Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e322e302f32342d3234203d3e203433383738.roa
File:                     3136352e3134302e322e302f32342d3234203d3e203433383738.roa (raw, json)
Hash identifier:          ita4o2JYCI2MQK4cvHwC1/YcIvznyzeomodMOpDHugM=
Subject key identifier:   A5:C0:9D:FE:89:11:DA:D2:93:4F:D4:0C:3D:E2:1F:21:98:1C:99:66
Certificate issuer:       /CN=44dc66ddbee1444747edd0edf8d7f5798970715818115faa19
Certificate serial:       0EE2EC6920E548B9EEBCE02956B3BE596F0A6E9F
Authority key identifier: 0B:C5:8F:27:35:2A:20:44:56:6D:6D:BE:D9:44:10:08:90:7B:10:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e322e302f32342d3234203d3e203433383738.roa
Signing time:             Wed 28 Oct 2026 11:06:49 +0000
ROA not before:           Wed 28 Oct 2026 11:01:49 +0000
ROA not after:            Wed 27 Oct 2027 11:06:49 +0000
asID:                     43878
IP address blocks:        165.140.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.crl
                          rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 04:58:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:e2:ec:69:20:e5:48:b9:ee:bc:e0:29:56:b3:be:59:6f:0a:6e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44dc66ddbee1444747edd0edf8d7f5798970715818115faa19
        Validity
            Not Before: Oct 28 11:01:49 2026 GMT
            Not After : Oct 27 11:06:49 2027 GMT
        Subject: CN=A5C09DFE8911DAD2934FD40C3DE21F21981C9966
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:43:c2:72:20:46:db:59:a3:de:37:5f:16:8b:
                    42:5d:f8:e9:1e:a1:b9:6f:65:6b:8c:27:71:e5:98:
                    b3:87:80:0e:e0:8b:94:8b:05:a2:57:55:0e:3c:9c:
                    3a:5f:5c:51:5c:30:dd:bb:0c:d0:1a:1c:58:df:86:
                    27:3b:e7:f0:79:b1:fe:a7:ac:db:08:86:c2:44:9d:
                    a3:5f:a3:91:dc:5c:c1:be:87:09:b5:ed:15:56:fe:
                    39:b2:90:9e:4b:3f:c1:cb:60:72:c8:8b:b1:bc:0b:
                    e8:83:8f:30:75:d2:70:67:ac:78:4f:94:ae:d6:17:
                    5d:3e:a8:2f:40:e5:44:dd:67:3d:b3:ea:2b:5c:dc:
                    15:15:d5:7f:45:8b:ca:e9:d3:12:50:6a:10:31:98:
                    5c:b4:fb:9e:5c:b5:5f:b7:47:00:29:66:59:18:26:
                    e6:ae:de:99:1b:bd:b3:0c:b0:8f:25:b7:3f:9f:1b:
                    4e:ae:11:67:6e:b7:b9:0a:62:e5:73:d1:ce:26:12:
                    e9:9c:fa:fe:7e:5c:d7:e0:15:38:4a:0a:83:e7:26:
                    01:3b:91:cc:76:be:8c:a3:64:7d:63:03:0c:5c:aa:
                    95:4c:80:27:72:92:b3:90:4b:98:1b:7c:3b:4a:88:
                    30:70:f5:30:c3:61:64:6d:d7:f6:0d:9c:10:c3:0b:
                    ef:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C0:9D:FE:89:11:DA:D2:93:4F:D4:0C:3D:E2:1F:21:98:1C:99:66
            X509v3 Authority Key Identifier:
                keyid:0B:C5:8F:27:35:2A:20:44:56:6D:6D:BE:D9:44:10:08:90:7B:10:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/0BC58F27352A2044566D6DBED9441008907B10AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/9f015e09-e6dc-4d0e-8b8e-d7dd586105e9/44dc66ddbee1444747edd0edf8d7f5798970715818115faa19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c6a7da2b3eae4380a0f3d2151f1dce09/0/3136352e3134302e322e302f32342d3234203d3e203433383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:2b:44:ae:ba:f3:a9:35:02:9b:ec:6f:7a:fe:8c:c3:b9:4c:
         2e:a7:a6:45:06:9c:03:26:c3:22:d9:1e:01:72:1c:71:d4:41:
         b7:5d:07:f9:0f:39:58:94:95:e4:1f:8c:06:06:31:70:6b:bc:
         db:58:a5:4b:1f:e8:af:a6:f3:03:8b:5f:6a:93:f6:6d:28:56:
         7b:13:d0:ec:f8:d3:1a:80:d5:a6:17:ab:e6:da:89:fc:8b:ea:
         8a:9a:00:cc:c4:c2:ca:36:ff:92:a3:90:5c:7e:34:60:ef:b6:
         85:34:2a:26:7f:be:38:b1:dc:d9:3f:aa:ac:49:ee:ff:10:e2:
         a6:cf:85:91:c1:55:04:24:2f:35:61:3c:16:e9:38:19:23:01:
         d5:ca:c8:fd:58:ea:49:04:f7:e7:33:c7:7e:72:93:91:c5:b6:
         a5:60:3a:19:7b:da:1f:cc:79:f0:9a:cf:39:a9:87:27:53:60:
         75:fb:8c:92:a3:8d:bb:4b:21:66:41:12:81:25:9d:23:d3:f7:
         d8:2f:94:e1:58:92:1d:33:05:fa:bf:94:a5:c3:ee:a0:41:c3:
         ca:66:0a:3b:8a:7c:f5:3f:1f:8d:20:dc:85:c7:75:a6:58:35:
         cc:43:c9:79:f5:de:c9:57:b9:17:ef:e8:3c:32:ac:7d:4a:06:
         22:b8:d9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:11:22 2026 by rpki-client