Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32332d3234203d3e203133333335.roa
File:                     3139382e3137372e35362e302f32332d3234203d3e203133333335.roa (raw, json)
Hash identifier:          4YCDc3//1sAAqcbVMDUbtoUjcWPD3NnRXgBiVN5o5Bk=
Subject key identifier:   1D:AC:F3:FF:6E:15:BF:8C:53:C4:96:F8:8A:5B:2D:9D:72:53:D5:3C
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       2780D25F02DA752E74104D788EA951621EED6548
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32332d3234203d3e203133333335.roa
Signing time:             Tue 24 Mar 2026 20:35:54 +0000
ROA not before:           Tue 24 Mar 2026 20:30:54 +0000
ROA not after:            Tue 23 Mar 2027 20:35:54 +0000
asID:                     13335
IP address blocks:        198.177.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:80:d2:5f:02:da:75:2e:74:10:4d:78:8e:a9:51:62:1e:ed:65:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Mar 24 20:30:54 2026 GMT
            Not After : Mar 23 20:35:54 2027 GMT
        Subject: CN=1DACF3FF6E15BF8C53C496F88A5B2D9D7253D53C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:07:3a:ed:39:e3:5a:0d:42:c7:c7:72:6b:cb:
                    39:22:3d:c9:b5:be:4e:4d:c5:26:2b:ab:c3:21:6a:
                    12:2a:a6:01:e6:c3:93:6f:92:2d:6c:4f:4a:a2:be:
                    76:08:f0:c5:68:a3:b3:f2:be:83:d3:a2:91:c7:0a:
                    ea:a7:9d:11:36:a7:d9:38:38:8d:f4:77:ec:10:5b:
                    9e:3d:8f:17:6f:4f:fb:92:15:4e:42:2b:ba:9d:9f:
                    c7:cc:63:81:97:c8:b7:2d:79:5a:79:8a:f7:af:32:
                    62:bf:2a:0f:87:f4:c4:af:00:39:04:bc:ed:b6:6c:
                    62:28:1d:17:d9:5d:ee:f5:61:cf:15:91:8d:99:24:
                    52:45:4c:5a:a7:54:df:84:b7:b8:75:ee:32:b7:67:
                    29:58:64:fe:b1:67:17:47:c7:89:e1:0f:ee:40:b7:
                    7b:2a:7c:d8:6f:e1:92:93:0a:32:c7:90:d3:a1:f5:
                    69:ba:f4:47:46:bb:a9:05:d1:8e:e5:28:89:83:05:
                    7d:c8:cf:33:6a:4e:46:1d:b7:02:37:b6:26:4c:10:
                    5a:cd:05:26:60:de:b9:18:d2:3d:0d:26:56:d3:63:
                    ef:15:06:b3:d1:a7:d9:7b:6d:12:67:09:d3:e1:b3:
                    a8:aa:de:44:70:a8:0c:cd:21:e5:3d:76:8d:d2:20:
                    08:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:AC:F3:FF:6E:15:BF:8C:53:C4:96:F8:8A:5B:2D:9D:72:53:D5:3C
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32332d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:c5:13:f1:05:79:4e:2e:14:3e:85:73:6d:10:53:88:98:ee:
         1e:2f:6c:5a:10:03:b3:e9:c8:b5:be:fd:91:74:5f:dc:30:59:
         3e:cc:b4:ce:c8:15:b9:a6:bf:35:4c:0b:e8:d3:5a:f9:1d:1d:
         ce:b9:31:7c:6d:42:13:8d:2e:fa:c2:fc:2f:1d:2b:c2:9e:33:
         c3:bf:c3:f7:a1:d3:cb:55:9b:b1:06:73:e1:5d:b0:ed:83:d7:
         12:20:e9:50:64:9f:05:11:31:27:bd:c4:53:19:87:b0:77:42:
         f2:fd:99:59:f9:fc:80:25:c0:6b:93:3d:7d:e2:c3:9c:5d:e9:
         a5:10:fe:f4:50:a6:71:92:f8:eb:fb:7e:d0:d0:4c:15:c0:d8:
         62:b3:a2:a1:05:a1:19:82:fb:63:f1:24:d4:8c:04:f0:ba:64:
         a4:77:d7:eb:f5:18:f7:a8:70:c5:92:ae:51:fa:fe:55:f2:7e:
         08:8a:84:e6:e1:57:b3:b1:90:44:6b:56:63:29:6f:ae:75:f0:
         5f:ae:a5:76:52:81:8d:36:78:9a:e4:3a:54:cd:2f:c3:b1:38:
         d4:d5:69:0d:ba:71:02:08:38:0b:03:67:c3:dd:cc:cd:34:e5:
         e9:77:e4:a1:5d:33:9f:eb:75:bd:d9:a4:f0:dd:75:50:88:85:
         c6:34:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:13:27 2026 by rpki-client