Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34332e302f32342d3234203d3e203534313438.roa
File:                     3231362e3233382e34332e302f32342d3234203d3e203534313438.roa (raw, json)
Hash identifier:          Lz+Y674TE0fuiFpuyHHoni11YXTB/GHxvMn29I6t5gk=
Subject key identifier:   FF:42:A0:34:B6:36:81:31:D4:B0:71:B2:7D:43:B1:A4:17:3F:23:8F
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       0CF6C2FA4ABA84EAF72E8B8E3314068622DB0148
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34332e302f32342d3234203d3e203534313438.roa
Signing time:             Wed 01 Jul 2026 01:45:56 +0000
ROA not before:           Wed 01 Jul 2026 01:40:56 +0000
ROA not after:            Wed 30 Jun 2027 01:45:56 +0000
asID:                     54148
IP address blocks:        216.238.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 09:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f6:c2:fa:4a:ba:84:ea:f7:2e:8b:8e:33:14:06:86:22:db:01:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Jul  1 01:40:56 2026 GMT
            Not After : Jun 30 01:45:56 2027 GMT
        Subject: CN=FF42A034B6368131D4B071B27D43B1A4173F238F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5c:2a:25:6d:8b:49:c6:a1:e9:a5:f9:0f:28:
                    c0:1f:71:9f:62:2e:11:10:c4:6b:a6:47:18:e6:d9:
                    78:9e:17:da:9c:17:26:c5:d8:d5:2a:09:8f:e4:54:
                    03:3c:fa:46:a0:01:c9:f2:1a:76:69:eb:98:29:99:
                    dd:a1:28:eb:f7:92:c1:c3:fc:e0:fc:77:97:48:ab:
                    4e:07:37:4c:70:49:59:a3:b4:c2:0c:60:5c:e4:e3:
                    6d:9c:5c:2c:cf:0c:36:4d:ae:e8:d6:e0:6f:61:08:
                    70:b5:cb:d2:95:ba:75:06:5c:3b:fd:be:dd:2c:95:
                    43:16:bd:63:8e:27:df:5b:bd:9b:04:a5:a8:cb:21:
                    16:6c:4a:af:50:23:e4:ba:bb:b0:b9:d7:94:dc:4f:
                    94:00:7e:4c:fd:38:e4:14:a9:fe:63:22:2d:7e:d7:
                    28:41:2d:35:08:c8:50:9a:23:e4:23:80:93:ec:71:
                    ca:cf:97:0a:4b:e1:fb:4a:c8:29:67:92:1c:95:a7:
                    b9:56:bb:14:e7:27:26:35:f3:e9:5e:69:8c:01:b0:
                    b4:00:ed:c6:7a:c5:5c:ec:94:e4:ac:de:1d:f1:7d:
                    e4:a9:5b:55:1a:9d:5d:13:06:42:31:d1:0a:b6:f0:
                    97:d2:e2:1b:fb:6a:c9:73:44:f7:9c:cc:d1:07:01:
                    08:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:42:A0:34:B6:36:81:31:D4:B0:71:B2:7D:43:B1:A4:17:3F:23:8F
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34332e302f32342d3234203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:eb:1e:93:cb:94:1b:57:c8:fd:e5:4c:74:57:61:a1:df:b9:
         be:12:c5:98:39:59:e4:be:f3:be:a6:ef:42:47:80:d4:c3:01:
         c9:0f:05:1f:ac:79:4b:e5:0f:a5:f1:33:e8:65:bb:b7:9b:55:
         9d:29:6d:fb:fa:0d:69:d6:52:fa:18:4f:4a:13:22:32:4c:2b:
         15:7b:97:28:04:bf:d9:c4:0c:25:9d:29:8b:c3:b6:d2:05:eb:
         b7:77:de:41:9c:9d:d9:7a:dc:ea:05:86:83:aa:f8:77:6b:c8:
         e1:01:87:ef:de:4a:91:a2:22:bd:d4:17:c0:a1:36:3f:95:5e:
         70:93:fc:7d:33:3d:a9:c9:9e:8a:a8:93:ce:0c:34:14:e5:b2:
         9c:46:4d:2c:b9:78:bb:fe:12:dc:2b:22:06:dc:3e:98:59:28:
         95:ee:0e:9a:10:d4:cb:d8:fe:25:7d:ff:66:b8:e1:ca:d8:3d:
         fa:96:57:79:df:09:00:9e:f8:86:24:b6:f5:8b:7b:37:8c:4e:
         b7:8c:25:f2:27:d8:b3:86:f0:84:47:9f:c9:72:99:68:cb:77:
         be:b7:92:2a:b2:ca:18:3a:ae:9a:25:27:b4:66:05:6d:4f:4f:
         30:06:d5:99:5d:cf:cc:cd:0c:8f:33:02:10:35:5a:5b:fe:22:
         0a:d7:fb:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:25 2026 by rpki-client