Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131332e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3131332e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          dRVEyQHVjlEiSHi3c5wuQYHfPprZNuw02F6wmO85imM=
Subject key identifier:   0D:CE:C4:14:3E:55:DA:4A:DF:1E:C1:4A:2D:D0:B0:43:57:34:88:57
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       05DBCE9E646759254499785FC62C273BE404C7E8
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131332e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:12 +0000
ROA not before:           Fri 01 May 2026 02:21:12 +0000
ROA not after:            Fri 30 Apr 2027 02:26:12 +0000
asID:                     5650
IP address blocks:        172.108.113.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:db:ce:9e:64:67:59:25:44:99:78:5f:c6:2c:27:3b:e4:04:c7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:12 2026 GMT
            Not After : Apr 30 02:26:12 2027 GMT
        Subject: CN=0DCEC4143E55DA4ADF1EC14A2DD0B04357348857
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:da:b2:1c:64:f2:26:b7:62:c4:32:57:dc:12:
                    4b:75:ca:01:0a:b1:9c:88:28:b8:61:6e:39:df:ee:
                    9c:93:a9:2a:8d:e4:9a:7c:18:29:5e:85:43:29:16:
                    b9:f7:95:08:34:de:49:48:43:68:f3:16:8a:26:98:
                    ba:f0:b7:77:91:f4:bb:2e:43:a6:40:75:15:bf:d0:
                    64:21:bd:21:12:3e:15:b5:51:a6:2d:40:a8:45:7e:
                    c8:55:bf:68:1e:d6:e7:03:d9:8b:1e:30:54:81:d5:
                    a4:88:8d:92:f7:f9:dd:6a:f6:e7:ba:ae:5a:3e:c2:
                    a1:ed:73:36:3d:a0:3d:24:d8:de:df:bb:3e:1b:f1:
                    2e:50:4f:26:46:1f:a5:55:a7:cb:e7:af:6b:0a:9f:
                    00:aa:34:fa:41:a4:06:a1:30:23:72:5d:f7:fd:21:
                    aa:c6:4f:08:a5:f5:96:c8:a4:39:fe:af:29:da:77:
                    2c:24:9c:6b:6b:f5:92:56:6c:7f:a4:bf:fe:9d:f7:
                    29:72:bb:cc:a2:98:39:81:cb:66:f7:20:32:62:ad:
                    2b:77:16:8e:f7:59:a9:bb:41:93:08:1e:5d:61:30:
                    23:2d:90:3f:1d:bf:47:9f:37:a3:88:77:08:e8:96:
                    ab:26:48:9c:8f:37:60:da:30:8a:4c:86:fa:8c:2b:
                    b5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:C4:14:3E:55:DA:4A:DF:1E:C1:4A:2D:D0:B0:43:57:34:88:57
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131332e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:21:a6:ef:71:16:0d:57:68:67:09:be:d6:20:36:a2:c8:86:
         26:10:e7:e4:6a:85:03:80:a1:f9:2f:80:5e:ae:10:bd:fe:28:
         a5:fa:86:80:e1:a1:4c:76:92:dc:cd:f1:60:ef:51:d1:b1:37:
         79:0d:cb:3a:44:fa:9a:05:2c:c3:12:e4:99:2e:c5:1e:9b:2f:
         ed:2e:fa:20:f0:c0:58:db:b5:76:bd:1e:90:30:ef:e1:7f:28:
         45:a1:9e:c6:09:d3:f9:04:dd:63:c7:0d:fe:84:75:30:0b:9b:
         02:b6:f3:fa:a8:53:93:1e:a5:b0:dc:ff:51:68:18:0b:8a:65:
         81:76:0c:f1:32:01:9c:4e:fa:5a:04:62:9b:59:10:81:05:57:
         59:2c:7d:c0:c4:1c:f9:07:88:bc:47:f1:c6:0a:80:a0:2b:83:
         77:40:09:1a:8b:c4:a5:fa:e0:34:74:7c:b4:9e:64:df:0c:23:
         10:1f:4c:a6:da:35:c6:44:0f:20:0d:27:2d:74:63:16:80:ef:
         d5:ba:f6:2f:2e:44:04:97:3c:50:64:3a:bc:74:7a:a5:8e:12:
         57:c7:00:e3:80:f1:c9:98:74:b8:77:d3:8f:53:ca:46:f4:8c:
         e6:6e:ef:5e:6c:02:52:cf:4b:55:90:9e:0a:ea:0f:87:b9:d6:
         f8:46:f5:01
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUBdvOnmRnWSVEmXhfxiwnO+QEx+gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjYwNTAxMDIyMTEyWhcNMjcwNDMwMDIyNjEy
WjAzMTEwLwYDVQQDEygwRENFQzQxNDNFNTVEQTRBREYxRUMxNEEyREQwQjA0MzU3
MzQ4ODU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6dqyHGTyJrdi
xDJX3BJLdcoBCrGciCi4YW453+6ck6kqjeSafBgpXoVDKRa595UINN5JSENo8xaK
Jpi68Ld3kfS7LkOmQHUVv9BkIb0hEj4VtVGmLUCoRX7IVb9oHtbnA9mLHjBUgdWk
iI2S9/ndavbnuq5aPsKh7XM2PaA9JNje37s+G/EuUE8mRh+lVafL569rCp8AqjT6
QaQGoTAjcl33/SGqxk8IpfWWyKQ5/q8p2ncsJJxra/WSVmx/pL/+nfcpcrvMopg5
gctm9yAyYq0rdxaO91mpu0GTCB5dYTAjLZA/Hb9HnzejiHcI6JarJkicjzdg2jCK
TIb6jCu1JwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFA3OxBQ+VdpK3x7BSi3QsENX
NIhXMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzMxMzczMjJlMzEzMDM4MmUzMTMxMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM2MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxscTANBgkqhkiG9w0BAQsF
AAOCAQEAfyGm73EWDVdoZwm+1iA2osiGJhDn5GqFA4Ch+S+AXq4Qvf4opfqGgOGh
THaS3M3xYO9R0bE3eQ3LOkT6mgUswxLkmS7FHpsv7S76IPDAWNu1dr0ekDDv4X8o
RaGexgnT+QTdY8cN/oR1MAubArbz+qhTkx6lsNz/UWgYC4plgXYM8TIBnE76WgRi
m1kQgQVXWSx9wMQc+QeIvEfxxgqAoCuDd0AJGovEpfrgNHR8tJ5k3wwjEB9Mpto1
xkQPIA0nLXRjFoDv1br2Ly5EBJc8UGQ6vHR6pY4SV8cA44DxyZh0uHfTj1PKRvSM
5m7vXmwCUs9LVZCeCuoPh7nW+Eb1AQ==
-----END CERTIFICATE-----
Generated at Wed May 13 03:20:38 2026 by rpki-client