Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32342d3234203d3e2034383236.roa
File:                     3231362e3234372e3130302e302f32342d3234203d3e2034383236.roa (raw, json)
Hash identifier:          Gh3ryygiZ+5P7Pq2SaEqs/7crZNyt1he+2TfGCIA3mQ=
Subject key identifier:   95:C4:69:24:CB:DD:45:33:4F:DD:5B:A0:2F:00:67:3B:CA:DD:47:60
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       36C21D4151D80D5E3D8905EEDE3204074DBD0FDC
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32342d3234203d3e2034383236.roa
Signing time:             Mon 04 May 2026 08:36:00 +0000
ROA not before:           Mon 04 May 2026 08:31:00 +0000
ROA not after:            Mon 03 May 2027 08:36:00 +0000
asID:                     4826
IP address blocks:        216.247.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 12:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c2:1d:41:51:d8:0d:5e:3d:89:05:ee:de:32:04:07:4d:bd:0f:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May  4 08:31:00 2026 GMT
            Not After : May  3 08:36:00 2027 GMT
        Subject: CN=95C46924CBDD45334FDD5BA02F00673BCADD4760
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:2e:aa:f8:60:42:e8:ee:5e:f3:dd:2d:2e:
                    98:1d:5d:a2:73:de:d6:2c:bb:e7:a5:85:60:84:9a:
                    f6:b6:0d:2f:7e:25:66:dd:0e:bc:9b:9d:85:11:01:
                    4d:5d:f2:59:e1:bd:45:7e:47:31:42:68:7f:c9:ad:
                    9d:c2:37:18:4e:74:0c:92:d0:98:d7:7d:33:31:41:
                    35:50:79:95:b4:c0:61:c0:68:61:5e:a0:4b:cb:21:
                    6d:83:5c:7a:7d:98:90:ef:91:89:73:d0:ca:cb:4e:
                    19:f6:be:5e:4e:4c:e3:d4:ef:34:33:b6:fc:7d:89:
                    aa:5e:e5:3e:4a:0a:dc:ac:11:9a:9b:24:94:c3:1d:
                    1b:88:73:6c:5f:3b:b7:0a:75:32:28:db:c2:65:dd:
                    62:f9:91:4b:36:c7:dd:83:a6:98:3f:20:ca:b0:a1:
                    d6:3f:30:7b:16:a9:94:da:20:9c:11:ee:ca:c7:85:
                    06:09:2b:3a:63:33:ef:37:6f:aa:cf:07:41:74:c6:
                    4a:6d:18:54:ea:6b:2c:e1:33:2c:64:4f:4f:fa:69:
                    fc:f1:cc:65:02:ae:93:9a:d7:3c:f1:0d:67:d7:e9:
                    d5:82:fc:62:cc:66:6a:72:4a:f0:9f:74:c2:fe:e4:
                    c4:4f:69:77:b1:00:be:b5:71:49:28:4b:fb:95:1b:
                    61:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C4:69:24:CB:DD:45:33:4F:DD:5B:A0:2F:00:67:3B:CA:DD:47:60
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32342d3234203d3e2034383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:eb:f2:e4:91:60:fd:37:ee:af:0f:6a:57:71:ed:73:01:64:
         79:9b:1b:1e:4a:49:55:bf:e3:35:d8:f6:99:fc:ce:c2:8f:4f:
         6e:c9:84:cd:74:27:b9:c3:0a:a1:30:1e:e9:cd:4e:30:d0:2e:
         68:cb:e5:31:db:33:59:26:7f:f0:60:10:30:93:96:0c:9e:fa:
         8b:e7:f7:14:51:74:7a:1f:b6:a1:5c:2a:25:04:4a:05:e6:6f:
         e3:92:6f:36:44:ec:56:eb:74:78:ff:b9:1c:de:b4:ce:32:ea:
         91:c3:e4:27:01:b6:35:f8:28:29:36:1b:d1:7b:82:de:44:cb:
         b0:45:cb:17:e0:3d:33:27:82:c2:6d:78:f9:41:27:c3:c2:41:
         71:08:d3:dc:92:3d:dc:a1:07:bc:6c:20:03:ce:e4:58:e6:ac:
         b5:8b:af:cc:d8:09:8e:08:55:9d:c1:6c:cf:18:3f:d6:cc:83:
         cb:b1:45:63:3e:4b:ee:65:8d:cf:c1:2e:eb:fc:b3:7b:8f:19:
         5e:77:59:ff:ac:28:f9:85:dc:fd:63:ae:3c:97:d8:ce:75:d3:
         e0:7c:f6:1f:ad:66:76:2d:3e:82:fa:af:7f:1a:e7:7e:aa:fa:
         6e:ed:84:83:5e:bc:0a:59:fd:7b:3d:34:c2:74:db:b6:83:db:
         bd:01:75:69
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUNsIdQVHYDV49iQXu3jIEB029D9wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjYwNTA0MDgzMTAwWhcNMjcwNTAzMDgzNjAw
WjAzMTEwLwYDVQQDEyg5NUM0NjkyNENCREQ0NTMzNEZERDVCQTAyRjAwNjczQkNB
REQ0NzYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVYuqvhgQuju
XvPdLS6YHV2ic97WLLvnpYVghJr2tg0vfiVm3Q68m52FEQFNXfJZ4b1FfkcxQmh/
ya2dwjcYTnQMktCY130zMUE1UHmVtMBhwGhhXqBLyyFtg1x6fZiQ75GJc9DKy04Z
9r5eTkzj1O80M7b8fYmqXuU+SgrcrBGamySUwx0biHNsXzu3CnUyKNvCZd1i+ZFL
Nsfdg6aYPyDKsKHWPzB7FqmU2iCcEe7Kx4UGCSs6YzPvN2+qzwdBdMZKbRhU6mss
4TMsZE9P+mn88cxlAq6Tmtc88Q1n1+nVgvxizGZqckrwn3TC/uTET2l3sQC+tXFJ
KEv7lRth9QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJXEaSTL3UUzT91boC8AZzvK
3UdgMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzMTMwMzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDM4MzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj3ZDANBgkqhkiG9w0BAQsF
AAOCAQEAEuvy5JFg/Tfurw9qV3HtcwFkeZsbHkpJVb/jNdj2mfzOwo9PbsmEzXQn
ucMKoTAe6c1OMNAuaMvlMdszWSZ/8GAQMJOWDJ76i+f3FFF0eh+2oVwqJQRKBeZv
45JvNkTsVut0eP+5HN60zjLqkcPkJwG2NfgoKTYb0XuC3kTLsEXLF+A9MyeCwm14
+UEnw8JBcQjT3JI93KEHvGwgA87kWOastYuvzNgJjghVncFszxg/1syDy7FFYz5L
7mWNz8Eu6/yze48ZXndZ/6wo+YXc/WOuPJfYznXT4Hz2H61mdi0+gvqvfxrnfqr6
bu2Eg168Cln9ez00wnTbtoPbvQF1aQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:30:13 2026 by rpki-client