Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa
File:                     3230392e38372e3137322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          U3iIX9qKzfbrRsSLO8DDCCZEz9dTdwC9+YIht4g2/6U=
Subject key identifier:   FA:0D:3F:58:6A:9E:D6:D0:CA:AB:27:DB:FD:40:42:85:0E:33:7F:EC
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       77A0934E04905FB0B557E48589AEC8D7B1295992
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa
Signing time:             Tue 22 Sep 2026 03:04:40 +0000
ROA not before:           Tue 22 Sep 2026 02:59:40 +0000
ROA not after:            Tue 21 Sep 2027 03:04:40 +0000
asID:                     834
IP address blocks:        209.87.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 18:18:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:a0:93:4e:04:90:5f:b0:b5:57:e4:85:89:ae:c8:d7:b1:29:59:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Sep 22 02:59:40 2026 GMT
            Not After : Sep 21 03:04:40 2027 GMT
        Subject: CN=FA0D3F586A9ED6D0CAAB27DBFD4042850E337FEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:dc:9b:76:16:db:7b:68:93:77:17:ef:9c:5e:
                    78:5b:a6:62:1f:a7:3b:95:e0:86:a5:86:05:4a:6a:
                    1f:72:72:06:93:20:6f:42:11:a6:81:e6:14:9c:6b:
                    b9:96:60:bc:d5:e0:55:7a:c5:d7:16:f8:70:65:1a:
                    c7:5d:f6:a1:20:6c:1e:b8:3a:78:d4:7d:95:a3:b2:
                    b7:03:0f:1d:2d:92:6d:b4:51:8e:86:0a:7f:ba:b4:
                    4d:24:40:df:31:48:16:41:6c:ec:2b:fe:5f:6b:79:
                    87:a2:08:d1:cf:25:aa:f9:4e:c7:2d:ea:90:57:af:
                    07:62:99:fa:e5:55:4d:2f:6f:fd:01:2a:25:99:cd:
                    ed:4b:3c:eb:1b:c9:b1:9c:bc:3f:37:b4:82:f6:d5:
                    5d:f9:1d:dd:be:68:eb:14:42:ef:17:84:b7:4f:df:
                    d6:49:4a:0a:f7:e7:d0:e8:b9:d8:af:56:3f:87:a3:
                    e5:9d:3a:06:f5:fa:62:eb:20:b6:ba:3d:15:61:fc:
                    4a:77:a8:6f:f0:2d:f2:43:68:97:0d:06:08:99:f8:
                    56:b8:03:aa:ff:3e:aa:7f:60:26:66:5d:df:bb:3c:
                    62:aa:95:cf:77:e1:8c:5e:db:31:bd:ad:f3:3a:8a:
                    fb:11:07:db:d2:61:5f:b8:2e:2e:a1:11:b8:80:02:
                    cf:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0D:3F:58:6A:9E:D6:D0:CA:AB:27:DB:FD:40:42:85:0E:33:7F:EC
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:71:b9:dc:d1:36:4b:5b:8b:2d:e0:12:59:a4:89:32:af:48:
         4a:c5:a8:77:10:e1:85:03:45:f2:f1:08:ac:af:75:fa:cf:93:
         bd:3c:ab:f9:0f:8b:39:9a:2c:3a:fe:f2:bc:03:79:c9:21:40:
         3e:d5:75:7a:6e:74:be:84:01:37:6b:78:3e:dd:ec:67:0d:db:
         6d:67:cf:df:5e:6b:67:c1:0f:96:5c:e7:82:ff:dd:d5:00:64:
         a2:f0:e1:d7:36:83:48:bf:18:71:9e:bc:f3:c0:86:68:1b:eb:
         e4:b6:d5:dd:72:64:62:73:6e:62:56:e9:49:71:f2:22:e4:bc:
         ce:54:a4:57:78:43:24:27:46:fa:07:74:56:c4:cb:c3:ab:eb:
         c5:1e:9f:15:56:a1:bc:fa:fd:59:6f:e2:ec:82:8f:49:3c:36:
         36:61:30:d3:31:7d:be:5a:89:c8:9a:c1:ef:95:19:05:a1:23:
         83:85:66:8f:d0:32:91:2f:80:42:55:f5:50:cf:b3:12:4c:c8:
         fa:e0:4d:85:31:04:a7:89:32:0d:6e:57:78:c0:94:69:c4:7b:
         e8:4a:5b:1d:89:37:8e:51:25:39:51:cd:81:6c:f5:be:ae:81:
         17:24:42:d6:d2:14:97:a0:7f:7e:42:f1:f2:3e:1f:65:19:25:
         fc:2e:ea:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:27:26 2026 by rpki-client