Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233372e302f32342d3234203d3e203231373639.roa
File:                     3230352e3133342e3233372e302f32342d3234203d3e203231373639.roa (raw, json)
Hash identifier:          dIAuF5Gmuala0MpDlR/1PiyKILtdUy/InLU9Pffe0Bw=
Subject key identifier:   ED:97:AB:8C:6C:5A:E3:68:4D:C2:79:06:57:1A:D2:85:32:4A:16:ED
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       7673FC59FDC4AEB9C867DFAA84C54A1DF862BFE8
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233372e302f32342d3234203d3e203231373639.roa
Signing time:             Sat 13 Jun 2026 06:36:07 +0000
ROA not before:           Sat 13 Jun 2026 06:31:07 +0000
ROA not after:            Sat 12 Jun 2027 06:36:07 +0000
asID:                     21769
IP address blocks:        205.134.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:73:fc:59:fd:c4:ae:b9:c8:67:df:aa:84:c5:4a:1d:f8:62:bf:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 13 06:31:07 2026 GMT
            Not After : Jun 12 06:36:07 2027 GMT
        Subject: CN=ED97AB8C6C5AE3684DC27906571AD285324A16ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:09:54:07:13:01:ee:98:01:9d:4a:d0:b6:8d:
                    6a:5f:a5:67:e4:10:1f:cc:42:31:d7:cc:8c:23:f4:
                    39:83:a6:f3:a1:0f:85:dd:b9:b2:33:bb:46:f2:ee:
                    05:68:bb:a7:91:3f:ca:02:fb:15:b8:d0:d7:18:b5:
                    67:58:12:64:52:3f:43:10:0b:9d:9e:f3:b1:2d:ce:
                    0e:2d:2b:f9:53:83:a6:fb:6d:05:9c:ab:ba:79:70:
                    bf:f5:9e:e9:46:36:aa:29:75:a2:3d:d7:d4:98:29:
                    6a:44:d3:1c:f2:44:cc:05:76:90:8d:2a:e1:5a:18:
                    04:93:71:4b:0a:75:06:ac:28:e6:69:d7:57:da:c2:
                    87:31:d7:de:1c:3d:60:4c:64:5c:b9:99:14:01:2a:
                    db:66:81:df:9d:e0:4f:18:46:60:b9:93:06:92:73:
                    a8:40:73:83:de:45:10:43:5d:72:26:74:a8:b1:88:
                    00:8b:b2:90:36:d2:5f:d5:bd:8b:1c:f2:72:54:4c:
                    d9:b4:38:28:18:af:da:7e:4b:3d:aa:df:a9:58:c6:
                    23:a9:6b:af:a4:d8:a3:77:16:32:9f:ea:44:75:0a:
                    29:f8:78:3c:95:e0:50:2f:26:85:a1:d2:05:46:e3:
                    5c:64:6b:ce:06:08:08:90:cf:8b:75:94:ca:05:48:
                    8f:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:97:AB:8C:6C:5A:E3:68:4D:C2:79:06:57:1A:D2:85:32:4A:16:ED
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3233372e302f32342d3234203d3e203231373639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:ff:e4:67:93:ef:cc:2a:91:6c:ad:19:c1:d6:b0:80:38:42:
         76:b3:f2:ef:f4:ae:c4:0a:f8:c1:70:81:dc:ab:db:82:f4:10:
         58:11:f4:7b:87:e7:73:85:21:9e:65:53:39:47:77:15:fe:30:
         65:98:dd:99:5a:e0:f4:bd:36:22:b4:99:31:62:73:62:f7:f5:
         79:cb:be:e7:ac:bd:ea:f0:ee:f9:93:18:8d:0d:51:62:a5:3c:
         c1:4e:20:58:b9:e8:b4:09:71:d8:7f:7f:07:e5:a6:74:25:cb:
         30:20:4b:b8:b3:5c:0f:57:52:43:cb:6a:79:37:e4:e3:25:3b:
         73:5b:5d:25:27:5c:9e:fd:49:68:d0:31:01:50:9e:24:04:3c:
         36:cb:ab:30:4c:e3:4d:29:00:06:57:a2:fa:d4:2c:42:07:34:
         16:66:f2:86:6b:47:db:7e:01:54:d3:f8:65:6b:ee:6e:31:f5:
         d1:5f:46:1e:3c:14:a3:24:25:b6:69:76:25:fb:39:5a:e1:58:
         f5:2d:cf:a9:7a:10:d4:e1:ea:f4:10:57:32:54:d6:35:fb:43:
         57:0d:94:f2:91:c2:f7:d6:1c:67:92:9d:6e:41:69:94:2d:18:
         0d:17:d2:9b:06:23:32:c1:ca:96:97:da:f8:b5:e6:95:b1:94:
         00:3c:6b:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:04 2026 by rpki-client