Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32342d3234203d3e203430363736.roa
File:                     3231362e3132322e3132322e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          69TRHxaSwUML40whBTGMHS/gVKudMdJesRQ/Q0esg/0=
Subject key identifier:   DC:B4:2F:25:F2:E0:E0:5C:6C:A1:53:C8:EB:77:82:D5:72:3D:69:55
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       98DAF781639A4A1C28D9FAA8E20434CB7DD417
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32342d3234203d3e203430363736.roa
Signing time:             Fri 03 Jul 2026 08:45:02 +0000
ROA not before:           Fri 03 Jul 2026 08:40:02 +0000
ROA not after:            Fri 02 Jul 2027 08:45:02 +0000
asID:                     40676
IP address blocks:        216.122.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            98:da:f7:81:63:9a:4a:1c:28:d9:fa:a8:e2:04:34:cb:7d:d4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jul  3 08:40:02 2026 GMT
            Not After : Jul  2 08:45:02 2027 GMT
        Subject: CN=DCB42F25F2E0E05C6CA153C8EB7782D5723D6955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bc:4c:03:b7:92:21:6f:44:b8:e6:a3:46:74:
                    38:ac:44:11:2a:a9:0f:d7:93:e8:9e:0f:b4:2a:cf:
                    82:e6:1f:e5:69:02:fb:e7:2d:28:18:fd:2d:c8:4b:
                    f9:5f:6c:72:0a:d5:73:d5:16:23:4b:7e:3e:35:e0:
                    e6:d9:60:cc:51:4a:59:00:8b:56:44:3a:fe:b5:72:
                    8d:39:95:e8:2f:eb:df:16:ed:6d:98:6d:8b:9c:8e:
                    8d:63:9d:49:c3:db:f5:18:46:91:02:15:a9:5a:78:
                    f8:82:63:2b:cb:56:6a:51:39:a8:c9:ab:7b:83:b9:
                    e8:39:f3:00:b9:09:05:39:77:92:12:be:de:f6:23:
                    90:30:d6:9d:40:11:80:b9:e8:8b:05:9b:6d:9c:f6:
                    c1:a2:57:9c:7c:d5:fd:db:91:82:19:af:47:96:05:
                    97:0d:95:cb:33:b6:a2:cb:65:c3:aa:85:d4:51:64:
                    ff:6b:e2:4c:3b:42:18:45:fa:94:0a:9b:1c:1c:7f:
                    10:bc:ab:22:74:50:d5:10:ba:49:8c:67:ed:8f:c9:
                    66:54:ec:2c:8d:4c:cc:af:78:cd:c4:b2:9f:d2:3f:
                    46:a4:f2:d8:56:f7:4d:ef:ae:9b:96:17:db:64:74:
                    a1:ed:a1:16:2e:f3:51:45:7d:86:b0:d3:ae:e5:f3:
                    7e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:B4:2F:25:F2:E0:E0:5C:6C:A1:53:C8:EB:77:82:D5:72:3D:69:55
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:56:91:65:dc:37:f2:7a:bf:95:b6:77:c6:f1:21:a6:42:22:
         a9:a7:f8:44:34:11:1a:d2:6a:7e:a9:f6:b8:0b:bb:d9:cb:5b:
         04:58:be:74:8e:af:dc:2d:49:84:f9:0e:3e:ba:92:e6:ec:65:
         4f:42:8d:bb:b5:a6:f2:f3:f3:a9:48:83:0e:ef:1f:a9:b1:2d:
         0d:72:bf:3e:fb:9b:8c:46:73:43:79:65:61:47:d4:d4:d0:fa:
         bc:23:98:f3:cc:54:f5:82:7c:fb:06:4f:84:ed:5f:96:b9:b4:
         41:97:95:41:00:10:59:6e:5e:88:61:a2:76:c3:7c:85:dd:5b:
         e1:98:7f:df:05:3e:3e:00:fb:d4:74:90:d3:25:bb:14:ab:b5:
         21:b2:ab:e4:03:69:33:56:8b:8f:ae:e8:7d:04:1e:71:5b:ba:
         ae:33:c9:b7:31:11:63:a7:1b:3f:b2:51:62:62:59:97:aa:17:
         61:e5:08:90:36:9f:f6:6f:5b:e6:c6:e5:db:56:4d:ca:66:a9:
         71:21:63:2d:2f:c2:4b:f6:24:9c:21:ac:b1:26:82:6c:b7:97:
         30:61:9e:a4:3a:4f:25:35:d1:bf:73:15:ba:36:2c:c3:f9:78:
         41:27:43:b3:52:4d:f9:48:34:01:9f:64:37:d7:a0:af:d4:33:
         20:59:45:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:18 2026 by rpki-client