Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203634323637.roa
File:                     3136352e3134302e32372e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          JOe5Bws2Czl2Xfjv8NkbPuCupbQkAHqMlv0J80ZQIuM=
Subject key identifier:   23:C6:C9:61:0B:89:4D:91:BD:D6:A5:BF:47:26:0D:0A:C4:F3:7B:16
Certificate issuer:       /CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
Certificate serial:       0EFFD01976ACE75EE6A3DD94B730908DF264D358
Authority key identifier: DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203634323637.roa
Signing time:             Fri 10 Oct 2025 12:26:45 +0000
ROA not before:           Fri 10 Oct 2025 12:21:45 +0000
ROA not after:            Fri 09 Oct 2026 12:26:45 +0000
asID:                     64267
IP address blocks:        165.140.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl
                          rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:14:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ff:d0:19:76:ac:e7:5e:e6:a3:dd:94:b7:30:90:8d:f2:64:d3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ba337ccffba850aee18f19afde78df32c0ba157691abac40f
        Validity
            Not Before: Oct 10 12:21:45 2025 GMT
            Not After : Oct  9 12:26:45 2026 GMT
        Subject: CN=23C6C9610B894D91BDD6A5BF47260D0AC4F37B16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:85:b1:6b:76:95:a1:3d:24:70:ec:50:57:ce:
                    ba:c5:d0:b6:0f:c6:68:f2:73:60:66:71:29:58:a7:
                    be:a4:5b:4c:79:4e:47:b6:ef:c2:63:2f:9c:df:56:
                    e1:00:68:88:0d:53:70:15:55:8e:ac:af:92:39:e0:
                    d5:be:5b:61:56:80:d4:ac:74:b0:d9:3b:50:54:bd:
                    fe:70:61:05:de:55:3f:3a:c3:38:ea:2e:4d:34:c6:
                    dd:00:71:6d:9d:ad:1c:e7:3e:a6:c1:d7:f4:9c:ca:
                    cf:49:07:f1:ce:97:b7:bc:82:a2:48:e5:34:44:6c:
                    21:7f:77:c6:c1:36:cf:9f:ea:30:a6:fa:e1:2f:a6:
                    c2:34:26:25:fd:0d:c7:c2:59:95:22:18:91:04:10:
                    f4:c3:4f:d1:b9:ca:5b:09:e2:fb:64:57:81:f1:29:
                    da:51:01:b4:bf:57:d3:cf:55:ff:8d:38:d7:bf:59:
                    ec:cd:4b:2c:85:95:21:d8:ed:21:f4:8e:e6:46:b6:
                    19:2a:23:43:6e:31:0a:1b:d9:7e:8c:00:8e:4b:91:
                    cc:94:02:ca:b4:f4:84:8c:54:22:d3:39:9d:70:5c:
                    10:25:dc:79:e4:09:9a:ed:9c:ab:25:3b:de:87:89:
                    42:da:7e:02:68:7c:61:83:66:95:4d:b4:c9:62:3e:
                    d5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C6:C9:61:0B:89:4D:91:BD:D6:A5:BF:47:26:0D:0A:C4:F3:7B:16
            X509v3 Authority Key Identifier:
                keyid:DD:0F:64:0C:3D:CE:05:CA:F5:25:4D:8A:BF:D0:9F:8E:7B:EE:3E:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/DD0F640C3DCE05CAF5254D8ABFD09F8E7BEE3E11.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cf90d7bf-dad6-4851-ac33-f1ca8b32ec68/4ba337ccffba850aee18f19afde78df32c0ba157691abac40f.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/2ee4d080f9714f99b29ca55a546e6ef4/0/3136352e3134302e32372e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:a4:06:a5:0e:77:a9:c2:b1:5c:ca:c1:09:73:70:ae:6a:df:
         d2:ec:4c:56:12:2f:6d:c2:dc:b0:a8:29:b6:37:cb:ae:d7:ee:
         3d:14:82:2f:5f:bd:89:97:de:f0:b0:c7:fd:2c:f3:95:2c:40:
         51:7a:a8:af:2d:a8:12:20:87:82:f8:73:0b:d0:8a:5a:a9:28:
         a3:d0:db:f9:0b:d6:46:08:06:f3:ba:65:22:b7:74:24:4d:76:
         03:47:f6:d3:f9:93:34:2a:a5:27:9a:96:28:35:08:44:16:4a:
         a4:2a:0f:02:e2:f9:4a:91:47:14:57:a1:1e:12:43:8f:e7:c9:
         b0:29:4b:7d:73:d1:66:74:b8:90:93:01:70:ec:40:04:10:e9:
         76:65:29:94:58:a1:f0:d6:c2:52:b8:fd:d5:9a:4f:37:03:67:
         cf:35:58:7c:09:a8:b1:ce:b5:03:88:3d:d3:84:de:ea:f7:b4:
         5e:10:22:68:d3:0f:b3:8c:cf:d8:4c:34:97:6d:8e:df:10:2d:
         0e:66:6a:ce:6e:6f:21:c2:32:cf:39:11:68:22:ff:2f:d3:9b:
         5a:d9:dc:70:37:8c:10:d7:cb:e8:68:9c:ac:14:46:3d:9e:f9:
         a1:b5:14:d2:35:4d:22:80:f5:72:79:5b:ab:72:dd:7e:b6:cb:
         30:c5:32:91
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUDv/QGXas517mo92UtzCQjfJk01gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNGJhMzM3Y2NmZmJhODUwYWVlMThmMTlhZmRlNzhkZjMy
YzBiYTE1NzY5MWFiYWM0MGYwHhcNMjUxMDEwMTIyMTQ1WhcNMjYxMDA5MTIyNjQ1
WjAzMTEwLwYDVQQDEygyM0M2Qzk2MTBCODk0RDkxQkRENkE1QkY0NzI2MEQwQUM0
RjM3QjE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIWxa3aVoT0k
cOxQV866xdC2D8Zo8nNgZnEpWKe+pFtMeU5Htu/CYy+c31bhAGiIDVNwFVWOrK+S
OeDVvlthVoDUrHSw2TtQVL3+cGEF3lU/OsM46i5NNMbdAHFtna0c5z6mwdf0nMrP
SQfxzpe3vIKiSOU0RGwhf3fGwTbPn+owpvrhL6bCNCYl/Q3HwlmVIhiRBBD0w0/R
ucpbCeL7ZFeB8SnaUQG0v1fTz1X/jTjXv1nszUsshZUh2O0h9I7mRrYZKiNDbjEK
G9l+jACOS5HMlALKtPSEjFQi0zmdcFwQJdx55Ama7ZyrJTveh4lC2n4CaHxhg2aV
TbTJYj7V1wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFCPGyWELiU2Rvdalv0cmDQrE
83sWMB8GA1UdIwQYMBaAFN0PZAw9zgXK9SVNir/Qn4577j4RMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzJlZTRkMDgwZjk3MTRmOTliMjljYTU1YTU0NmU2ZWY0LzAv
REQwRjY0MEMzRENFMDVDQUY1MjU0RDhBQkZEMDlGOEU3QkVFM0UxMS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZmRlMTY5ZWQtZDBkMi00MTY1LTgzMDgtZGYyNTk3
ZTM0M2Y4L2NmOTBkN2JmLWRhZDYtNDg1MS1hYzMzLWYxY2E4YjMyZWM2OC80YmEz
MzdjY2ZmYmE4NTBhZWUxOGYxOWFmZGU3OGRmMzJjMGJhMTU3NjkxYWJhYzQwZi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS8yZWU0ZDA4MGY5NzE0Zjk5YjI5Y2E1
NWE1NDZlNmVmNC8wLzMxMzYzNTJlMzEzNDMwMmUzMjM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzNDMyMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKWMGzANBgkqhkiG9w0BAQsF
AAOCAQEAmaQGpQ53qcKxXMrBCXNwrmrf0uxMVhIvbcLcsKgptjfLrtfuPRSCL1+9
iZfe8LDH/SzzlSxAUXqory2oEiCHgvhzC9CKWqkoo9Db+QvWRggG87plIrd0JE12
A0f20/mTNCqlJ5qWKDUIRBZKpCoPAuL5SpFHFFehHhJDj+fJsClLfXPRZnS4kJMB
cOxABBDpdmUplFih8NbCUrj91ZpPNwNnzzVYfAmosc61A4g904Te6ve0XhAiaNMP
s4zP2Ew0l22O3xAtDmZqzm5vIcIyzzkRaCL/L9ObWtnccDeMENfL6GicrBRGPZ75
obUU0jVNIoD1cnlbq3LdfrbLMMUykQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 03:43:19 2025 by rpki-client