Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/32332e3134302e32302e302f32342d3234203d3e20343031373630.roa
File:                     32332e3134302e32302e302f32342d3234203d3e20343031373630.roa (raw, json)
Hash identifier:          sMEHBa0UJHPoASGBPOyN70pUSVztvTxhz6ZKafTiJG8=
Subject key identifier:   E8:2E:0A:1A:F2:06:19:72:7C:8B:F0:5C:96:46:CE:F2:23:03:CF:10
Certificate issuer:       /CN=cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf
Certificate serial:       26C69FDAF5238F3843BFE87CAF83B0658C179989
Authority key identifier: EA:01:8B:25:10:4B:F7:51:B2:B8:90:0C:54:B2:13:3F:C3:C7:9C:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/32332e3134302e32302e302f32342d3234203d3e20343031373630.roa
Signing time:             Tue 10 Jun 2025 18:26:06 +0000
ROA not before:           Tue 10 Jun 2025 18:21:06 +0000
ROA not after:            Tue 09 Jun 2026 18:26:06 +0000
asID:                     401760
IP address blocks:        23.140.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/EA018B25104BF751B2B8900C54B2133FC3C79CEC.crl
                          rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/EA018B25104BF751B2B8900C54B2133FC3C79CEC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/e91c6482-7261-4772-b3f7-fd5fa4ae995c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 18:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c6:9f:da:f5:23:8f:38:43:bf:e8:7c:af:83:b0:65:8c:17:99:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf
        Validity
            Not Before: Jun 10 18:21:06 2025 GMT
            Not After : Jun  9 18:26:06 2026 GMT
        Subject: CN=E82E0A1AF20619727C8BF05C9646CEF22303CF10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:24:7b:2d:5c:ad:93:7a:83:9d:f2:64:f6:2e:
                    a2:4b:2f:38:6f:00:fd:83:dc:1b:1b:1c:74:11:01:
                    35:24:63:44:79:05:cd:91:88:14:22:46:ee:61:23:
                    c7:3e:b5:64:a8:2a:7e:c4:ec:f7:db:fa:20:e3:5f:
                    84:d4:fd:2a:01:3e:df:ec:80:7c:20:74:c2:46:c1:
                    1b:8f:a2:21:66:fb:6f:08:20:03:9d:30:5f:95:c6:
                    ee:97:df:e0:c0:e7:00:87:ae:90:f5:d3:b6:b5:ef:
                    d7:e5:0d:ca:70:a9:50:df:b8:48:f3:62:7f:12:93:
                    90:f7:22:87:5e:e7:d7:94:c8:42:9b:53:6a:a5:36:
                    2d:1a:7c:0e:62:a6:ff:8e:7f:17:65:f7:24:ba:00:
                    24:08:6a:b1:e7:f8:16:a3:5c:fa:48:fe:da:23:0c:
                    92:da:f3:33:7e:8f:12:4a:ec:e4:d5:93:e5:67:1b:
                    48:f7:e7:63:b5:2f:c6:06:1e:91:a9:48:9d:e4:70:
                    58:b0:a5:1e:26:2a:b5:c1:ae:72:d6:ac:f2:78:2f:
                    2b:88:30:41:eb:a5:28:a9:7f:ba:29:2d:3e:0c:44:
                    c2:8c:4e:a0:d7:5c:1b:ba:e8:91:9e:68:e5:98:57:
                    fa:9b:67:e1:71:04:59:c7:82:36:72:d0:f3:aa:08:
                    4e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2E:0A:1A:F2:06:19:72:7C:8B:F0:5C:96:46:CE:F2:23:03:CF:10
            X509v3 Authority Key Identifier:
                keyid:EA:01:8B:25:10:4B:F7:51:B2:B8:90:0C:54:B2:13:3F:C3:C7:9C:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/EA018B25104BF751B2B8900C54B2133FC3C79CEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e91c6482-7261-4772-b3f7-fd5fa4ae995c/cb1ee00ccae4705dab326a95a429cd234025a167151c2a6faf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/3b01b744c8b84d72b2aa6247a2c06401/0/32332e3134302e32302e302f32342d3234203d3e20343031373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.140.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:98:b3:c9:b7:26:be:23:57:10:12:fc:86:39:6c:d6:62:79:
         ce:b6:ac:34:c2:93:cf:8b:00:65:75:22:c6:f8:67:12:78:e7:
         f8:0d:37:f1:d4:46:5d:1a:b2:3a:0d:df:61:05:05:9b:89:b6:
         ae:01:e0:f4:71:28:1d:f9:f6:f4:d1:7a:a9:e7:21:8c:e6:7a:
         77:77:0c:05:ec:59:0f:4b:db:34:8f:a7:1f:ab:c4:28:06:84:
         25:30:04:3c:79:77:a8:b0:22:e9:aa:f5:4e:47:9f:d5:08:2d:
         a3:72:78:1b:e8:a9:8b:fb:bc:46:13:f3:4c:32:d1:92:ed:79:
         87:db:62:9d:3b:2c:c2:99:06:2b:26:a7:32:f1:e8:e6:f0:21:
         69:fe:8b:30:21:b2:27:cd:bd:c4:ea:47:39:85:f4:e6:d1:34:
         0c:32:6f:9c:68:c8:9c:b1:c5:e2:85:71:89:fe:fd:35:00:50:
         17:58:b3:bd:64:34:81:6d:7b:49:93:9e:46:d7:b2:b2:da:71:
         14:1f:a9:fd:51:d5:80:f8:b6:c4:3b:67:07:85:01:4f:5d:cf:
         1e:cf:54:ba:60:88:7a:56:8b:38:a8:56:41:d9:6d:e5:1e:6f:
         36:27:ba:89:00:f2:4c:95:8c:0c:75:b2:e8:26:96:a3:a1:04:
         7c:d7:4e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:02:44 2025 by rpki-client