Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa
File:                     3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa (raw, json)
Hash identifier:          YAr9fFr7Hn+3hHi4jO2uMWmebiP9nCIBN+ePyM91U1Y=
Subject key identifier:   43:37:BF:C2:78:A4:B4:EC:F7:2F:80:9C:49:AA:03:74:9B:A8:4D:D7
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       05BDAFE9154780096BBBF0FDD1A35BF484A21E50
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa
Signing time:             Mon 16 Mar 2026 15:35:54 +0000
ROA not before:           Mon 16 Mar 2026 15:30:54 +0000
ROA not after:            Mon 15 Mar 2027 15:35:54 +0000
asID:                     7922
IP address blocks:        216.122.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 02:11:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:bd:af:e9:15:47:80:09:6b:bb:f0:fd:d1:a3:5b:f4:84:a2:1e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Mar 16 15:30:54 2026 GMT
            Not After : Mar 15 15:35:54 2027 GMT
        Subject: CN=4337BFC278A4B4ECF72F809C49AA03749BA84DD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:4e:8f:c3:06:a6:e9:24:2f:7a:90:9e:0a:1f:
                    82:87:dd:30:ff:51:b1:38:ba:6b:87:ce:f8:d6:60:
                    4a:dc:67:19:a0:38:02:97:60:29:e9:29:f0:9b:16:
                    32:06:fd:3e:d7:16:d9:c8:6e:bb:59:bd:f7:6d:91:
                    ff:af:df:0a:62:dc:be:fe:40:48:ec:bc:58:fd:85:
                    72:3e:c8:4d:45:a5:ce:b8:81:7c:75:22:26:58:01:
                    70:ad:92:c8:33:e9:31:81:af:ef:10:00:6d:d5:7b:
                    92:72:1b:09:af:8e:63:c2:e9:00:67:99:b6:57:76:
                    01:a8:73:48:d8:bd:3b:5d:18:1f:d8:86:fd:6a:ba:
                    a3:d8:09:f3:7e:12:fc:16:04:b4:a0:8e:b1:d6:e4:
                    33:29:15:89:9a:ca:0b:fe:84:7d:c0:ca:8f:73:d4:
                    aa:de:b4:00:68:d5:a8:d4:d5:b5:29:95:d7:9e:61:
                    aa:8f:61:ae:98:ba:a2:35:1b:3a:22:7b:a5:04:37:
                    14:9a:32:dd:40:77:0f:0f:30:ba:22:e8:7c:f3:f2:
                    ef:57:18:43:66:67:4f:df:98:91:d6:28:ee:e6:88:
                    23:d5:be:f3:b2:07:bb:f8:0f:73:ca:ca:b3:ce:49:
                    c4:ad:de:3b:c2:af:bb:2e:b8:cf:b0:de:c5:b5:75:
                    de:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:37:BF:C2:78:A4:B4:EC:F7:2F:80:9C:49:AA:03:74:9B:A8:4D:D7
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:ce:fc:a8:85:96:b1:5b:26:45:70:a2:d4:fe:90:ae:b5:f6:
         ac:14:f8:52:e5:c1:f1:7f:bc:3a:94:07:1c:ae:c4:7e:71:6d:
         a2:4f:0b:76:ed:4c:0d:b1:4e:18:6a:b5:46:b9:1a:ad:8f:37:
         0e:90:f6:34:cf:ea:b9:2e:db:28:a6:50:20:a5:e1:04:83:86:
         32:83:0a:2b:a9:28:4e:f9:84:07:f4:3e:d9:23:5f:53:21:e0:
         2f:18:79:b7:bb:59:40:24:76:28:ab:f9:b9:43:81:56:a3:2b:
         11:12:1d:73:50:fb:b6:36:ef:ce:21:6a:04:72:ad:ec:4d:54:
         4a:60:b0:96:52:20:35:a0:48:c1:a3:15:a2:7a:b0:1d:68:a2:
         c8:6c:03:0f:e2:7f:b8:79:1e:96:f2:b7:cf:96:4d:7a:18:7e:
         65:57:9d:eb:20:bf:98:9e:26:71:a1:95:c5:bb:be:57:54:47:
         b3:76:ca:b9:e0:0b:aa:0f:1e:6c:33:c9:a1:eb:8d:3d:8a:35:
         fb:3f:de:3b:52:e3:8b:30:09:cf:5d:90:eb:e8:1e:22:86:3e:
         6b:88:03:38:3a:67:93:1e:57:c6:35:35:eb:4d:9e:46:f2:e7:
         b8:93:d5:7c:9c:8d:6b:88:0d:94:04:50:7a:cf:86:fd:c4:d1:
         bb:78:e6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:00:26 2026 by rpki-client