Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137392e302f32342d3234203d3e203239383032.roa
File:                     3139382e3130352e3137392e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          e9q2XknERVvRiGHa9MLVKV9zxjqLfSFFczrDcQU2oIU=
Subject key identifier:   EE:D8:96:E7:8B:FA:EC:54:B8:23:A6:A9:28:C8:CD:23:37:7D:1F:6E
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       50D0276B946B7C3267A4019CC64668801FE380B9
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137392e302f32342d3234203d3e203239383032.roa
Signing time:             Wed 04 Nov 2026 14:54:50 +0000
ROA not before:           Wed 04 Nov 2026 14:49:50 +0000
ROA not after:            Wed 03 Nov 2027 14:54:50 +0000
asID:                     29802
IP address blocks:        198.105.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:d0:27:6b:94:6b:7c:32:67:a4:01:9c:c6:46:68:80:1f:e3:80:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Nov  4 14:49:50 2026 GMT
            Not After : Nov  3 14:54:50 2027 GMT
        Subject: CN=EED896E78BFAEC54B823A6A928C8CD23377D1F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:72:88:2b:e0:9f:95:ae:6d:6f:b2:0b:cf:80:
                    46:c5:07:3b:31:2f:42:0a:02:05:1b:8f:23:a5:56:
                    f6:31:ab:4d:b1:96:22:d1:a1:e9:7c:78:19:63:2c:
                    6f:b7:d5:ce:6f:86:45:91:12:33:39:14:3f:b5:e6:
                    42:b1:08:19:b0:46:61:c9:85:91:45:2b:48:cc:d1:
                    e0:b6:71:9f:98:95:4b:3a:22:f7:10:02:81:0b:a9:
                    17:97:c7:77:c0:c2:d4:ea:3c:9b:45:bf:4a:50:27:
                    60:18:26:93:e9:49:f6:25:f9:7b:27:63:d1:83:93:
                    e6:c0:08:9e:db:c2:ce:7e:4f:d1:21:8b:bd:28:bc:
                    28:e1:ae:94:dd:f9:ad:8e:68:c3:e9:3c:34:e2:78:
                    79:72:5a:68:b3:95:88:34:f8:f9:a0:13:5e:3b:ca:
                    fc:9d:23:bb:da:a6:c6:eb:5f:37:52:46:4f:15:15:
                    68:2a:5e:1a:b0:7c:63:86:8e:41:18:78:3d:e6:db:
                    59:48:90:df:0f:73:0c:1b:22:54:35:d9:0b:b3:ce:
                    02:cb:0c:df:31:36:27:9a:22:ff:92:61:85:73:bd:
                    75:6d:14:05:26:1a:86:2e:4b:ee:45:a9:1d:e8:4b:
                    ec:7b:00:27:fc:fa:0e:16:5f:9f:f2:84:df:35:75:
                    ff:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D8:96:E7:8B:FA:EC:54:B8:23:A6:A9:28:C8:CD:23:37:7D:1F:6E
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137392e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:15:96:09:52:06:cc:4a:91:ce:ae:84:d7:3a:14:25:c3:bc:
         47:56:24:b6:4f:f0:a3:96:e8:e3:53:7e:e1:7d:ca:81:64:b6:
         19:30:0f:80:28:ef:e0:36:ed:e1:c0:8a:fb:c1:02:68:06:aa:
         65:8f:63:e6:d0:0a:e1:b2:2c:a3:41:53:55:26:44:59:a0:15:
         5c:48:ab:95:43:d5:c9:6a:e1:c8:bd:07:86:ff:ef:11:45:8c:
         c0:9e:c1:12:12:b3:66:7a:9e:4a:1f:b4:e9:69:df:77:8d:69:
         1b:01:88:52:b4:c7:5a:bf:1c:d9:aa:93:2f:e3:91:67:21:88:
         c5:ee:64:0a:5d:1d:67:b2:10:10:2b:2d:32:d0:f7:97:72:93:
         c8:c1:a6:ff:d5:c4:e6:f6:39:d5:56:ab:4a:09:52:2b:ba:ac:
         a1:ec:4e:5b:fc:ff:86:d9:ed:6f:ea:6c:e2:c9:d1:19:ac:33:
         0d:b8:c0:e4:5a:03:24:42:cf:65:a3:1a:56:57:3e:4a:cb:d8:
         28:1e:52:80:0c:b5:d6:99:f1:a2:5e:8a:a6:6e:73:81:c4:b9:
         ca:88:bc:f0:82:99:2d:e1:5a:3c:37:c5:2e:da:8f:2a:ad:1a:
         d5:b4:c4:48:4e:fc:14:ac:4b:db:48:07:08:2e:7e:cd:11:16:
         b2:76:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:09:13 2026 by rpki-client