Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32342e302f32312d3234203d3e203534303034.roa
File:                     3139322e302e32342e302f32312d3234203d3e203534303034.roa (raw, json)
Hash identifier:          nVPm1i96oBZJk+XiQmwQ+eAc8citQ8qH/lV+UWjBz+g=
Subject key identifier:   B3:C3:7D:01:81:AA:33:AA:2B:8E:D8:AF:81:93:91:9F:5C:2B:B7:6A
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       7389E3B44E1E0EDCF8A106F242F1E1561F51E51D
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32342e302f32312d3234203d3e203534303034.roa
Signing time:             Tue 10 Mar 2026 07:35:54 +0000
ROA not before:           Tue 10 Mar 2026 07:30:54 +0000
ROA not after:            Tue 09 Mar 2027 07:35:54 +0000
asID:                     54004
IP address blocks:        192.0.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:89:e3:b4:4e:1e:0e:dc:f8:a1:06:f2:42:f1:e1:56:1f:51:e5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Mar 10 07:30:54 2026 GMT
            Not After : Mar  9 07:35:54 2027 GMT
        Subject: CN=B3C37D0181AA33AA2B8ED8AF8193919F5C2BB76A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:7d:19:d3:4b:5e:94:17:0d:99:c9:38:50:fa:
                    d9:ae:86:87:34:68:80:63:4f:74:74:b6:59:4c:86:
                    cb:e1:15:81:5e:0f:26:5f:a7:a6:0a:70:7e:5b:37:
                    fb:ff:ba:4f:cf:23:ea:31:7b:4d:e7:81:54:92:ff:
                    63:79:7d:f1:d4:a3:fb:e9:46:55:44:c0:3d:07:96:
                    ec:4c:95:c5:5b:22:b7:8e:38:f7:16:09:b7:a2:53:
                    81:66:88:d1:1d:32:ac:54:1f:11:46:74:69:13:bc:
                    a5:3a:27:f6:f7:4f:27:c1:76:f5:bd:dd:10:dd:44:
                    6a:28:80:10:bb:1b:98:33:61:b3:7e:4c:86:7d:01:
                    af:9f:9e:ab:2c:86:dd:31:24:62:2e:ae:86:04:ca:
                    90:9b:e5:f8:4a:76:0a:4e:ce:eb:bd:37:41:6a:87:
                    fa:bc:36:d4:b3:36:4d:37:ae:22:39:34:b2:b4:c9:
                    1e:80:6c:bc:d6:e8:e0:d4:6e:52:d4:d3:7d:54:e8:
                    ae:e6:9c:92:3f:b0:0f:f0:5e:63:0c:6c:79:6f:5b:
                    b1:a1:14:54:ef:86:b3:f0:51:57:81:86:e8:12:e4:
                    5d:a6:e8:ff:7d:34:ea:27:c4:53:0f:ca:3c:0d:69:
                    1b:46:c2:9e:2f:03:b2:7b:e5:61:1d:ca:b5:6d:8b:
                    00:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C3:7D:01:81:AA:33:AA:2B:8E:D8:AF:81:93:91:9F:5C:2B:B7:6A
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32342e302f32312d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         04:d3:42:4b:84:f3:1b:df:9c:00:3f:52:86:b0:18:96:cb:17:
         fb:e2:47:dc:db:d9:60:63:54:e8:cc:6f:f5:44:6f:c5:4f:14:
         9f:8c:b2:29:19:d8:fc:50:42:ff:d9:61:a0:16:4d:7f:c6:eb:
         92:a4:13:58:9f:b2:58:03:80:5f:36:96:62:4a:d8:eb:3d:6b:
         6a:73:28:ed:0d:bf:34:b7:cf:b1:6a:b5:50:f0:a7:5b:d4:c2:
         0b:f6:33:ad:8e:b1:27:0c:91:bb:f6:7f:86:09:de:bb:81:9b:
         4d:96:ac:d4:a2:ed:d6:97:08:b1:7e:d2:57:d3:d7:b8:8b:b5:
         1a:4b:e4:d2:57:d3:04:73:ab:8b:54:fb:d5:29:a8:2d:49:bf:
         e8:14:a6:33:93:9f:54:0c:bb:cf:8f:f8:77:e3:8d:1c:da:3e:
         e4:11:57:b8:df:d6:a7:33:5c:20:89:43:99:f2:0b:e0:ef:e4:
         24:12:35:91:f4:52:c9:4b:5d:e8:23:a1:b0:e8:73:a5:96:22:
         3d:9d:92:1f:47:3d:86:aa:d1:37:e3:af:6a:3b:83:c4:47:0e:
         74:61:25:6e:23:75:51:93:85:e7:68:a3:8b:a1:76:ca:03:e9:
         46:fd:40:40:32:ff:d5:31:41:b1:9d:76:ec:81:d2:ab:ec:97:
         44:08:29:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:10:06 2026 by rpki-client