Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32352e302f32342d3234203d3e2039333034.roa
File:                     3134302e3233352e32352e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          UhmZtLQg7WGnnDaXCrUbfa2IJS/TfdLWLhj5WzVVVRQ=
Subject key identifier:   58:24:81:E2:BB:A3:1D:27:B9:49:E0:98:95:8E:55:AF:EC:AF:2D:03
Certificate issuer:       /CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Certificate serial:       625C9577234923C7FAF35602F5F2DEDA6DD5BF4A
Authority key identifier: A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32352e302f32342d3234203d3e2039333034.roa
Signing time:             Wed 02 Sep 2026 04:20:21 +0000
ROA not before:           Wed 02 Sep 2026 04:15:21 +0000
ROA not after:            Wed 01 Sep 2027 04:20:21 +0000
asID:                     9304
IP address blocks:        140.235.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
                          rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 18:17:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5c:95:77:23:49:23:c7:fa:f3:56:02:f5:f2:de:da:6d:d5:bf:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
        Validity
            Not Before: Sep  2 04:15:21 2026 GMT
            Not After : Sep  1 04:20:21 2027 GMT
        Subject: CN=582481E2BBA31D27B949E098958E55AFECAF2D03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8d:18:7a:2e:26:f4:98:08:47:97:b3:54:9a:
                    59:26:4c:37:63:94:4d:be:27:54:e8:61:be:0c:8f:
                    68:c5:a5:84:02:d5:da:ec:7d:c7:f3:b7:d5:5b:24:
                    13:f6:be:2e:51:f7:04:94:03:1b:1d:33:3d:80:8d:
                    b7:bd:b0:c1:09:dc:73:b3:73:f5:9e:14:7e:e3:55:
                    47:68:02:74:c4:c6:d1:81:fd:c0:c0:c3:b1:8b:2a:
                    a8:c9:1a:48:f8:75:45:cb:12:04:4a:b6:76:5f:cb:
                    12:0c:47:28:2c:69:0b:96:11:b6:ea:8c:52:4a:8c:
                    97:b3:63:89:c0:30:dd:66:54:2d:9c:ca:31:db:d1:
                    a0:38:34:dc:80:3b:8f:f7:07:b4:d4:d4:a5:34:93:
                    80:5b:fc:e1:a5:0c:00:36:0b:68:5b:9d:17:36:06:
                    e6:14:36:80:23:7c:97:6e:dc:b1:16:0b:a9:53:c2:
                    90:25:b2:9b:70:48:91:1d:2e:4c:e1:4e:af:83:7a:
                    46:e2:67:22:80:ad:47:2d:08:58:08:88:5d:0a:36:
                    65:21:3c:32:06:dd:57:7e:bb:d0:0b:8f:7b:6e:b3:
                    43:f0:86:d5:86:e9:df:47:9a:f6:ac:eb:5d:e4:79:
                    6c:44:f5:fa:a1:5b:e4:92:e9:31:bb:32:97:79:5d:
                    d4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:24:81:E2:BB:A3:1D:27:B9:49:E0:98:95:8E:55:AF:EC:AF:2D:03
            X509v3 Authority Key Identifier:
                keyid:A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32352e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:72:24:39:57:47:5c:e8:c6:cc:96:81:ae:63:86:23:f6:88:
         5b:14:b4:f1:1a:40:3c:34:a9:de:ae:fe:ce:25:91:13:be:7d:
         03:9d:59:f3:6d:de:57:e1:81:d7:e8:26:c7:23:ef:29:0f:65:
         68:5a:01:46:f5:af:c4:0b:61:dd:c7:2f:ca:0c:e8:e0:bd:a6:
         7e:de:6a:0d:06:94:b3:1d:17:03:55:4d:2a:8e:a9:36:cf:8e:
         b4:29:47:04:d0:0c:ec:4c:da:f7:d9:0d:40:4a:e5:80:20:21:
         53:ad:06:e7:60:11:0c:88:e2:c1:ab:8e:27:fa:92:4b:7b:19:
         82:31:85:31:4d:71:4d:d1:e1:79:c1:d1:57:24:b3:db:d8:ae:
         0a:ba:91:94:86:50:94:38:5d:3a:38:73:f4:dc:d8:02:84:c4:
         97:79:cc:d7:8b:88:9b:cc:5a:0d:44:e6:99:a1:d2:4b:14:ef:
         93:0e:68:1a:6d:6c:9b:f1:70:9c:bb:b5:e1:9f:e1:82:f7:88:
         3f:a8:d8:81:da:7f:43:49:e5:c5:63:53:82:27:c4:d1:83:1b:
         1a:2b:f7:59:5d:86:b8:97:91:63:4e:d2:62:08:51:ad:72:dc:
         aa:af:50:a3:35:a0:d0:06:5a:06:39:2c:43:f4:9e:69:e6:ad:
         0b:65:f5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:24 2026 by rpki-client