Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32362e302f32342d3234203d3e20333937303332.roa
File:                     3134302e3233352e32362e302f32342d3234203d3e20333937303332.roa (raw, json)
Hash identifier:          SR5aYHAoXv8T+KjFO2PK9KMEp4RQzKdtLIB1aL8XZjs=
Subject key identifier:   47:C1:BC:DD:CE:03:E8:19:A4:28:89:82:0A:F7:03:4E:EC:F8:EE:F6
Certificate issuer:       /CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
Certificate serial:       6CC809BCBCD3BBC9A8FC8FBB23BA399227891684
Authority key identifier: A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32362e302f32342d3234203d3e20333937303332.roa
Signing time:             Mon 14 Sep 2026 01:38:46 +0000
ROA not before:           Mon 14 Sep 2026 01:33:46 +0000
ROA not after:            Mon 13 Sep 2027 01:38:46 +0000
asID:                     397032
IP address blocks:        140.235.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl
                          rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 02:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c8:09:bc:bc:d3:bb:c9:a8:fc:8f:bb:23:ba:39:92:27:89:16:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394
        Validity
            Not Before: Sep 14 01:33:46 2026 GMT
            Not After : Sep 13 01:38:46 2027 GMT
        Subject: CN=47C1BCDDCE03E819A42889820AF7034EECF8EEF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:46:09:d5:23:d7:f8:90:22:4b:d7:10:44:4f:
                    6b:2f:ae:63:fe:13:9e:0f:f7:a6:a0:f3:f4:ec:a3:
                    39:44:7a:7b:f9:fe:fd:e7:03:ec:24:f1:7a:7e:8c:
                    b9:58:0c:e4:bd:29:be:1d:b8:44:cd:3d:0e:62:45:
                    ee:e0:02:2a:be:db:a5:17:83:75:ba:89:b7:24:0a:
                    54:c6:48:1b:33:1c:14:8d:64:1e:e0:0a:10:d3:26:
                    e9:01:a4:44:d6:d0:99:6e:a8:bd:61:9c:64:90:d6:
                    3c:a5:5a:e3:14:d3:cb:46:e0:c0:3b:55:ea:40:7c:
                    fc:43:ef:ea:eb:e1:17:0c:db:98:34:75:54:25:9a:
                    c3:e3:2e:42:2e:12:19:d2:e2:64:ae:56:95:c6:74:
                    08:9e:ca:10:7d:80:83:38:f9:4a:6e:83:e9:10:b6:
                    1b:fa:2e:cc:1b:46:6d:24:9d:51:c8:a5:fa:e7:34:
                    22:03:d0:d0:f1:f2:c9:d2:6e:e0:a7:fe:73:34:db:
                    7c:0f:b7:74:ed:63:48:58:27:ab:c7:4d:34:79:5b:
                    85:5a:f7:3f:9a:6e:f6:23:49:8b:62:8e:d5:d8:0f:
                    0a:33:4c:04:83:d7:f1:39:1f:2f:49:54:97:af:59:
                    61:97:2f:fe:2a:45:b8:4f:fe:f9:c1:bc:63:95:1f:
                    63:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:C1:BC:DD:CE:03:E8:19:A4:28:89:82:0A:F7:03:4E:EC:F8:EE:F6
            X509v3 Authority Key Identifier:
                keyid:A2:74:8B:59:5B:AD:05:34:DD:33:8B:18:C1:BC:3B:30:78:E1:33:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/A2748B595BAD0534DD338B18C1BC3B3078E13370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/498f4205-1cd8-4cbe-84cb-008bfe94e7d5/09d6c61c6d43bc25a38fe2bab851c8a595606eb279559dd394.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/674fbfcd243d411c97a3192a05c8b479/0/3134302e3233352e32362e302f32342d3234203d3e20333937303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:24:d9:c7:be:8a:4f:d0:48:ee:a1:48:0d:ce:00:e4:9e:6a:
         2c:67:39:55:b1:0b:a4:85:20:bc:56:cd:74:58:c7:61:ff:1f:
         cb:3c:74:2b:61:fa:da:24:ea:74:82:33:d5:af:27:e4:75:02:
         11:3a:04:f9:e2:cb:03:39:70:89:eb:19:ca:e4:bc:c7:bc:97:
         49:c9:5e:41:75:63:8d:19:e2:7c:a7:43:36:ef:48:93:91:a8:
         9c:92:1a:b7:38:9a:ed:c2:c7:9c:db:a6:91:b7:fe:90:af:ad:
         04:24:ec:5a:4f:fc:53:5a:dd:9d:8d:76:dd:9c:b0:d0:6f:1c:
         b5:4f:e7:4a:bb:e0:d7:43:eb:fb:1b:80:62:a4:1b:29:21:f1:
         75:c8:a3:04:7d:6d:5c:1d:4b:c4:0f:9b:7e:60:2c:32:31:ad:
         44:5e:1c:83:43:bb:79:6e:77:8f:9d:dd:21:db:7d:c5:ce:65:
         ee:e4:4b:a1:de:2e:29:18:79:6c:b9:04:0f:44:70:e5:1c:ba:
         de:43:3e:2e:c4:79:52:f8:57:61:1c:a4:09:d5:f8:c5:2f:b8:
         81:c4:71:e0:97:6e:bc:63:a5:36:66:eb:04:1f:43:7b:1b:46:
         30:20:36:9f:d4:85:50:a0:e8:92:33:43:4a:fb:6c:ee:43:5e:
         e4:c5:28:73
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUbMgJvLzTu8mo/I+7I7o5kieJFoQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDlkNmM2MWM2ZDQzYmMyNWEzOGZlMmJhYjg1MWM4YTU5
NTYwNmViMjc5NTU5ZGQzOTQwHhcNMjYwOTE0MDEzMzQ2WhcNMjcwOTEzMDEzODQ2
WjAzMTEwLwYDVQQDEyg0N0MxQkNERENFMDNFODE5QTQyODg5ODIwQUY3MDM0RUVD
RjhFRUY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEYJ1SPX+JAi
S9cQRE9rL65j/hOeD/emoPP07KM5RHp7+f795wPsJPF6foy5WAzkvSm+HbhEzT0O
YkXu4AIqvtulF4N1uom3JApUxkgbMxwUjWQe4AoQ0ybpAaRE1tCZbqi9YZxkkNY8
pVrjFNPLRuDAO1XqQHz8Q+/q6+EXDNuYNHVUJZrD4y5CLhIZ0uJkrlaVxnQInsoQ
fYCDOPlKboPpELYb+i7MG0ZtJJ1RyKX65zQiA9DQ8fLJ0m7gp/5zNNt8D7d07WNI
WCerx000eVuFWvc/mm72I0mLYo7V2A8KM0wEg9fxOR8vSVSXr1lhly/+KkW4T/75
wbxjlR9jEwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFEfBvN3OA+gZpCiJggr3A07s
+O72MB8GA1UdIwQYMBaAFKJ0i1lbrQU03TOLGMG8OzB44TNwMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzY3NGZiZmNkMjQzZDQxMWM5N2EzMTkyYTA1YzhiNDc5LzAv
QTI3NDhCNTk1QkFEMDUzNEREMzM4QjE4QzFCQzNCMzA3OEUxMzM3MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMzViZmRiYTgtOWFhMS00YTM5LTk0MGYtYmUyNzNk
OWMwYjYyLzQ5OGY0MjA1LTFjZDgtNGNiZS04NGNiLTAwOGJmZTk0ZTdkNS8wOWQ2
YzYxYzZkNDNiYzI1YTM4ZmUyYmFiODUxYzhhNTk1NjA2ZWIyNzk1NTlkZDM5NC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS82NzRmYmZjZDI0M2Q0MTFjOTdhMzE5
MmEwNWM4YjQ3OS8wLzMxMzQzMDJlMzIzMzM1MmUzMjM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzOTM3MzAzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjOsaMA0GCSqGSIb3DQEB
CwUAA4IBAQB4JNnHvopP0EjuoUgNzgDknmosZzlVsQukhSC8Vs10WMdh/x/LPHQr
YfraJOp0gjPVryfkdQIROgT54ssDOXCJ6xnK5LzHvJdJyV5BdWONGeJ8p0M270iT
kaickhq3OJrtwsec26aRt/6Qr60EJOxaT/xTWt2djXbdnLDQbxy1T+dKu+DXQ+v7
G4BipBspIfF1yKMEfW1cHUvED5t+YCwyMa1EXhyDQ7t5bnePnd0h233FzmXu5Euh
3i4pGHlsuQQPRHDlHLreQz4uxHlS+FdhHKQJ1fjFL7iBxHHgl268Y6U2ZusEH0N7
G0YwIDaf1IVQoOiSM0NK+2zuQ17kxShz
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:38:06 2026 by rpki-client