Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133312e302f32342d3234203d3e20323131373433.roa
File:                     3134302e3233352e3133312e302f32342d3234203d3e20323131373433.roa (raw, json)
Hash identifier:          99GjZywmyXXotSXqU3i/aeIxzs0pVC1oBFkuvAAn2a0=
Subject key identifier:   2B:48:26:47:37:4A:BD:BD:41:C0:5B:D4:3C:B3:DD:8E:FF:E7:EF:A7
Certificate issuer:       /CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
Certificate serial:       1FC5E97693A950764FCBDEF007D79DFCBFB6D39A
Authority key identifier: D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133312e302f32342d3234203d3e20323131373433.roa
Signing time:             Tue 05 Aug 2025 22:20:27 +0000
ROA not before:           Tue 05 Aug 2025 22:15:27 +0000
ROA not after:            Tue 04 Aug 2026 22:20:27 +0000
asID:                     211743
IP address blocks:        140.235.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/bc942f68-cb33-4a05-a727-3f93e610393e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 04:44:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:c5:e9:76:93:a9:50:76:4f:cb:de:f0:07:d7:9d:fc:bf:b6:d3:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805
        Validity
            Not Before: Aug  5 22:15:27 2025 GMT
            Not After : Aug  4 22:20:27 2026 GMT
        Subject: CN=2B482647374ABDBD41C05BD43CB3DD8EFFE7EFA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a7:af:05:f3:f1:98:94:dd:93:39:a8:22:ab:
                    a9:e7:af:72:0c:47:44:5d:0b:ac:11:b6:3d:30:f2:
                    45:45:55:20:8b:19:62:07:08:ce:ac:28:25:bc:f5:
                    29:5a:6e:25:20:05:13:bc:b8:41:5d:1d:d7:2b:4e:
                    9e:fb:dd:b6:70:b1:71:bf:f7:63:d0:d9:4b:a0:6d:
                    ac:1f:a2:52:be:30:d6:09:8f:02:55:d4:72:c2:d2:
                    30:19:fe:e5:35:75:88:f2:63:e1:3a:d1:e2:2f:96:
                    26:d5:27:a9:9f:0e:28:af:c0:68:b2:9f:05:5a:c1:
                    95:7e:57:e6:ec:ac:da:81:5b:26:7b:32:9f:8b:0a:
                    50:72:e8:00:61:3e:07:21:7e:79:c4:e9:0c:b5:1a:
                    85:9e:f4:2e:af:a9:5c:5c:f5:cf:3a:93:86:19:70:
                    ea:6c:c5:f5:31:c1:be:25:7d:8c:cc:6a:ea:61:8b:
                    75:25:4d:d7:1f:7a:6a:93:18:81:07:4b:2e:eb:82:
                    fe:88:2d:9a:a1:01:ad:1a:09:f6:2f:f6:b0:de:15:
                    23:ba:8c:cc:c8:e6:c1:bc:16:65:1c:96:81:16:9f:
                    38:77:3a:f2:c5:b3:eb:27:b1:30:8a:f1:24:ef:60:
                    93:42:43:86:a5:2b:a2:c3:37:d1:cf:2e:fe:0a:2b:
                    ca:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:48:26:47:37:4A:BD:BD:41:C0:5B:D4:3C:B3:DD:8E:FF:E7:EF:A7
            X509v3 Authority Key Identifier:
                keyid:D0:E6:C7:6B:AD:EC:A5:CB:DA:92:C9:18:B9:7C:7F:45:99:EF:B6:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/D0E6C76BADECA5CBDA92C918B97C7F4599EFB6CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/bc942f68-cb33-4a05-a727-3f93e610393e/724139ef2b12b83009797b8d6c0b4306507bd7d638ce941805.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/1/3134302e3233352e3133312e302f32342d3234203d3e20323131373433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:97:28:bf:4b:08:44:3a:05:80:7a:0c:67:38:21:b9:7c:9f:
         04:ff:ba:27:18:da:a2:03:61:cf:4f:0f:58:4d:f9:e1:99:6b:
         84:ec:0e:1c:f9:ce:78:02:ec:88:93:ca:e7:4a:08:95:af:13:
         6d:b4:1d:85:b9:4c:cf:28:c6:2a:40:93:e9:c1:74:a9:92:96:
         28:b9:ef:f9:ab:53:20:66:cd:2f:e8:0e:c4:83:95:13:6e:66:
         7e:22:32:38:ee:cd:be:61:15:fb:0a:87:e5:a5:dd:eb:2f:37:
         6d:14:85:29:ac:5b:ba:99:a7:1d:3f:1d:00:6b:58:9b:40:d1:
         27:f5:38:50:bd:3d:73:51:a4:9c:e6:d6:b5:fc:39:c3:5b:ec:
         91:8b:3c:3b:45:dc:2e:ab:e2:ac:1b:06:44:c2:c9:72:f3:92:
         66:e7:f5:04:51:7c:8e:de:9b:7c:f6:9a:ca:fc:08:88:08:2c:
         d5:07:22:a5:35:65:ee:13:f0:32:68:a1:8c:44:3b:f4:a7:a2:
         0a:aa:6f:68:fe:5c:18:3a:ae:0c:25:71:2d:b7:fa:18:42:5f:
         df:74:2a:66:e3:18:63:8b:d3:fd:40:25:aa:93:db:a7:de:17:
         14:54:2c:56:01:5b:61:20:ea:46:70:10:7b:62:32:99:f9:98:
         e5:4a:ea:42
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUH8XpdpOpUHZPy97wB9ed/L+205owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzI0MTM5ZWYyYjEyYjgzMDA5Nzk3YjhkNmMwYjQzMDY1
MDdiZDdkNjM4Y2U5NDE4MDUwHhcNMjUwODA1MjIxNTI3WhcNMjYwODA0MjIyMDI3
WjAzMTEwLwYDVQQDEygyQjQ4MjY0NzM3NEFCREJENDFDMDVCRDQzQ0IzREQ4RUZG
RTdFRkE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKevBfPxmJTd
kzmoIqup569yDEdEXQusEbY9MPJFRVUgixliBwjOrCglvPUpWm4lIAUTvLhBXR3X
K06e+922cLFxv/dj0NlLoG2sH6JSvjDWCY8CVdRywtIwGf7lNXWI8mPhOtHiL5Ym
1Sepnw4or8Bosp8FWsGVflfm7KzagVsmezKfiwpQcugAYT4HIX55xOkMtRqFnvQu
r6lcXPXPOpOGGXDqbMX1McG+JX2MzGrqYYt1JU3XH3pqkxiBB0su64L+iC2aoQGt
Ggn2L/aw3hUjuozMyObBvBZlHJaBFp84dzryxbPrJ7EwivEk72CTQkOGpSuiwzfR
zy7+CivKMQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFCtIJkc3Sr29QcBb1Dyz3Y7/
5++nMB8GA1UdIwQYMBaAFNDmx2ut7KXL2pLJGLl8f0WZ77bPMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MGM5ZmVlYzEyNDllLzEv
RDBFNkM3NkJBREVDQTVDQkRBOTJDOTE4Qjk3QzdGNDU5OUVGQjZDRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2JjOTQyZjY4LWNiMzMtNGEwNS1hNzI3LTNmOTNlNjEwMzkzZS83MjQx
MzllZjJiMTJiODMwMDk3OTdiOGQ2YzBiNDMwNjUwN2JkN2Q2MzhjZTk0MTgwNS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTBj
OWZlZWMxMjQ5ZS8xLzMxMzQzMDJlMzIzMzM1MmUzMTMzMzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzEzNzM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACM64MwDQYJKoZIhvcN
AQELBQADggEBADmXKL9LCEQ6BYB6DGc4Ibl8nwT/uicY2qIDYc9PD1hN+eGZa4Ts
Dhz5zngC7IiTyudKCJWvE220HYW5TM8oxipAk+nBdKmSlii57/mrUyBmzS/oDsSD
lRNuZn4iMjjuzb5hFfsKh+Wl3esvN20UhSmsW7qZpx0/HQBrWJtA0Sf1OFC9PXNR
pJzm1rX8OcNb7JGLPDtF3C6r4qwbBkTCyXLzkmbn9QRRfI7em3z2msr8CIgILNUH
IqU1Ze4T8DJooYxEO/Snogqqb2j+XBg6rgwlcS23+hhCX990KmbjGGOL0/1AJaqT
26feFxRULFYBW2Eg6kZwEHtiMpn5mOVK6kI=
-----END CERTIFICATE-----
Generated at Mon Aug 11 07:23:41 2025 by rpki-client