Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132332e302f32342d3234203d3e203430363736.roa
File:                     3231362e3132322e3132332e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          J07gp8a1viCEGOwpGBaaniWpMUUbUzMhdZLIPqup1ZM=
Subject key identifier:   A8:7D:A2:22:0D:4C:69:56:2B:09:BD:62:57:9D:B6:E6:7B:3D:B3:BE
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       1C5E245D35194050C7861C1978DF32373A50563C
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132332e302f32342d3234203d3e203430363736.roa
Signing time:             Sat 04 Jul 2026 01:45:22 +0000
ROA not before:           Sat 04 Jul 2026 01:40:22 +0000
ROA not after:            Sat 03 Jul 2027 01:45:22 +0000
asID:                     40676
IP address blocks:        216.122.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:5e:24:5d:35:19:40:50:c7:86:1c:19:78:df:32:37:3a:50:56:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jul  4 01:40:22 2026 GMT
            Not After : Jul  3 01:45:22 2027 GMT
        Subject: CN=A87DA2220D4C69562B09BD62579DB6E67B3DB3BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:ff:d8:92:71:5a:e1:42:01:00:3e:1b:d4:
                    a7:0f:c6:c8:2f:05:75:21:71:76:6f:88:27:05:73:
                    40:94:7c:ee:78:4b:20:68:df:af:a6:1a:eb:13:ea:
                    b7:5b:ba:06:d1:b2:2a:d9:6b:db:74:a9:ae:7c:91:
                    b4:dc:97:d8:95:30:8c:0f:77:eb:24:b7:ec:e7:5a:
                    48:ec:4d:d5:58:a8:6e:a3:96:da:c9:95:52:22:f4:
                    6b:7b:39:d3:43:a2:a0:14:40:f7:98:1f:ef:cc:c5:
                    c3:17:40:bd:f8:1b:1b:aa:13:d5:89:60:77:98:b9:
                    1d:bd:3f:0b:5d:24:87:4f:85:cd:96:61:d0:d3:89:
                    6f:56:42:b6:44:86:4f:45:ab:8e:de:63:90:f3:40:
                    a3:6f:5c:68:74:94:33:97:4b:1a:3a:51:0b:a3:ff:
                    55:19:9d:5d:d3:36:ec:7f:d6:e1:12:9a:46:8b:8d:
                    76:29:43:94:c8:be:17:09:42:bc:23:08:15:f1:75:
                    af:19:67:fa:c5:3c:fb:f3:7d:d9:0b:af:4c:db:2c:
                    18:fe:58:52:e9:08:7b:1a:61:30:0d:1d:b0:de:31:
                    59:25:01:da:0c:ac:6e:9d:66:b6:6f:65:8e:d2:85:
                    5d:3e:c2:52:f4:ce:bf:76:50:f6:98:07:c4:19:4f:
                    74:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7D:A2:22:0D:4C:69:56:2B:09:BD:62:57:9D:B6:E6:7B:3D:B3:BE
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132332e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:18:97:05:7a:80:8d:fc:11:4c:d2:94:86:f2:31:3b:02:35:
         a0:ba:cd:e0:2d:8a:0f:68:06:da:95:70:14:5d:da:96:76:99:
         29:b7:df:ac:c6:91:70:05:2b:5c:1d:79:b3:75:35:9d:69:ff:
         fa:98:ad:96:53:ae:8e:d4:46:08:c5:a3:74:10:9d:82:ea:3f:
         63:0d:1d:0f:b9:de:2c:d5:28:ba:73:fb:02:18:a8:da:ea:17:
         f0:0e:66:7d:cf:68:20:5d:92:d4:d0:cd:59:05:72:12:90:82:
         f7:c8:e4:31:9a:99:92:88:99:ca:85:f8:a8:f3:eb:d8:68:27:
         11:75:71:2c:a0:2f:da:75:f5:54:aa:2b:7e:9f:be:62:6d:d8:
         6b:49:88:21:c3:03:05:4b:17:fa:f9:ff:f8:d4:cc:40:5d:39:
         88:a5:66:72:cb:94:67:0b:f3:69:83:93:6a:c4:9e:ba:92:1c:
         a5:4d:f0:67:e2:76:4b:67:81:0f:f3:1b:b7:38:4d:02:55:04:
         09:ab:24:3c:7d:0c:26:48:a9:24:e8:f0:7d:bf:84:62:e4:9b:
         65:08:b0:39:66:92:76:09:4a:ac:02:78:4c:3c:6a:65:3e:46:
         f1:16:2a:ce:8b:17:24:34:9a:42:7a:70:aa:8a:88:3a:49:3b:
         e5:a6:92:3f
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUHF4kXTUZQFDHhhwZeN8yNzpQVjwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjYwNzA0MDE0MDIyWhcNMjcwNzAzMDE0NTIy
WjAzMTEwLwYDVQQDEyhBODdEQTIyMjBENEM2OTU2MkIwOUJENjI1NzlEQjZFNjdC
M0RCM0JFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmO7/2JJxWuFC
AQA+G9SnD8bILwV1IXF2b4gnBXNAlHzueEsgaN+vphrrE+q3W7oG0bIq2WvbdKmu
fJG03JfYlTCMD3frJLfs51pI7E3VWKhuo5bayZVSIvRreznTQ6KgFED3mB/vzMXD
F0C9+BsbqhPViWB3mLkdvT8LXSSHT4XNlmHQ04lvVkK2RIZPRauO3mOQ80Cjb1xo
dJQzl0saOlELo/9VGZ1d0zbsf9bhEppGi412KUOUyL4XCUK8IwgV8XWvGWf6xTz7
833ZC69M2ywY/lhS6Qh7GmEwDR2w3jFZJQHaDKxunWa2b2WO0oVdPsJS9M6/dlD2
mAfEGU90+wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKh9oiINTGlWKwm9YledtuZ7
PbO+MB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzEzMjMyMmUzMTMyMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDMwMzYzNzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Hp7MA0GCSqGSIb3DQEB
CwUAA4IBAQBYGJcFeoCN/BFM0pSG8jE7AjWgus3gLYoPaAbalXAUXdqWdpkpt9+s
xpFwBStcHXmzdTWdaf/6mK2WU66O1EYIxaN0EJ2C6j9jDR0Pud4s1Si6c/sCGKja
6hfwDmZ9z2ggXZLU0M1ZBXISkIL3yOQxmpmSiJnKhfio8+vYaCcRdXEsoC/adfVU
qit+n75ibdhrSYghwwMFSxf6+f/41MxAXTmIpWZyy5RnC/Npg5NqxJ66khylTfBn
4nZLZ4EP8xu3OE0CVQQJqyQ8fQwmSKkk6PB9v4Ri5JtlCLA5ZpJ2CUqsAnhMPGpl
PkbxFirOixckNJpCenCqiog6STvlppI/
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:19 2026 by rpki-client