Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32362e302f32342d3234203d3e203235313938.roa
File:                     3136352e3134302e32362e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          sbG+gpC1dVT/UMN3WN1JaIkPiM5gEAd+D1ln8D/gYvA=
Subject key identifier:   31:62:3A:55:AC:E6:D1:9E:3B:20:0D:13:90:40:E6:7E:1D:CC:6C:6F
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       504B1EF1E7F8C7D3E227EA0C15AFD29116E8A203
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32362e302f32342d3234203d3e203235313938.roa
Signing time:             Fri 19 Sep 2025 07:23:01 +0000
ROA not before:           Fri 19 Sep 2025 07:18:01 +0000
ROA not after:            Fri 18 Sep 2026 07:23:01 +0000
asID:                     25198
IP address blocks:        165.140.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:4b:1e:f1:e7:f8:c7:d3:e2:27:ea:0c:15:af:d2:91:16:e8:a2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Sep 19 07:18:01 2025 GMT
            Not After : Sep 18 07:23:01 2026 GMT
        Subject: CN=31623A55ACE6D19E3B200D139040E67E1DCC6C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:dd:9b:6a:50:34:92:04:77:8f:5a:18:82:
                    e8:9c:fc:ee:95:37:df:de:af:90:92:64:67:fd:f8:
                    0e:67:6b:a8:03:73:e3:c4:fb:51:28:56:97:55:2e:
                    c9:14:91:68:1f:da:be:90:be:f8:a8:3c:02:27:47:
                    50:5c:0c:b1:37:3b:54:79:20:2a:66:10:91:74:a6:
                    54:c0:52:a4:20:81:74:69:6a:d9:c1:c8:35:d1:3a:
                    20:55:40:c8:2c:40:d1:0f:fa:98:7f:ee:40:4a:a9:
                    34:cd:ec:e3:ad:f1:48:eb:76:ac:c1:89:ca:b6:05:
                    79:4d:7e:e3:f5:6b:5c:43:a5:24:30:1d:73:fe:d8:
                    e3:ee:33:26:2c:06:d1:b0:75:27:bb:fa:31:f2:92:
                    f3:8a:7e:7f:39:f9:2d:75:bd:03:0e:da:c2:b1:fe:
                    1c:87:71:5b:41:97:39:7e:61:8a:0a:ff:c2:0f:c7:
                    45:91:52:b6:6c:65:9f:4c:3a:49:83:f9:2d:c2:70:
                    86:31:4d:23:4b:44:49:d1:29:7f:2f:7b:73:59:44:
                    31:50:87:a7:14:22:68:16:41:03:ab:7f:fc:81:d2:
                    ae:8e:07:b8:3f:12:96:69:9f:ff:89:cd:d7:14:d5:
                    6a:ff:ba:69:48:c4:d6:66:2f:8b:29:02:1b:7b:e3:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:62:3A:55:AC:E6:D1:9E:3B:20:0D:13:90:40:E6:7E:1D:CC:6C:6F
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32362e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:59:96:33:d6:ab:7f:4d:92:27:42:99:27:54:c7:b3:52:9a:
         92:e3:89:db:64:98:04:18:42:55:d4:22:4f:c2:65:2f:d4:e1:
         c0:6a:d3:2e:5d:12:75:ed:dd:f3:97:88:18:e0:49:7d:08:9a:
         4f:64:e8:d4:c5:41:8c:37:69:58:cd:82:7d:1b:17:c3:d6:75:
         9b:c3:d3:0e:76:5a:f2:21:b1:82:02:28:9b:74:44:1a:d8:13:
         0c:3d:fe:18:7c:b5:0f:60:87:45:80:8e:3a:d5:44:f8:7d:2f:
         b8:2b:b1:16:71:a8:cd:1f:97:10:82:85:07:ec:4b:4d:3a:b9:
         0b:b4:98:0d:32:55:0d:4d:a1:6a:bb:51:36:d8:6c:2c:e7:1a:
         a7:73:71:c7:24:a8:89:fd:e5:ac:e4:44:84:2d:a4:5d:b6:b4:
         f3:9f:3b:77:c6:5a:d0:93:0b:10:01:30:ac:98:81:d4:8e:5d:
         f0:65:e3:e9:bf:1c:aa:57:ca:ea:32:ef:2d:0b:2c:99:47:42:
         25:ff:e5:77:6d:1b:49:48:3c:24:92:df:8b:09:6d:97:cb:87:
         55:49:f6:5a:21:5b:40:20:c0:f5:70:d3:cb:fd:ab:2e:7d:df:
         22:49:1f:50:ed:1b:8b:56:7f:1b:72:86:3e:ef:89:9e:a4:95:
         99:b8:be:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:32:41 2025 by rpki-client