X509v3 Authority Key Identifier:
                keyid:0B:C5:8F:27:35:2A:20:44:56:6D:6D:BE:D9:44:10:08:90:7B:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:c0:74:b4:ef:9b:55:e4:49:87:ae:69:54:d6:ed:b2:9f:56:
         1a:32:c1:48:58:29:a8:3a:26:93:a1:bb:cc:fb:2a:07:35:77:
         ce:ec:98:e3:34:75:9a:85:f0:a8:85:ed:3e:66:d6:16:13:49:
         2f:96:c4:40:9f:3f:ce:5c:26:c9:b4:60:74:52:b8:fb:57:f6:
         a0:21:0a:3e:6a:4a:12:ec:38:8b:eb:f2:1b:d3:e8:39:74:75:
         3d:b6:01:64:37:e1:d7:ed:e0:f2:73:2d:a7:81:97:51:63:17:
         26:18:28:d9:64:f7:fb:f7:12:47:ee:b7:b6:17:72:2e:b1:1d:
         22:4b:e6:f5:f6:ac:12:62:63:0d:65:05:89:df:ae:49:88:50:
         90:69:5a:55:0f:53:3c:a3:bc:77:cf:0d:8e:3a:d1:aa:0d:8a:
         be:39:50:e4:f5:2a:fa:de:4c:46:1a:28:00:5d:9d:4f:d3:6b:
         68:53:0f:18:e5:bd:12:61:c4:33:3d:01:f6:b6:cf:dc:c7:3c:
         2f:6e:c9:a1:6c:20:9c:94:35:1b:5b:f0:30:db:22:7f:31:8c:
         85:b6:a1:78:cd:a0:aa:67:1c:82:1c:52:91:76:6c:3f:27:27:
         74:59:35:e0:ed:f1:d5:9a:17:3f:d3:4d:7b:f7:e6:b6:ff:df:
         04:d8:b8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:38 2026 by rpki-client