Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3131352e302f32342d3234203d3e20333938393139.roa
File:                     3137322e3130392e3131352e302f32342d3234203d3e20333938393139.roa (raw, json)
Hash identifier:          YNhVt1MlK8k/SJayWD1pgUwoFznpezDPrATxXXSQKXo=
Subject key identifier:   AE:01:62:7E:32:C4:45:70:E6:0C:4E:FE:27:60:E8:34:DE:3B:DF:74
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       142739CB70F3D6814AD8750C9B9C0F73776AD95E
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3131352e302f32342d3234203d3e20333938393139.roa
Signing time:             Thu 12 Mar 2026 19:03:21 +0000
ROA not before:           Thu 12 Mar 2026 18:58:21 +0000
ROA not after:            Thu 11 Mar 2027 19:03:21 +0000
asID:                     398919
IP address blocks:        172.109.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 06:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:27:39:cb:70:f3:d6:81:4a:d8:75:0c:9b:9c:0f:73:77:6a:d9:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Mar 12 18:58:21 2026 GMT
            Not After : Mar 11 19:03:21 2027 GMT
        Subject: CN=AE01627E32C44570E60C4EFE2760E834DE3BDF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:52:e4:e2:67:15:00:dc:5e:a2:17:71:b5:9e:
                    e6:f9:96:59:d4:38:ca:28:fd:23:16:63:e2:3c:22:
                    6c:41:2b:17:0b:32:67:21:7d:e9:dd:98:55:64:62:
                    2c:68:25:7d:65:35:24:e5:80:a3:fd:f8:87:b8:f9:
                    52:53:71:5f:f8:c1:0f:a8:a4:71:fa:f2:3a:9b:a8:
                    b6:64:20:9f:c3:de:14:59:74:d2:27:55:c1:ae:4c:
                    ac:4c:fb:b8:44:96:24:e3:ec:13:0a:2a:0f:5a:c3:
                    59:40:ff:9a:c2:9b:90:b1:ff:d2:50:70:d1:b7:29:
                    0b:5c:be:b6:bb:ea:4c:da:fa:c1:83:60:37:8c:2c:
                    f9:51:be:36:19:67:53:02:22:59:5b:e2:e2:ce:75:
                    09:72:23:a6:12:f1:cd:c4:85:fb:88:c8:e2:0b:21:
                    5c:3e:e1:4c:a5:a3:36:df:0e:5a:b1:af:8e:81:de:
                    06:02:51:ce:1b:1e:8e:80:ca:ab:af:68:82:92:4c:
                    c1:2e:68:a0:73:a7:ee:cc:34:6e:de:9c:6f:8a:72:
                    56:d9:fe:16:6b:59:ce:44:2f:00:ec:25:83:14:c3:
                    f1:07:cf:29:0f:a6:fc:0c:d5:1d:27:11:4b:e8:88:
                    d7:bf:cd:f4:c9:53:6e:92:f5:1b:39:08:f2:0e:c1:
                    45:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:01:62:7E:32:C4:45:70:E6:0C:4E:FE:27:60:E8:34:DE:3B:DF:74
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3131352e302f32342d3234203d3e20333938393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:fd:c7:71:29:1f:e0:53:ad:98:19:80:f2:2f:26:ac:74:4c:
         0d:1b:0d:e4:a8:72:64:a1:e2:c7:43:e4:87:87:7f:61:6e:0b:
         6d:94:29:01:25:80:6e:ad:81:08:e0:c5:65:63:93:30:54:75:
         75:ed:eb:99:2e:fd:ec:c9:64:23:29:8a:cd:c7:c8:7c:82:60:
         d7:ae:65:04:6d:8f:65:79:e5:58:cf:19:6a:6f:1e:d2:28:c6:
         76:ca:5e:d6:10:73:f8:1d:7e:91:fa:65:d0:34:78:c5:33:2b:
         12:ce:3e:f9:de:19:8f:b6:10:7d:48:e3:39:5a:23:75:cc:a1:
         af:00:00:d7:d1:95:b9:82:ff:63:1f:06:d6:53:4b:d8:e8:e3:
         81:ba:48:e6:77:6f:34:31:ef:d5:8e:b7:ae:87:e4:4d:b3:f2:
         8e:a0:7a:57:e2:40:b4:4b:ae:5d:d1:b2:e4:01:c5:4b:51:23:
         c4:77:74:8f:a6:6b:ce:ea:2f:89:e0:84:4d:f7:f6:7b:ca:0a:
         b0:9c:b6:ec:8d:c7:ce:66:b8:23:fb:b7:ca:13:a5:bf:1a:9f:
         86:bf:de:c2:9c:3a:f0:68:44:b8:6a:82:22:de:6f:86:d4:8e:
         d6:e9:e9:56:63:2c:c2:79:9d:21:dc:08:87:c1:ea:2f:1d:05:
         6d:18:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:22:18 2026 by rpki-client