Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa
File:                     3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa (raw, json)
Hash identifier:          KtQeO8vNKbmb9Tyun0WO/9QiSpVz0Wn/OCc45JLnAZ8=
Subject key identifier:   C2:B5:DB:49:31:61:BA:C8:D3:63:FC:3A:F3:17:C9:65:36:6D:1E:9E
Certificate issuer:       /CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Certificate serial:       282D218BD485611E026CA3EBB58C061FC6D2BB55
Authority key identifier: 54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa
Signing time:             Thu 25 Jun 2026 21:27:25 +0000
ROA not before:           Thu 25 Jun 2026 21:22:25 +0000
ROA not after:            Thu 24 Jun 2027 21:27:25 +0000
asID:                     40850
IP address blocks:        138.118.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2d:21:8b:d4:85:61:1e:02:6c:a3:eb:b5:8c:06:1f:c6:d2:bb:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
        Validity
            Not Before: Jun 25 21:22:25 2026 GMT
            Not After : Jun 24 21:27:25 2027 GMT
        Subject: CN=C2B5DB493161BAC8D363FC3AF317C965366D1E9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:5f:d5:de:ec:8b:0d:15:1d:09:f8:2d:37:
                    3e:46:b9:11:e3:b9:19:b9:e6:e5:a4:ac:99:0c:78:
                    75:4f:bd:67:ce:53:26:2a:d1:60:73:ee:fd:63:1a:
                    44:e4:44:00:0e:d3:ce:ce:59:2b:82:e2:e4:b5:18:
                    09:9c:6f:26:aa:1f:5e:5b:63:f9:fb:81:d8:c8:c4:
                    66:f5:3f:92:cf:9e:ec:3b:53:8d:e0:eb:25:51:df:
                    78:10:66:82:27:30:23:71:fc:02:65:cf:d3:6c:61:
                    d6:93:cd:7e:53:9b:39:b1:ea:16:cf:a3:0f:4f:9c:
                    aa:3d:8d:87:05:3e:e3:57:31:fb:ed:87:35:4b:95:
                    3b:1b:b6:ca:3c:69:fb:8b:0d:eb:ef:4d:cc:d8:3a:
                    bd:ff:b1:70:8e:1e:03:ea:46:c7:f2:55:03:d3:ac:
                    a1:45:29:c4:6b:db:71:f8:fb:35:a6:05:08:32:7a:
                    c7:b0:18:48:ce:48:1d:fa:19:8a:28:1e:d7:a9:32:
                    cc:86:2d:45:c7:0d:a8:68:b0:99:e2:27:bf:94:5c:
                    31:95:4a:4c:0b:9f:de:46:0f:4e:09:ef:21:09:44:
                    f3:bb:43:e2:92:b2:3f:3a:db:f8:bb:6e:6e:da:cd:
                    91:bc:9b:c3:e5:95:09:1f:d2:5f:36:14:e5:0d:9c:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:B5:DB:49:31:61:BA:C8:D3:63:FC:3A:F3:17:C9:65:36:6D:1E:9E
            X509v3 Authority Key Identifier:
                keyid:54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:88:dc:c1:29:d9:53:78:88:4d:5f:6e:7a:a7:0a:f4:7b:fa:
         4b:b1:11:07:f4:24:5c:e1:4d:0a:4c:37:e4:1b:fb:9f:1d:81:
         18:2a:9d:4b:cc:08:49:f0:8c:ff:bb:a1:ef:93:29:5e:06:e1:
         ba:d8:98:3b:9b:b1:c4:57:d1:9d:e2:7b:63:40:4a:0f:0a:f9:
         34:c2:af:1a:9a:25:f9:89:10:b3:3b:9b:e1:56:61:66:ba:72:
         5f:c9:77:da:e0:e5:12:5a:8e:aa:26:0e:62:d0:ec:52:dc:94:
         c7:49:40:7e:4a:5e:64:62:c0:13:0f:5c:9c:73:dd:ff:79:d7:
         ab:ff:56:48:bf:33:e4:e2:dd:fd:b5:df:9c:7c:d9:b6:11:b3:
         1c:af:c1:d2:6a:72:98:7a:82:fb:89:e3:79:1a:24:c1:99:36:
         48:41:cd:7d:4d:76:14:eb:40:87:9b:7e:59:08:a2:10:be:0c:
         8b:15:75:04:42:8d:05:bb:29:cb:26:48:ea:ef:19:f0:fe:13:
         04:7f:89:f5:c2:c6:a5:cc:78:98:fe:88:d7:e7:88:52:12:2a:
         f1:b2:3c:ad:9f:1c:59:e6:3c:16:b7:45:a9:a2:e3:2b:90:77:
         a9:0a:17:1a:cf:b2:51:99:0a:60:1a:27:db:a0:42:25:ee:5f:
         8a:9d:8e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:15 2026 by rpki-client