Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32362e302f32342d3234203d3e20383334.roa
File:                     3136352e3134302e32362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          VX364NMuoKMJPzuTVxxrw7MZD8JjEaPCa7MqSDRg/qg=
Subject key identifier:   3E:C8:74:11:E6:84:34:E4:96:0B:67:12:30:61:76:EE:79:B1:E3:24
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       6C950D6D9217AB5A4ACB5EF375BF28C8C4B6634A
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32362e302f32342d3234203d3e20383334.roa
Signing time:             Mon 27 Apr 2026 10:46:28 +0000
ROA not before:           Mon 27 Apr 2026 10:41:28 +0000
ROA not after:            Mon 26 Apr 2027 10:46:28 +0000
asID:                     834
IP address blocks:        165.140.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:95:0d:6d:92:17:ab:5a:4a:cb:5e:f3:75:bf:28:c8:c4:b6:63:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Apr 27 10:41:28 2026 GMT
            Not After : Apr 26 10:46:28 2027 GMT
        Subject: CN=3EC87411E68434E4960B6712306176EE79B1E324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:3b:f9:00:a9:e2:8c:ad:66:75:6b:22:bb:03:
                    02:38:11:09:26:c0:2f:dc:4f:f7:66:f2:e4:2c:be:
                    1c:c1:66:dc:3d:0f:ff:87:dd:a8:38:10:31:9f:fc:
                    3b:c8:5f:66:90:20:0d:cb:95:38:f0:bf:17:fb:3b:
                    94:97:42:ea:9e:95:56:b5:14:83:b8:63:66:d9:6f:
                    4f:97:b6:7f:bf:a8:3b:54:f1:0e:81:b1:c0:3b:5d:
                    c9:31:f9:36:c3:eb:90:de:d0:f8:02:7e:e7:ff:2c:
                    59:6c:4a:8a:80:83:71:eb:b6:a2:21:75:08:2f:f6:
                    6a:d2:4f:e3:a5:33:a8:53:94:3e:76:de:c2:ab:35:
                    60:95:67:33:bf:fa:34:1d:cc:e8:36:f7:79:6d:4d:
                    4d:2f:43:cd:e5:db:f7:77:8e:09:5f:d7:7c:23:32:
                    cd:b7:93:d4:b4:f3:88:51:7d:d9:2c:7e:52:3f:be:
                    b0:3a:a3:8f:ab:2d:44:d0:a6:0e:1f:56:3d:19:15:
                    0c:65:ef:40:f4:63:8d:de:0b:02:df:c9:32:a9:ab:
                    7b:b2:a3:77:d5:f5:0f:63:fe:d3:b6:1b:8a:c0:f9:
                    3f:c4:57:e9:c9:cb:62:0b:03:6d:37:79:94:38:e5:
                    59:ad:79:ad:cb:90:70:ec:4a:95:06:2d:3d:fa:00:
                    88:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:C8:74:11:E6:84:34:E4:96:0B:67:12:30:61:76:EE:79:B1:E3:24
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:07:c4:7b:a4:30:7b:5f:2e:bf:23:82:58:f8:3f:45:21:8e:
         42:1f:cf:1a:ce:ad:8d:a4:b3:31:9a:29:65:2a:a7:1e:73:b7:
         a4:d4:8e:45:bf:15:da:2e:84:91:b2:f3:fb:24:d2:22:04:38:
         45:94:2d:ba:a5:6a:33:4a:51:3f:c5:f4:98:dc:b6:ad:d3:ec:
         b4:d6:f0:55:7d:bd:39:59:74:b3:cd:6a:ff:b5:5d:8a:c8:7e:
         41:f9:ff:02:7e:32:b2:de:d1:bc:55:8c:68:18:6f:e5:07:e7:
         9e:93:db:57:e8:e1:32:58:d7:9e:59:e9:96:4e:80:ac:1d:b3:
         ec:50:f6:73:81:eb:55:c8:41:75:9c:eb:dc:65:fd:d3:88:c8:
         5e:05:79:9d:15:19:33:99:93:e8:ae:7b:ca:dd:09:d1:cc:ac:
         70:b3:b7:57:8d:dd:ba:f9:80:15:56:f1:b6:02:f3:c4:3b:41:
         e7:84:2c:0f:c6:6a:cf:78:4d:07:eb:6f:ea:49:f1:13:92:c9:
         39:d2:2e:59:5b:b4:fa:73:11:28:e1:b7:82:5f:8b:f1:08:7c:
         83:c3:45:f5:b7:a1:0e:1c:40:0a:08:ca:54:fa:75:a5:81:5f:
         a8:36:48:37:6a:28:71:d8:72:cf:4b:b4:16:31:5e:0a:4b:f6:
         30:31:ce:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:30:48 2026 by rpki-client