Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133302e302f32342d3234203d3e203534323138.roa
File:                     3134302e3233352e3133302e302f32342d3234203d3e203534323138.roa (raw, json)
Hash identifier:          p1RROUAtvrBs7o/sAcXib+ssD8ZqYao6FAoddAFI2FU=
Subject key identifier:   2D:00:1B:29:72:13:63:68:A1:E3:8E:FA:96:BB:13:07:21:5D:8E:80
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       2015798DCE6DAA804B2531E8373B25761CB1F63C
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133302e302f32342d3234203d3e203534323138.roa
Signing time:             Sat 27 Sep 2025 00:19:27 +0000
ROA not before:           Sat 27 Sep 2025 00:14:27 +0000
ROA not after:            Sat 26 Sep 2026 00:19:27 +0000
asID:                     54218
IP address blocks:        140.235.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:15:79:8d:ce:6d:aa:80:4b:25:31:e8:37:3b:25:76:1c:b1:f6:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Sep 27 00:14:27 2025 GMT
            Not After : Sep 26 00:19:27 2026 GMT
        Subject: CN=2D001B2972136368A1E38EFA96BB1307215D8E80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:43:cb:a9:51:e9:56:40:6b:c9:a7:b3:57:
                    83:01:9e:55:1a:25:96:01:fd:f5:6e:12:e9:58:47:
                    a6:89:cb:49:d4:00:2f:72:83:4b:13:14:57:39:cb:
                    65:ea:5f:d8:31:84:e2:e9:d1:c2:1d:b8:f1:e0:3d:
                    c0:d0:b6:d1:ce:f7:c3:bd:74:03:15:32:de:b3:16:
                    0a:1e:da:b1:6e:fa:8f:7c:4a:2d:99:8d:c6:3c:9c:
                    d6:fd:a1:fe:f9:75:08:ed:6d:d1:8c:ab:05:b4:19:
                    7c:c8:52:ad:7b:b1:b4:ef:79:20:f3:ec:ff:b1:fc:
                    af:7b:b8:5d:ed:52:bd:39:23:3a:f2:78:97:f6:2a:
                    e6:0b:0b:39:2c:56:72:d1:88:14:bf:0d:f8:d7:ad:
                    d9:93:fd:88:10:b4:8b:67:f5:de:f8:d0:da:cb:cc:
                    c5:d5:dd:75:8d:2a:82:13:c6:f3:a7:a0:31:5f:fe:
                    26:5c:57:79:4b:1c:58:33:32:5c:08:0e:24:f1:a5:
                    40:f0:48:8d:57:b1:dc:2e:ac:01:fa:6c:7e:42:99:
                    1a:aa:53:f7:47:60:66:5c:62:72:84:1c:68:96:18:
                    12:dd:c1:d4:9b:50:67:e7:62:8d:4e:0a:5f:d9:6d:
                    92:35:68:f5:d6:ba:7b:80:34:40:03:a4:58:e3:0b:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:00:1B:29:72:13:63:68:A1:E3:8E:FA:96:BB:13:07:21:5D:8E:80
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133302e302f32342d3234203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:15:bc:67:26:c6:ab:d4:ca:0e:b4:26:df:16:ad:09:2e:96:
         6b:d0:51:5a:5c:cf:01:d1:87:7c:28:7d:0f:c3:4f:af:ee:e3:
         9f:3d:3e:03:e5:c7:18:b0:21:4f:09:69:3a:a3:cd:64:41:c2:
         51:2f:52:05:78:82:a2:1f:08:64:d2:41:8f:18:b8:34:da:97:
         16:22:f8:b3:5d:23:13:c7:01:f5:3f:cf:76:85:9e:8d:f7:24:
         87:9d:9b:b9:e0:da:d7:41:88:6f:cb:43:18:fe:86:c1:e8:9e:
         de:39:31:f9:41:3c:3b:48:26:32:3e:f5:42:32:f8:85:ad:d9:
         49:1b:f4:7b:38:ba:45:54:58:ee:7a:e0:f4:c5:63:69:c8:0e:
         1d:42:e1:24:d2:cc:c2:18:34:2e:2c:43:76:0a:92:d4:f9:fb:
         d5:6c:3f:20:5f:33:c5:eb:ef:2f:2f:24:2e:5f:56:a1:f6:5a:
         a8:3d:13:eb:b3:0b:1f:ee:6a:be:05:64:7a:83:60:61:45:d1:
         cd:5f:2d:9a:cf:b8:6d:25:2b:1f:1f:ae:f2:90:fe:66:38:90:
         bd:60:09:8f:75:b1:ca:8a:49:a4:39:b6:68:07:8e:d6:06:01:
         d0:ac:80:27:f5:02:5f:43:23:7f:b7:08:0a:4b:07:a8:07:3c:
         12:74:71:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:45:52 2025 by rpki-client