Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34322e302f32342d3234203d3e203534313438.roa
File:                     3231362e3233382e34322e302f32342d3234203d3e203534313438.roa (raw, json)
Hash identifier:          04p1JLjx7sECNqfnOx000LV/YtnUzumtM1LZlax5DQ8=
Subject key identifier:   82:FD:F9:9E:C1:D5:E5:BF:67:AA:F2:DE:9E:C8:2C:01:33:04:F7:49
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       0CD8D24DDECE5F62EC5E4775B717BD3D02F32966
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34322e302f32342d3234203d3e203534313438.roa
Signing time:             Wed 01 Jul 2026 01:45:56 +0000
ROA not before:           Wed 01 Jul 2026 01:40:56 +0000
ROA not after:            Wed 30 Jun 2027 01:45:56 +0000
asID:                     54148
IP address blocks:        216.238.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d8:d2:4d:de:ce:5f:62:ec:5e:47:75:b7:17:bd:3d:02:f3:29:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Jul  1 01:40:56 2026 GMT
            Not After : Jun 30 01:45:56 2027 GMT
        Subject: CN=82FDF99EC1D5E5BF67AAF2DE9EC82C013304F749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7c:ca:2e:77:6f:5c:f9:53:a9:79:89:0a:6e:
                    fc:ba:b9:51:33:0d:f4:49:dc:9e:25:b8:29:0c:4a:
                    ff:d8:d1:5a:bb:48:09:4c:fb:27:a7:b8:2c:78:a7:
                    ff:7a:e1:ce:ac:e4:83:b1:0d:2d:42:07:64:00:e7:
                    62:06:ab:48:eb:a9:0a:a7:46:39:8d:e6:38:5c:01:
                    c5:e5:1e:e0:c7:a4:55:1d:9f:75:bf:c3:17:9a:58:
                    c9:43:1d:6a:c2:e0:a5:ff:e8:ed:29:21:f3:9c:4a:
                    b2:6c:5a:2b:3c:b3:7b:c3:9f:46:5b:2f:17:69:09:
                    d5:cc:59:79:fc:5f:ac:0d:bb:fa:95:87:b0:88:9c:
                    3f:da:73:51:30:cc:9a:1c:0b:29:10:40:ad:f7:61:
                    ac:9f:6d:73:b8:65:de:8a:2a:4f:72:47:1d:ac:3b:
                    48:c0:d4:da:bd:bd:9f:f4:fd:de:5e:42:b5:61:f9:
                    60:14:3c:14:db:ed:ac:f4:0d:6a:cc:f7:2f:8c:69:
                    94:28:02:06:de:50:8c:10:a3:1b:5a:40:27:bf:9a:
                    f8:0f:1e:da:09:cc:49:74:4d:f9:23:f9:1f:2d:d0:
                    d6:b6:15:89:3a:73:d6:e4:df:79:18:bd:7e:76:82:
                    e8:96:5b:5f:49:77:b9:c5:63:11:c4:4a:8e:f8:9b:
                    69:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:FD:F9:9E:C1:D5:E5:BF:67:AA:F2:DE:9E:C8:2C:01:33:04:F7:49
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34322e302f32342d3234203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:71:c8:0b:83:28:9d:37:7b:36:f8:64:d4:aa:58:31:60:a0:
         ab:65:fc:aa:a8:be:60:2e:d0:ce:69:f8:b7:e0:09:58:8c:86:
         3f:bb:ac:88:02:cf:bf:08:1a:5e:a9:8a:64:c0:0e:78:3e:4d:
         8d:c8:d7:f2:86:5b:aa:73:63:6e:d4:a5:65:46:b5:f3:51:dd:
         b7:83:c9:0f:56:ae:88:50:f1:b3:ac:0c:4a:3b:89:cd:30:dc:
         f4:bb:cf:06:ec:a8:18:d1:43:5f:56:69:93:8e:5e:14:21:a7:
         b2:63:2e:6c:00:90:19:d3:a8:9e:52:69:be:15:89:f6:a5:d0:
         89:18:61:f8:38:be:dd:38:73:7f:c6:a4:18:fd:87:ea:9c:eb:
         a5:7f:7f:f1:e0:15:f9:90:d2:43:f9:a7:16:d9:f4:7a:7a:ae:
         ac:c2:d2:05:70:a5:88:48:1d:6c:5c:55:16:17:73:77:2b:ad:
         be:eb:55:7d:c5:88:64:f5:03:d2:da:99:ff:19:0b:dc:50:40:
         f2:9d:58:76:30:bc:55:7e:28:c7:35:5e:ce:0e:13:d3:c1:d4:
         96:11:d8:6e:c5:5e:b6:df:49:02:3c:46:ec:8b:30:8c:c0:2c:
         6d:c2:19:bd:d1:85:01:ad:ff:07:0d:44:9a:76:ea:dc:2f:a7:
         39:79:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:46 2026 by rpki-client