Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20313436383133.roa
File:                     3230392e38372e3137322e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier:          /vfKQmMfwRi1ShELom90wuaHpYch1fBWHwF0vnCt7HA=
Subject key identifier:   62:9C:31:53:2F:71:8F:66:91:DE:1D:D8:C4:48:82:98:C9:9F:38:3E
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       41709EC8B0636F9771B6F3D86C3256A4B759172F
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20313436383133.roa
Signing time:             Thu 24 Sep 2026 15:30:28 +0000
ROA not before:           Thu 24 Sep 2026 15:25:28 +0000
ROA not after:            Thu 23 Sep 2027 15:30:28 +0000
asID:                     146813
IP address blocks:        209.87.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Sep 2026 16:06:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:70:9e:c8:b0:63:6f:97:71:b6:f3:d8:6c:32:56:a4:b7:59:17:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Sep 24 15:25:28 2026 GMT
            Not After : Sep 23 15:30:28 2027 GMT
        Subject: CN=629C31532F718F6691DE1DD8C4488298C99F383E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d1:0a:96:b9:2a:8c:be:de:21:29:b7:f4:3d:
                    69:e5:51:ed:36:de:14:7d:5c:3f:50:a2:11:fc:7a:
                    a9:e4:67:38:f0:b5:8b:25:d9:43:9b:dd:5e:0b:0b:
                    ba:7f:e3:b1:0d:82:72:fc:53:00:fd:3c:5e:49:8f:
                    71:6c:80:57:46:67:a5:cd:f7:2f:6e:c9:86:ef:9a:
                    9e:fe:3c:e1:af:b7:1c:6a:81:5a:51:6a:ec:f2:22:
                    06:b6:f6:fa:85:89:a0:00:ef:27:65:a8:53:67:4f:
                    73:2c:be:74:3e:ea:4b:fa:bf:7a:8a:36:15:9c:21:
                    ce:f0:fc:9c:b1:59:08:23:fb:e1:b7:06:a5:d5:6d:
                    71:55:de:47:3a:a4:32:93:fb:96:fd:31:cb:fc:e7:
                    21:42:0b:3b:f3:08:56:b4:ac:cc:ae:62:5c:67:83:
                    51:77:e3:c1:8e:ec:a7:88:59:cb:19:cc:75:93:36:
                    2d:72:75:96:02:c5:45:d2:73:f1:5e:fb:4b:2d:d1:
                    f1:11:9a:cd:b9:26:80:af:a3:46:90:2e:c6:8f:14:
                    55:b7:ee:85:83:f7:f4:90:59:c0:01:51:68:90:59:
                    99:32:19:d6:4e:7d:df:a4:4a:25:c0:ab:a4:6d:8e:
                    0b:32:15:c8:d8:93:f7:d7:6e:3a:be:db:41:21:ac:
                    f7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9C:31:53:2F:71:8F:66:91:DE:1D:D8:C4:48:82:98:C9:9F:38:3E
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20313436383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:30:92:88:5b:9e:e8:9b:f0:82:c2:a8:26:34:5e:7d:94:a1:
         78:c0:8f:f9:32:04:94:39:1b:8f:05:1b:7d:80:54:21:ec:f9:
         d7:af:7a:c2:71:bd:38:e4:54:1f:8d:e3:5e:85:34:90:bf:e6:
         ac:7b:e1:4b:1a:40:20:58:b7:a1:8a:07:76:65:08:2f:f4:4c:
         06:94:d8:0f:bc:0e:d6:5f:66:fd:ce:a2:5a:35:cf:fe:1b:6e:
         32:f8:93:39:e2:f4:77:23:28:b7:7f:1c:78:d9:25:e7:f4:67:
         de:55:17:28:4a:8e:96:8e:bb:91:df:34:13:38:f7:e3:55:79:
         b8:68:1b:31:9d:23:28:3f:90:39:f9:fb:43:a2:59:1a:15:f2:
         23:9a:6a:74:a0:20:c5:e6:61:d0:62:6f:87:c1:a8:3c:2a:4b:
         32:36:72:39:bf:06:08:b0:3f:f4:26:52:14:2d:ed:6e:20:b9:
         03:9a:83:da:28:eb:b7:8e:6b:0c:0f:b4:98:21:2e:8c:b4:f5:
         f8:03:02:dd:40:b5:a1:a2:32:84:a8:42:64:71:1d:a1:58:a8:
         72:e8:f3:9e:7f:55:eb:73:ac:54:ba:be:77:3a:67:3d:c7:f9:
         bd:6d:f8:cf:d9:89:04:91:d2:3d:17:a0:f0:a8:d5:d1:85:c9:
         aa:a9:8c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:25 2026 by rpki-client