Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139322e302f32332d3233203d3e20343031383037.roa
File:                     36392e3136362e3139322e302f32332d3233203d3e20343031383037.roa (raw, json)
Hash identifier:          RSEilvgNs60qxfPTrqC4M6U+oR/jbj6a8zlWkDLOPq8=
Subject key identifier:   01:2F:65:C2:E7:11:E1:A6:3E:DB:09:2E:7C:4C:8C:D1:C3:81:52:A4
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       5868A59A38A53174046000A4DD7B20656D75B5AB
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139322e302f32332d3233203d3e20343031383037.roa
Signing time:             Fri 19 Jun 2026 02:36:09 +0000
ROA not before:           Fri 19 Jun 2026 02:31:09 +0000
ROA not after:            Fri 18 Jun 2027 02:36:09 +0000
asID:                     401807
IP address blocks:        69.166.192.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:68:a5:9a:38:a5:31:74:04:60:00:a4:dd:7b:20:65:6d:75:b5:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jun 19 02:31:09 2026 GMT
            Not After : Jun 18 02:36:09 2027 GMT
        Subject: CN=012F65C2E711E1A63EDB092E7C4C8CD1C38152A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c3:52:50:1d:66:ff:56:7b:04:12:57:fb:52:
                    2e:12:ab:5c:a9:45:17:1c:11:3b:36:03:47:96:2b:
                    7a:52:63:3f:54:e8:82:7c:42:58:58:45:2c:63:7c:
                    d4:57:26:b1:66:82:4c:d7:2a:57:8f:de:34:d3:54:
                    9e:f4:1d:26:84:c0:77:42:0c:35:e9:a4:06:5a:23:
                    35:98:9e:7c:e7:c5:d6:31:c9:96:77:31:c8:17:37:
                    c9:49:78:94:a3:47:5c:af:fa:b7:59:64:2c:20:19:
                    fa:b6:4f:41:03:2a:ff:23:4d:31:bd:7e:90:9e:63:
                    2a:74:a1:ea:f2:da:a9:f3:bc:dc:0b:37:70:69:fd:
                    ee:06:16:3f:20:6f:bf:1c:8b:3a:1d:c0:46:5b:c6:
                    67:0b:90:e8:b8:2b:22:19:c5:c5:8f:8b:e9:64:5c:
                    16:59:e9:21:10:2f:7e:d0:95:f8:70:6d:92:01:30:
                    5d:6b:94:de:b9:e7:1d:be:98:e7:da:11:bd:49:5a:
                    cc:94:8c:48:dd:92:db:ad:d9:0a:65:50:64:f9:57:
                    ca:73:9f:02:21:fd:f6:74:86:ac:7e:ad:7d:63:be:
                    99:08:39:e2:43:96:e3:f9:81:e4:93:54:58:82:fa:
                    6b:26:c7:bf:20:ba:a3:9a:de:a5:8b:25:4c:c6:a5:
                    b8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:2F:65:C2:E7:11:E1:A6:3E:DB:09:2E:7C:4C:8C:D1:C3:81:52:A4
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3139322e302f32332d3233203d3e20343031383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:f8:ee:65:a1:f6:18:79:b0:88:94:29:a3:4a:25:c7:25:e9:
         0b:49:4c:e4:40:0f:5f:6c:b8:64:6e:ca:e9:68:ed:db:f7:65:
         52:45:c4:57:0b:7e:2e:76:bc:a5:ba:12:e9:a9:43:db:52:03:
         26:7e:23:dc:4e:58:ef:32:99:c9:7f:d3:2b:fa:24:3e:0f:1a:
         69:ab:48:96:23:9d:07:7f:a8:33:e9:63:a5:d7:4c:94:dd:95:
         6e:9c:ea:38:62:c6:3c:59:b8:04:97:d7:83:75:b8:fc:61:6b:
         75:c6:f2:81:8b:f7:e9:e1:6d:cd:41:c0:aa:2b:6b:f4:e7:b7:
         a6:20:02:86:12:e1:35:1d:7f:f1:13:16:4b:69:86:8b:71:31:
         ce:14:da:96:5a:04:d0:f1:17:51:9c:e8:20:0b:6e:25:8a:87:
         ef:07:8a:de:53:1e:10:88:c0:f7:6e:86:7c:ec:91:33:e8:bb:
         fb:d9:97:cf:a7:69:c2:e3:78:87:bf:4e:0a:77:07:77:f1:b6:
         7a:8e:9f:35:a1:71:cc:7d:01:d1:29:73:51:94:2d:6f:15:31:
         bd:de:84:e9:ea:d5:bc:d2:38:20:94:9e:0f:8d:3e:5a:5b:58:
         db:c4:94:16:14:14:58:e2:03:01:1f:d1:5e:84:d0:c7:97:35:
         49:f3:e0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:10 2026 by rpki-client