Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32362e302f32342d3234203d3e2031303032.roa
File:                     3134302e3233352e32362e302f32342d3234203d3e2031303032.roa (raw, json)
Hash identifier:          hTbTTwJValvrdcxFMWsPNOpDthS3MbgzZ2HLGyl7iGM=
Subject key identifier:   67:79:01:E9:4D:4E:1D:3E:47:D2:31:15:07:F0:E6:08:27:5A:0B:3A
Certificate issuer:       /CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Certificate serial:       241D5C9B1232B8F7D9FB46246027D4792079FE57
Authority key identifier: A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32362e302f32342d3234203d3e2031303032.roa
Signing time:             Mon 14 Sep 2026 01:38:46 +0000
ROA not before:           Mon 14 Sep 2026 01:33:46 +0000
ROA not after:            Mon 13 Sep 2027 01:38:46 +0000
asID:                     1002
IP address blocks:        140.235.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
                          rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:29:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:1d:5c:9b:12:32:b8:f7:d9:fb:46:24:60:27:d4:79:20:79:fe:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
        Validity
            Not Before: Sep 14 01:33:46 2026 GMT
            Not After : Sep 13 01:38:46 2027 GMT
        Subject: CN=677901E94D4E1D3E47D2311507F0E608275A0B3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:64:ae:f0:5c:73:db:7e:02:f8:39:d6:c6:fc:
                    1d:40:37:bc:02:0d:aa:9c:1d:6d:b2:83:6d:d5:38:
                    4d:e8:b1:20:5c:aa:d8:28:1b:48:2f:1a:6e:a7:98:
                    24:3f:36:b5:ef:b0:36:82:ef:29:26:65:28:fc:ec:
                    1f:cd:8c:d7:11:03:06:83:4d:8a:7f:a8:7c:70:73:
                    23:19:de:4f:03:3f:a9:98:8c:5c:30:0b:2e:39:8a:
                    99:47:53:f1:e6:20:49:14:b4:a9:65:de:6a:a2:2a:
                    2e:c8:ac:b2:ee:ff:82:33:5d:78:f0:37:da:19:f0:
                    3c:67:62:26:c2:1d:bb:e9:3c:f6:6a:79:44:94:54:
                    77:f2:d6:ee:b1:62:f5:4f:60:b9:1e:7f:06:db:fb:
                    ab:7a:c4:d6:ff:90:1e:dd:c4:9c:18:ca:c2:85:bf:
                    ff:98:03:8b:da:3d:8b:b6:95:ec:ce:86:8c:9b:eb:
                    12:de:fa:80:4b:64:23:74:b8:e6:a3:7b:f0:9e:4b:
                    2f:95:de:53:2b:b3:ae:a6:be:c4:c3:dd:a2:ef:e4:
                    c5:5f:86:8f:28:08:ae:3d:40:bf:65:a8:59:89:5f:
                    75:2d:e1:ae:0e:67:7e:b0:c4:65:ee:a9:64:14:c3:
                    42:c8:91:bd:9d:82:d4:fc:e8:16:6e:c3:8e:1c:f0:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:79:01:E9:4D:4E:1D:3E:47:D2:31:15:07:F0:E6:08:27:5A:0B:3A
            X509v3 Authority Key Identifier:
                keyid:A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32362e302f32342d3234203d3e2031303032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:4f:8e:75:14:ee:2c:53:18:3e:02:a8:82:ff:c3:4f:d4:72:
         8a:0e:d9:e7:c1:78:a9:ad:42:3e:f4:88:e9:fc:e5:b0:d8:5c:
         44:68:a9:6b:21:4d:e7:3b:d1:ee:ae:92:df:56:c8:ea:5c:50:
         3e:5e:02:d1:38:21:5f:f6:61:a3:c0:6b:07:3d:35:08:09:14:
         09:71:9e:cc:71:bc:7a:2c:fd:e8:09:8a:c2:ae:6b:9a:58:fa:
         25:ef:4d:d3:3b:31:e6:a9:d6:89:d3:77:81:48:48:26:b9:bc:
         33:0f:a1:a2:15:17:2e:cf:00:f1:16:14:74:85:7e:15:0a:56:
         78:cc:ce:23:b7:92:e6:d3:2c:0a:e4:5d:f1:c1:e6:20:0f:68:
         4d:4e:b8:af:ee:97:7f:d1:05:ce:f1:f3:e7:d1:4d:97:af:72:
         be:80:4f:e4:c3:56:bf:41:a0:bd:97:41:48:7c:d6:f3:b4:ca:
         3a:5b:4c:1d:70:b9:65:a3:02:92:59:f3:92:2a:d2:17:55:2f:
         05:9d:87:4d:ce:16:01:49:80:75:d9:a9:8f:8a:c1:30:4e:fa:
         12:ca:c6:6a:60:38:57:a0:0a:66:73:6d:80:78:00:16:0d:88:
         22:5d:d5:c3:21:7b:e7:9d:be:07:6a:03:af:80:d0:d9:a0:82:
         9c:c7:8b:3d
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUJB1cmxIyuPfZ+0YkYCfUeSB5/lcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDlkNmM2MWM2ZDQzYmMyNWEzOGZlMmJhYjg1MWM4YTU5
NTYwNmViMjc5NTU5ZGQzOTQwHhcNMjYwOTE0MDEzMzQ2WhcNMjcwOTEzMDEzODQ2
WjAzMTEwLwYDVQQDEyg2Nzc5MDFFOTRENEUxRDNFNDdEMjMxMTUwN0YwRTYwODI3
NUEwQjNBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2Su8Fxz234C
+DnWxvwdQDe8Ag2qnB1tsoNt1ThN6LEgXKrYKBtILxpup5gkPza177A2gu8pJmUo
/OwfzYzXEQMGg02Kf6h8cHMjGd5PAz+pmIxcMAsuOYqZR1Px5iBJFLSpZd5qoiou
yKyy7v+CM1148DfaGfA8Z2Imwh276Tz2anlElFR38tbusWL1T2C5Hn8G2/uresTW
/5Ae3cScGMrChb//mAOL2j2LtpXszoaMm+sS3vqAS2QjdLjmo3vwnksvld5TK7Ou
pr7Ew92i7+TFX4aPKAiuPUC/ZahZiV91LeGuDmd+sMRl7qlkFMNCyJG9nYLU/OgW
bsOOHPBvjQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFGd5AelNTh0+R9IxFQfw5ggn
Wgs6MB8GA1UdIwQYMBaAFKJ0i1lbrQU03TOLGMG8OzB44TNwMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzY3NGZiZmNkMjQzZDQxMWM5N2EzMTkyYTA1YzhiNDc5LzAv
QTI3NDhCNTk1QkFEMDUzNEREMzM4QjE4QzFCQzNCMzA3OEUxMzM3MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyLzQ5OGY0MjA1LTFjZDgtNGNiZS04NGNiLTAwOGJmZTk0ZTdkNS8wOWQ2
YzYxYzZkNDNiYzI1YTM4ZmUyYmFiODUxYzhhNTk1NjA2ZWIyNzk1NTlkZDM5NC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS82NzRmYmZjZDI0M2Q0MTFjOTdhMzE5
MmEwNWM4YjQ3OS8wLzMxMzQzMDJlMzIzMzM1MmUzMjM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMDMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACM6xowDQYJKoZIhvcNAQELBQAD
ggEBAAtPjnUU7ixTGD4CqIL/w0/UcooO2efBeKmtQj70iOn85bDYXERoqWshTec7
0e6ukt9WyOpcUD5eAtE4IV/2YaPAawc9NQgJFAlxnsxxvHos/egJisKua5pY+iXv
TdM7Meap1onTd4FISCa5vDMPoaIVFy7PAPEWFHSFfhUKVnjMziO3kubTLArkXfHB
5iAPaE1OuK/ul3/RBc7x8+fRTZevcr6AT+TDVr9BoL2XQUh81vO0yjpbTB1wuWWj
ApJZ85Iq0hdVLwWdh03OFgFJgHXZqY+KwTBO+hLKxmpgOFegCmZzbYB4ABYNiCJd
1cMhe+edvgdqA6+A0NmggpzHiz0=
-----END CERTIFICATE-----
Generated at Mon Sep 21 16:58:00 2026 by rpki-client