Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135382e302f32342d3234203d3e203533373234.roa
File:                     3231362e37332e3135382e302f32342d3234203d3e203533373234.roa (raw, json)
Hash identifier:          vp+NKH48L4iVuEg0BeXc0/lsr+9t1k7RHccrmtMl9Ck=
Subject key identifier:   51:58:1D:3D:B9:26:6B:1F:07:7E:5A:38:1E:4A:5E:61:D6:F6:9B:6D
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       667E8F8181304B279B924673AE3AFA64F2D962B7
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135382e302f32342d3234203d3e203533373234.roa
Signing time:             Tue 05 May 2026 01:21:21 +0000
ROA not before:           Tue 05 May 2026 01:16:21 +0000
ROA not after:            Tue 04 May 2027 01:21:21 +0000
asID:                     53724
IP address blocks:        216.73.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 21:16:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:7e:8f:81:81:30:4b:27:9b:92:46:73:ae:3a:fa:64:f2:d9:62:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: May  5 01:16:21 2026 GMT
            Not After : May  4 01:21:21 2027 GMT
        Subject: CN=51581D3DB9266B1F077E5A381E4A5E61D6F69B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:08:11:9d:1b:0d:c2:e0:33:ad:d9:db:d3:a1:
                    b7:5d:30:f2:36:ad:66:76:c8:9a:f1:00:37:d1:27:
                    07:6f:41:5e:c1:e3:93:9b:7a:ed:3c:34:b0:dc:75:
                    fd:b8:4e:da:77:f7:34:1b:8c:db:e9:4c:61:55:91:
                    4c:56:25:30:a0:3a:3f:f4:3e:0d:19:7a:fa:60:bd:
                    ed:a0:15:de:9b:35:b8:c1:26:92:2f:dd:26:1d:aa:
                    78:08:68:e3:bd:45:df:16:06:aa:f5:49:48:8c:ab:
                    52:de:ed:31:73:76:55:e2:e3:22:fa:4b:0d:28:5b:
                    8e:ae:e1:f1:27:67:0e:b8:fc:05:56:7d:b7:33:6a:
                    d9:32:c3:e3:d0:ff:90:3b:cb:fe:14:e2:48:8c:f1:
                    92:8f:d8:8c:6d:45:fc:93:d3:e2:de:d9:ad:ad:b3:
                    f2:78:de:7b:a4:3a:f1:c4:ae:4f:f5:77:7e:2f:7e:
                    af:44:4e:11:69:b0:e7:7a:a8:85:7b:ac:35:62:ba:
                    df:47:e8:b7:22:b4:f3:03:b2:fe:3a:97:b5:25:17:
                    ee:5b:da:d8:f9:a2:88:e4:0d:25:0e:f3:c3:87:55:
                    52:1e:5d:72:4c:fc:36:42:06:51:b5:69:80:06:ab:
                    81:b4:ac:74:a2:ca:b0:27:40:60:5b:06:82:fa:e9:
                    68:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:58:1D:3D:B9:26:6B:1F:07:7E:5A:38:1E:4A:5E:61:D6:F6:9B:6D
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135382e302f32342d3234203d3e203533373234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:df:ed:fa:f6:67:34:fb:32:8e:26:31:d6:39:ab:b4:bb:75:
         0f:37:6d:79:73:e3:47:f7:5d:1e:d5:de:9e:2e:9a:e7:a2:bd:
         8a:e4:5a:e6:bc:f7:f8:cf:24:f4:b1:92:d9:d1:72:cf:3f:3c:
         d9:48:5f:98:01:7e:3a:24:24:d1:4b:6a:d9:08:69:63:34:10:
         e2:1c:be:36:bf:bc:a3:31:05:bb:47:ff:68:8c:7e:b3:c6:97:
         90:7c:3f:b2:3b:24:07:f6:40:65:54:a6:d2:8a:fe:ec:ee:9b:
         14:e4:9a:1e:fb:3d:05:b2:50:de:ad:6a:90:27:e3:d6:58:6e:
         c3:41:56:98:a7:65:4e:91:d6:53:a8:bf:cb:31:b5:27:0d:94:
         73:1f:c5:97:f1:d5:9d:e3:90:d9:b1:e8:7c:ed:a0:91:1e:1d:
         22:9b:a2:1c:d0:60:db:da:11:c5:a2:00:82:97:40:04:9c:92:
         af:db:8a:c1:ab:e6:7f:2f:e0:da:66:54:42:6d:5b:5c:77:2f:
         81:2b:c8:cd:34:a6:57:a4:2e:f3:3d:2c:4f:a6:9c:89:b9:aa:
         0a:40:3e:d0:a3:4d:87:71:c6:5b:74:d8:14:6b:ed:d7:1d:65:
         e5:dd:a9:01:8a:57:fe:b9:a2:ee:0a:9f:c7:21:fb:07:5f:48:
         ac:81:49:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:26:21 2026 by rpki-client