Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133312e302f32342d3234203d3e203534323138.roa
File:                     3134302e3233352e3133312e302f32342d3234203d3e203534323138.roa (raw, json)
Hash identifier:          5J4XiMBXbdemhyjI39X9ZJwLOxv62SEkDMWJAdlFEk4=
Subject key identifier:   27:F3:B3:DD:1A:FA:7B:EF:12:7C:AD:76:67:E9:E8:1F:C1:AC:D8:D6
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       49DE5FF2192574EF1ABDB2A4F90D24B707AECD51
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133312e302f32342d3234203d3e203534323138.roa
Signing time:             Wed 10 Sep 2025 01:19:23 +0000
ROA not before:           Wed 10 Sep 2025 01:14:23 +0000
ROA not after:            Wed 09 Sep 2026 01:19:23 +0000
asID:                     54218
IP address blocks:        140.235.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 12:42:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:de:5f:f2:19:25:74:ef:1a:bd:b2:a4:f9:0d:24:b7:07:ae:cd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Sep 10 01:14:23 2025 GMT
            Not After : Sep  9 01:19:23 2026 GMT
        Subject: CN=27F3B3DD1AFA7BEF127CAD7667E9E81FC1ACD8D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:79:ea:a2:74:dd:06:9d:65:63:26:b5:7e:
                    45:76:d2:fb:2c:55:e7:87:89:e6:33:8a:dd:0b:ca:
                    11:bc:ad:c5:ad:17:35:fb:cd:83:5e:86:38:5d:34:
                    03:15:bb:a0:73:a5:d5:77:1e:f0:f7:6d:99:c5:aa:
                    b3:59:c1:04:d7:3d:7f:f2:49:ec:1a:9c:c3:76:b9:
                    1d:a7:d6:71:bd:71:d7:f3:50:d6:f0:bd:88:db:f6:
                    65:75:be:83:20:48:f2:0f:41:b1:9d:89:ed:e4:2c:
                    f4:df:7b:8a:f1:81:3a:8b:b3:ee:f6:d0:0f:2f:13:
                    4c:6f:df:7f:ab:c3:9a:68:db:8d:a0:c4:e4:31:86:
                    18:9b:ec:fb:2b:ab:12:9d:1d:9f:ae:1a:a3:a7:1b:
                    95:dc:9b:48:a0:96:75:e1:c4:0e:71:c9:9c:d7:f2:
                    b9:73:7a:c6:d3:9e:71:fe:f9:94:b4:77:30:06:c1:
                    f8:74:69:b8:0e:d9:31:57:5b:5f:b4:29:bb:53:eb:
                    7c:f8:d7:00:8a:43:d5:de:9d:12:d3:d2:a4:d2:89:
                    0c:e2:1e:e1:63:6b:ad:59:0d:91:54:32:3d:88:b6:
                    88:85:e9:f3:83:ee:4a:9c:65:59:07:e4:47:96:c0:
                    fd:e8:c0:9c:f8:49:8a:d2:ce:88:9a:02:d9:c3:cf:
                    a6:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F3:B3:DD:1A:FA:7B:EF:12:7C:AD:76:67:E9:E8:1F:C1:AC:D8:D6
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133312e302f32342d3234203d3e203534323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c8:70:48:a6:22:98:0f:5c:92:30:72:45:b5:f3:6a:15:26:68:
         e0:3a:b0:05:13:39:38:88:0b:ab:92:2c:0a:7a:a6:71:a5:1e:
         f4:65:a6:16:57:69:7e:b1:c1:aa:fd:2d:69:76:b2:ad:82:28:
         23:10:4b:f8:d0:36:90:21:ed:2a:05:82:fa:71:7b:9c:94:ca:
         fd:50:88:c6:8b:55:2c:b6:c7:0a:a6:63:cf:f5:9d:04:5a:64:
         49:ff:71:ac:ef:03:ec:81:08:bc:c7:13:ee:eb:8d:04:f4:02:
         08:a5:b0:17:07:c5:59:8b:0f:63:ca:f9:af:ff:40:34:36:5c:
         0b:03:e9:ea:cd:d0:34:89:a4:b0:a1:81:1d:d5:01:76:e6:65:
         93:d8:eb:58:b5:48:6f:2a:ef:08:e7:a2:a4:90:83:7c:b3:b8:
         92:18:c5:c6:af:22:ea:ef:04:a9:bc:54:92:25:4f:17:e3:ce:
         f1:4f:dd:6f:7d:8c:c1:34:4e:f3:bd:53:1d:cc:86:95:a2:cc:
         2c:b4:7e:59:d7:b2:9c:5d:e2:ce:0d:ce:d9:03:c3:76:91:76:
         04:85:cd:7a:cf:50:eb:b6:b0:c9:45:29:85:b8:97:8e:e4:8e:
         d2:8f:d3:30:33:b4:36:96:1c:16:7f:71:c8:fb:71:8b:8b:cf:
         29:a5:fd:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:11:23 2025 by rpki-client