Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132312e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3132312e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          GuoVQ24j7XIqqKsodHs4egWz5raK9w8JKvsfBazDU60=
Subject key identifier:   FE:DB:29:9C:3C:7E:64:40:24:F6:E5:1E:07:D5:07:44:82:46:49:ED
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       299D3EA2BEC71F6F1FDD8925793F33E0511B233D
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132312e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:11 +0000
ROA not before:           Fri 01 May 2026 02:21:11 +0000
ROA not after:            Fri 30 Apr 2027 02:26:11 +0000
asID:                     5650
IP address blocks:        172.108.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9d:3e:a2:be:c7:1f:6f:1f:dd:89:25:79:3f:33:e0:51:1b:23:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:11 2026 GMT
            Not After : Apr 30 02:26:11 2027 GMT
        Subject: CN=FEDB299C3C7E644024F6E51E07D50744824649ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ae:7b:cb:1d:8b:fa:40:e4:29:27:b9:9e:cd:
                    fa:f2:1e:51:b4:5f:ae:30:86:13:23:2c:78:4f:2e:
                    cc:2e:95:fd:8f:65:68:3a:5d:74:19:90:d7:a7:ef:
                    00:bf:bb:db:6b:77:33:b2:f2:c4:d7:f0:45:23:1c:
                    52:d2:14:80:65:7d:c1:89:da:da:78:77:62:34:06:
                    c6:0a:3b:8e:64:ea:db:9a:98:ea:1a:48:9c:8b:97:
                    f1:c4:d9:7f:5a:e1:a8:16:71:67:88:a6:91:28:07:
                    37:6d:86:62:3a:9f:b3:99:c6:87:38:ee:d5:6a:bf:
                    f6:fe:0c:6e:b8:ad:4e:94:fa:c0:e6:5e:f5:62:fa:
                    c5:ca:14:d6:27:53:51:30:86:84:85:27:3b:b7:5d:
                    5e:de:50:38:cd:bc:05:5f:50:3f:6d:1d:cd:6c:3d:
                    e7:c0:f0:79:11:b5:0e:01:ac:d8:24:13:81:9e:45:
                    5c:9b:67:1a:a5:dd:17:e0:f9:e8:66:46:2a:95:26:
                    fa:d5:42:f6:1e:0b:2e:bc:04:22:39:41:fe:4c:7d:
                    49:39:9f:da:3b:cc:d6:8a:33:51:85:61:cf:52:45:
                    d4:16:7e:1b:a5:25:92:0d:79:ea:e7:70:07:62:96:
                    0c:4f:b0:bf:c2:71:cd:76:a5:a3:05:d6:3b:03:9b:
                    c9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DB:29:9C:3C:7E:64:40:24:F6:E5:1E:07:D5:07:44:82:46:49:ED
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3132312e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:24:6d:ff:25:34:db:52:7f:b1:f8:3a:bb:e7:f8:02:a7:3f:
         3d:81:87:fb:cb:67:7c:78:5f:b7:ee:fa:8a:b9:11:19:7f:3e:
         32:0b:a5:3d:73:b9:1a:e3:da:85:48:a5:18:e2:54:3a:f8:f2:
         5f:d1:52:fa:15:bf:97:77:18:d1:66:16:41:f0:62:41:34:82:
         a9:67:5b:0d:e4:44:50:3a:e6:fa:64:b1:c0:4f:a8:3d:dc:1b:
         fa:14:1c:18:f8:51:6e:5d:30:ac:ab:0f:0c:9c:ef:70:bb:3e:
         d9:4b:ea:4f:05:0d:d8:8c:5c:9f:d0:c2:90:35:76:b7:0c:3d:
         ca:0d:2f:db:30:e5:00:12:a8:83:33:6b:10:3f:3b:5b:a1:ef:
         7e:ec:92:14:64:90:b2:68:9a:fd:8b:3d:f2:84:6c:4c:15:0f:
         e4:09:1a:88:dd:44:92:d6:ab:f5:03:05:98:07:a7:87:a2:c0:
         52:4f:c7:dd:4b:4e:c9:d5:04:96:52:67:c2:77:78:82:4b:05:
         64:aa:1f:0d:04:0f:b1:fd:b6:9e:a7:a4:6c:94:a5:87:af:a3:
         7e:80:05:09:87:91:12:12:e4:b6:b1:0a:f5:04:6f:e7:d1:6a:
         7a:07:1a:df:37:37:b0:de:87:66:69:df:6f:3c:d6:fc:b2:54:
         f4:11:86:09
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUKZ0+or7HH28f3YkleT8z4FEbIz0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmMwZDY3MmFlOWRiZTg4MTM1ODkzZTNkYzE5YTg4NWEw
Njc4NTlmZGFlNjY4ZDVhNzcwHhcNMjYwNTAxMDIyMTExWhcNMjcwNDMwMDIyNjEx
WjAzMTEwLwYDVQQDEyhGRURCMjk5QzNDN0U2NDQwMjRGNkU1MUUwN0Q1MDc0NDgy
NDY0OUVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua57yx2L+kDk
KSe5ns368h5RtF+uMIYTIyx4Ty7MLpX9j2VoOl10GZDXp+8Av7vba3czsvLE1/BF
IxxS0hSAZX3BidraeHdiNAbGCjuOZOrbmpjqGkici5fxxNl/WuGoFnFniKaRKAc3
bYZiOp+zmcaHOO7Var/2/gxuuK1OlPrA5l71YvrFyhTWJ1NRMIaEhSc7t11e3lA4
zbwFX1A/bR3NbD3nwPB5EbUOAazYJBOBnkVcm2capd0X4PnoZkYqlSb61UL2Hgsu
vAQiOUH+TH1JOZ/aO8zWijNRhWHPUkXUFn4bpSWSDXnq53AHYpYMT7C/wnHNdqWj
BdY7A5vJQQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFP7bKZw8fmRAJPblHgfVB0SC
RkntMB8GA1UdIwQYMBaAFMsIhtIESKZjx89cThl5rG952wUgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODcyODk1NzgwMTg3MzJhOTBhMmYwOTdmLzIv
Q0IwODg2RDIwNDQ4QTY2M0M3Q0Y1QzRFMTk3OUFDNkY3OURCMDUyMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1LzQ2YmYxZjAzLTJlYmQtNDA1ZS1hNWI3LTYyYmRmM2Q3ZGJlNi9iYzBk
NjcyYWU5ZGJlODgxMzU4OTNlM2RjMTlhODg1YTA2Nzg1OWZkYWU2NjhkNWE3Ny5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg3Mjg5NTc4MDE4NzMy
YTkwYTJmMDk3Zi8yLzMxMzczMjJlMzEzMDM4MmUzMTMyMzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTM2MzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxseTANBgkqhkiG9w0BAQsF
AAOCAQEAYyRt/yU021J/sfg6u+f4Aqc/PYGH+8tnfHhft+76irkRGX8+MgulPXO5
GuPahUilGOJUOvjyX9FS+hW/l3cY0WYWQfBiQTSCqWdbDeREUDrm+mSxwE+oPdwb
+hQcGPhRbl0wrKsPDJzvcLs+2UvqTwUN2Ixcn9DCkDV2tww9yg0v2zDlABKogzNr
ED87W6HvfuySFGSQsmia/Ys98oRsTBUP5AkaiN1Ektar9QMFmAenh6LAUk/H3UtO
ydUEllJnwnd4gksFZKofDQQPsf22nqekbJSlh6+jfoAFCYeREhLktrEK9QRv59Fq
egca3zc3sN6HZmnfbzzW/LJU9BGGCQ==
-----END CERTIFICATE-----
Generated at Wed May 13 01:44:01 2026 by rpki-client