Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131372e302f32342d3234203d3e203138383534.roa
File:                     3134312e3139352e3131372e302f32342d3234203d3e203138383534.roa (raw, json)
Hash identifier:          GX+oWH3l/NzVs6+nVJhu6Ug/zbosS78pxRJiyFgAvSM=
Subject key identifier:   AD:B1:C6:9D:43:F1:2E:BA:2B:B7:07:BC:56:DC:EB:2F:41:5A:AB:86
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       6A6E8788ED44CAB34A0F34E35783BF0A4146F21A
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131372e302f32342d3234203d3e203138383534.roa
Signing time:             Wed 22 Apr 2026 06:11:27 +0000
ROA not before:           Wed 22 Apr 2026 06:06:27 +0000
ROA not after:            Wed 21 Apr 2027 06:11:27 +0000
asID:                     18854
IP address blocks:        141.195.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 08:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:6e:87:88:ed:44:ca:b3:4a:0f:34:e3:57:83:bf:0a:41:46:f2:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Apr 22 06:06:27 2026 GMT
            Not After : Apr 21 06:11:27 2027 GMT
        Subject: CN=ADB1C69D43F12EBA2BB707BC56DCEB2F415AAB86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4b:ab:e6:37:5b:96:55:bc:d7:ba:06:b6:f4:
                    c2:a5:a9:e7:24:8c:72:3d:38:5d:68:5c:f9:ba:29:
                    d6:1f:9e:e1:ab:a4:d3:80:1e:4a:0b:90:d9:10:d1:
                    3e:5d:ba:f8:13:e8:bd:a3:51:6c:e2:e2:c0:77:ba:
                    50:ac:21:c1:48:2e:9b:19:98:b5:38:bf:87:fb:86:
                    96:2f:62:dd:be:05:be:40:5d:8f:b5:86:35:50:75:
                    62:69:90:17:0d:c1:1a:1e:6f:d4:1e:03:fa:1b:15:
                    92:0c:83:da:69:b8:e6:ee:6a:b4:55:52:6d:56:bc:
                    cc:b9:ff:f2:51:78:64:51:ed:7b:41:39:c0:de:fb:
                    c8:51:af:66:ff:64:a7:f7:80:6e:21:de:5c:e8:c6:
                    dc:2a:ae:ff:38:96:74:f0:aa:4a:02:54:5e:3a:88:
                    15:97:7b:80:83:af:db:9a:fa:72:37:37:72:1f:35:
                    c0:58:84:d6:21:44:46:2e:52:ce:54:6b:c7:b5:60:
                    33:0a:c2:73:61:21:2a:01:85:9d:3a:d1:0e:57:ce:
                    5b:7b:ca:45:c2:ff:9c:8a:d5:28:38:11:d5:34:34:
                    97:57:22:46:64:93:57:fb:bf:fa:da:8d:35:f8:e4:
                    99:52:d9:dd:79:40:b0:6b:22:0f:3d:f2:3a:94:57:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B1:C6:9D:43:F1:2E:BA:2B:B7:07:BC:56:DC:EB:2F:41:5A:AB:86
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131372e302f32342d3234203d3e203138383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:85:bf:7d:4e:85:91:a4:29:4e:66:0e:65:63:f0:04:52:9a:
         f6:72:0c:4e:2b:bc:b5:57:0a:9a:7c:54:65:d3:36:66:17:6e:
         d5:3e:4f:aa:b6:2a:a2:cc:92:ef:8b:4e:c7:ab:b9:40:8e:a0:
         8f:85:39:89:a4:cb:ed:bb:d6:fa:20:59:27:83:f6:43:84:cd:
         38:e5:5d:97:09:f9:c2:0c:fa:49:77:40:57:be:1e:53:bd:91:
         f8:18:45:20:9b:87:af:eb:cb:fc:b2:34:04:64:3d:c6:7d:f4:
         a5:4a:a6:7f:51:71:52:df:b8:c4:9e:90:b0:cc:17:99:d9:a8:
         f9:3a:e0:fb:27:54:ef:37:03:2d:35:82:ad:e5:3c:a9:0c:d0:
         92:4e:b0:55:a0:db:5f:0e:1c:37:e5:7b:f9:fb:61:73:74:a5:
         8d:e2:31:8b:dc:2d:bf:24:5f:35:9a:3c:06:bc:0c:d5:22:f7:
         ca:4c:c6:17:e8:c3:1f:f9:14:a1:26:70:11:93:43:5d:6b:bf:
         fd:07:6a:5c:32:97:30:29:5b:f5:c7:3d:70:c0:d7:4c:90:1e:
         d4:b6:14:c0:fe:80:1c:cc:09:c7:ed:72:2f:ad:aa:ce:cf:c9:
         09:a9:cc:a4:cd:98:93:ee:36:12:7d:c5:e7:84:80:05:68:c8:
         2d:00:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:39 2026 by rpki-client