Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa
File:                     3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          jrbPoExZFOPv90IKYG4EVhjp4+HdT57O+SPhlvsNsBc=
Subject key identifier:   84:29:85:4C:61:B0:44:E7:60:83:52:7C:5D:A6:A5:9E:C6:26:1E:FC
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       0F0765B77C14E9354359C8B5A34482DEE4BEED95
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 28 Apr 2026 13:36:00 +0000
ROA not before:           Tue 28 Apr 2026 13:31:00 +0000
ROA not after:            Tue 27 Apr 2027 13:36:00 +0000
asID:                     212384
IP address blocks:        216.247.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 05:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:07:65:b7:7c:14:e9:35:43:59:c8:b5:a3:44:82:de:e4:be:ed:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Apr 28 13:31:00 2026 GMT
            Not After : Apr 27 13:36:00 2027 GMT
        Subject: CN=8429854C61B044E76083527C5DA6A59EC6261EFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:93:78:7c:f9:03:94:97:13:fa:49:6d:37:37:
                    24:d5:92:f8:72:89:58:38:bf:12:13:da:23:6f:aa:
                    54:a7:c5:e9:2e:b3:3f:f4:09:6f:d2:90:4f:5d:b0:
                    7e:a6:f2:56:41:e6:61:ca:e3:fe:3a:8c:d4:15:db:
                    a7:6b:27:03:ba:7e:e5:ef:09:22:23:bb:43:1c:4c:
                    b2:2e:c7:a3:46:54:b4:73:0a:85:a2:8b:60:50:37:
                    2f:cf:0f:a4:bd:50:4c:00:91:fe:4c:8d:10:7f:40:
                    4f:e1:25:e5:eb:eb:73:d0:72:dd:19:09:2a:a8:99:
                    9e:a7:bd:cc:17:ee:a0:8d:8b:87:80:b7:d6:72:4b:
                    c3:60:b7:de:5a:5e:eb:38:3f:6e:a3:6e:67:9a:0c:
                    bd:aa:fe:91:12:69:66:39:e1:53:7e:1c:5b:c9:62:
                    a5:cf:92:d9:e5:ce:d8:81:20:18:45:73:0d:01:77:
                    37:80:91:95:9d:7b:b6:d3:51:d3:16:3b:81:8e:61:
                    7d:6d:a9:af:d6:9b:b0:1f:17:4a:33:7c:d3:a0:47:
                    d1:73:df:38:1f:ef:06:14:5e:57:2c:4f:9a:b3:a9:
                    3f:25:27:9a:a7:a5:b4:64:53:9c:89:65:22:dd:1d:
                    21:c1:c2:b4:60:e1:1e:ea:f2:2f:e2:61:65:6d:6f:
                    5e:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:29:85:4C:61:B0:44:E7:60:83:52:7C:5D:A6:A5:9E:C6:26:1E:FC
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130382e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:dd:99:dd:e7:e8:b2:34:2b:5a:d7:23:7a:fd:91:f7:a4:d3:
         ed:1c:f1:3f:96:12:c7:76:14:c7:9c:40:16:2d:12:a1:42:ae:
         1c:71:4c:cb:7f:9e:9e:cb:44:f8:45:23:bc:cd:21:af:4f:fa:
         5c:e6:53:66:76:a1:c1:99:ee:82:95:fe:8e:b3:0b:89:43:35:
         6b:5a:b7:a3:13:d3:ee:10:7f:4b:a7:6c:46:64:d0:25:19:f3:
         7e:73:1a:1d:c8:dc:8f:5f:62:ac:b5:df:75:a8:0b:6a:a7:f6:
         86:04:38:e0:73:28:37:97:4f:1c:5e:49:0e:7e:a8:4b:28:40:
         f4:b7:0d:f1:c1:0f:48:b2:f9:95:d9:77:68:cc:a7:55:58:93:
         b2:53:46:41:eb:96:2b:21:b5:61:57:fc:0c:f2:5f:63:3a:63:
         ae:2a:45:7f:94:61:76:be:1a:f5:bc:7d:08:d4:3f:16:d8:15:
         fd:4e:6d:ba:be:78:d8:b2:69:ad:04:e8:c5:75:eb:c8:dc:39:
         70:50:d6:89:90:f5:e2:7d:f9:ca:e5:87:f4:4c:d9:2a:c9:20:
         de:d8:c1:71:d5:22:6c:ad:b9:ce:bb:91:c4:f2:ff:61:28:be:
         c4:d7:a1:4b:47:4f:b2:88:1b:91:98:7f:1b:da:ae:10:b5:5b:
         35:7a:28:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:44:48 2026 by rpki-client