Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203534323532.roa
File:                     3136352e3134302e32372e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier:          i6SllSmn92lyxwCyF/7XFoj1Qnfc6F7BynX/boNBjW8=
Subject key identifier:   47:E8:8D:5E:52:B5:E9:99:1A:B4:66:D9:CA:AA:B4:00:56:FC:53:F5
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       2695E29F5D7BF0C9A4DA41E709958FD2879D8681
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203534323532.roa
Signing time:             Fri 10 Oct 2025 12:26:45 +0000
ROA not before:           Fri 10 Oct 2025 12:21:45 +0000
ROA not after:            Fri 09 Oct 2026 12:26:45 +0000
asID:                     54252
IP address blocks:        165.140.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 11:50:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:95:e2:9f:5d:7b:f0:c9:a4:da:41:e7:09:95:8f:d2:87:9d:86:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Oct 10 12:21:45 2025 GMT
            Not After : Oct  9 12:26:45 2026 GMT
        Subject: CN=47E88D5E52B5E9991AB466D9CAAAB40056FC53F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:fd:73:cb:d1:d7:32:62:22:89:7f:79:c8:
                    aa:e6:3e:95:09:d1:71:1c:09:ff:36:6f:4c:4c:0e:
                    0f:1a:a7:a6:e0:61:de:70:53:bc:a4:5e:25:19:b9:
                    fd:b7:4e:45:1f:12:88:e8:e2:d8:e4:11:00:ac:ba:
                    4b:35:14:0d:5e:ae:b8:a2:5f:e3:b8:d8:a0:e2:af:
                    ce:ef:fa:90:e8:9f:ef:72:49:3b:6b:b4:5f:f4:82:
                    5e:04:82:41:99:d5:31:60:22:5f:1b:be:f7:22:47:
                    86:6d:9d:6b:ac:24:51:c7:ab:8f:4d:95:05:30:21:
                    78:23:c2:b0:3e:37:e8:aa:c0:c8:a9:5d:11:40:81:
                    d7:6e:29:65:7b:da:10:1a:70:09:0b:c1:30:06:09:
                    19:cf:fc:97:a2:9f:c3:f5:37:7b:68:7e:1e:e4:17:
                    48:bd:e6:16:85:10:02:8d:c6:d2:e5:59:1f:67:7f:
                    90:a0:ec:17:9d:d9:93:b2:5e:97:f7:1f:7c:09:a2:
                    7f:fb:f0:d5:34:5e:94:f7:37:d3:89:55:31:b2:66:
                    6b:c5:ac:a6:29:8d:3a:e5:9e:08:cb:5b:2f:19:ca:
                    e4:db:3a:3d:e6:fe:f6:bb:ad:30:0a:bf:9f:2b:0d:
                    a1:6b:32:a2:b0:09:b2:d6:b5:8e:5d:96:89:8e:b0:
                    c4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:E8:8D:5E:52:B5:E9:99:1A:B4:66:D9:CA:AA:B4:00:56:FC:53:F5
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203534323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:37:43:f6:1c:e3:51:0f:f6:2b:27:5c:64:4c:20:9e:1f:08:
         26:9d:39:78:2c:f3:9b:e3:fb:87:63:79:61:7e:33:96:fa:5c:
         2f:95:18:a5:84:91:69:c2:84:75:62:a9:f9:cd:91:b4:e6:ab:
         41:2d:ab:c1:50:14:b7:a4:ae:94:76:19:40:ce:9c:cf:35:08:
         22:c8:96:bf:fe:23:8a:9c:25:cd:2f:f2:35:05:eb:7b:75:a0:
         6a:7d:d8:e5:f5:d0:e7:65:a9:30:f1:39:00:f2:2a:1b:47:1c:
         1b:58:4d:fd:a4:ee:d4:ec:24:20:89:9d:2c:9e:4d:38:73:55:
         bf:b8:ac:7b:18:b9:f4:b3:6b:95:5e:4e:4b:69:15:97:ce:8b:
         93:4f:eb:7a:8f:60:92:26:b3:38:03:b3:00:cd:03:89:04:cc:
         c0:1c:37:fc:75:33:0b:51:21:b3:5f:9a:8a:7a:4d:90:44:b6:
         82:9b:7c:2d:be:b5:ef:a0:22:2f:87:58:51:e1:fa:44:a0:f9:
         c4:31:05:21:13:8a:d7:2a:fb:ad:9c:25:3e:26:c4:c6:83:82:
         d0:5b:1d:fc:85:7c:70:fc:97:60:55:0a:75:e0:c6:55:f6:1b:
         47:c7:87:98:43:2c:03:39:47:4c:20:86:b1:e3:48:44:16:b2:
         f9:01:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:20:28 2025 by rpki-client