Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203136353039.roa
File:                     3130382e3136302e3231322e302f32322d3234203d3e203136353039.roa (raw, json)
Hash identifier:          EJXdXFFIgaXDTRPwW/vGxFMsU/hYdQ2UBlM4cUV5PZQ=
Subject key identifier:   66:DA:79:5B:87:3B:DF:34:75:A7:6D:22:64:50:01:62:9E:81:EE:90
Certificate issuer:       /CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
Certificate serial:       6DD04BC8920670DF36C5A23BD60F508B5437C84A
Authority key identifier: 87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203136353039.roa
Signing time:             Tue 17 Mar 2026 07:35:54 +0000
ROA not before:           Tue 17 Mar 2026 07:30:54 +0000
ROA not after:            Tue 16 Mar 2027 07:35:54 +0000
asID:                     16509
IP address blocks:        108.160.212.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/3eb60598-76ca-49b0-9a1f-01270603d8d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 20:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:d0:4b:c8:92:06:70:df:36:c5:a2:3b:d6:0f:50:8b:54:37:c8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42
        Validity
            Not Before: Mar 17 07:30:54 2026 GMT
            Not After : Mar 16 07:35:54 2027 GMT
        Subject: CN=66DA795B873BDF3475A76D22645001629E81EE90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:b6:e8:13:ab:d9:58:a2:08:4e:5a:53:88:6d:
                    1a:0c:72:ac:ed:ab:ba:6e:fb:f7:9d:8a:a3:af:a2:
                    6f:c1:85:99:68:a7:82:ee:62:6d:66:e8:06:23:ce:
                    e9:26:d0:27:7d:1e:b6:d0:48:0c:e8:4d:1e:51:2f:
                    66:09:4e:79:09:87:47:37:fc:af:6d:bf:96:d3:91:
                    36:99:8e:86:bd:09:92:b9:bb:48:dc:41:e4:d0:ac:
                    11:88:36:54:a7:fb:40:1a:06:8d:83:fa:ee:96:09:
                    a4:f6:f9:a8:41:79:49:5a:8c:49:cd:1b:28:7d:6e:
                    da:3a:ba:3b:32:1e:9b:18:e4:7c:64:d3:9b:3e:c7:
                    63:f7:39:ad:0d:f5:16:e5:93:d1:44:d0:c1:9f:0a:
                    1f:76:d4:6a:02:83:6a:c6:53:b7:cd:29:4b:c3:60:
                    a1:3f:59:48:09:b8:35:66:8a:f7:9c:78:1f:3f:fb:
                    bb:e9:38:a6:34:3e:b1:25:ee:a9:e6:b6:a7:58:dc:
                    d3:80:a6:fb:2f:d5:3a:93:10:f0:60:43:5c:b4:a1:
                    6b:6d:2e:c5:24:5b:97:d6:ab:8f:05:3e:c2:08:3d:
                    8d:54:c6:8f:65:38:09:cb:14:3c:b6:cb:30:43:16:
                    d1:ba:ef:6b:5e:7a:c9:ef:1d:1c:51:fa:63:4f:00:
                    c3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:DA:79:5B:87:3B:DF:34:75:A7:6D:22:64:50:01:62:9E:81:EE:90
            X509v3 Authority Key Identifier:
                keyid:87:4A:35:3A:EE:F2:A6:07:A1:AB:A8:E4:3D:20:F1:8E:C9:41:1A:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/874A353AEEF2A607A1ABA8E43D20F18EC9411AF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3eb60598-76ca-49b0-9a1f-01270603d8d9/4ad63afcc9b7d51860a25f5fecc2492d35bd0aa4135018de42.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf889c43e70188b36905d41605/0/3130382e3136302e3231322e302f32322d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.160.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:29:65:33:a8:88:eb:62:ac:8c:12:77:5f:e1:18:12:a8:52:
         19:58:69:10:52:b6:87:e1:f0:df:64:fb:a1:62:30:48:e1:70:
         4a:65:8c:4b:67:9a:49:c9:66:a9:1e:d5:60:ad:e7:cf:92:59:
         43:93:7b:6d:e9:b6:f7:90:b7:57:08:93:c8:90:bc:b4:9c:b2:
         02:50:88:f0:a3:bb:c4:a6:19:71:34:e1:d2:38:68:a2:65:c1:
         69:57:03:82:26:97:9e:79:f9:d4:13:32:3f:c8:1a:01:04:c5:
         ee:3c:dd:01:d3:52:b8:dc:69:89:a4:d2:1b:47:2a:2f:7a:9a:
         e3:81:43:cb:51:11:1e:9d:2b:ff:bd:31:95:eb:de:57:1c:a3:
         dd:52:b8:86:c0:4a:81:ae:3a:67:78:f5:ad:14:ac:12:d5:39:
         3f:12:72:c2:bf:01:b3:6c:7a:c2:c0:4f:06:2b:a9:16:7d:2d:
         20:2a:a1:f0:ba:87:0d:2e:5f:b6:ea:de:8e:7e:9d:f3:a5:d6:
         d4:70:2a:50:0a:4c:14:46:93:7e:1a:fe:78:2f:64:84:d6:f6:
         aa:31:5d:88:5b:b7:c6:24:1b:8f:7c:71:c0:7f:c5:ac:ce:8f:
         12:f1:66:e2:2b:5c:6c:e6:59:12:d0:c6:1e:1c:d6:e3:a4:0f:
         a6:a9:1d:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:51:25 2026 by rpki-client