Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20313430313835.roa
File:                     3231362e3234372e3131312e302f32342d3234203d3e20313430313835.roa (raw, json)
Hash identifier:          /eiYIibg/22QGDz9tTXDnWaBUnaye5JTY8yFuGSEneA=
Subject key identifier:   3C:6A:EA:59:97:ED:30:AD:C4:F7:25:5A:78:A7:41:1B:CE:DB:A8:B7
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       7389F3AD196B3A4CFAB9A5F2FA7805A02415FC46
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20313430313835.roa
Signing time:             Sun 05 Jul 2026 07:08:17 +0000
ROA not before:           Sun 05 Jul 2026 07:03:17 +0000
ROA not after:            Sun 04 Jul 2027 07:08:17 +0000
asID:                     140185
IP address blocks:        216.247.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:89:f3:ad:19:6b:3a:4c:fa:b9:a5:f2:fa:78:05:a0:24:15:fc:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jul  5 07:03:17 2026 GMT
            Not After : Jul  4 07:08:17 2027 GMT
        Subject: CN=3C6AEA5997ED30ADC4F7255A78A7411BCEDBA8B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d0:0d:98:99:8c:60:f9:32:eb:e6:49:ea:69:
                    7a:f1:67:89:13:4d:34:25:6f:6e:30:51:47:f3:25:
                    d7:e4:77:b0:8d:07:13:4d:41:ef:65:0f:c9:dc:cd:
                    9c:8f:8a:6d:f6:32:8d:72:97:ea:e4:ff:6e:84:f5:
                    d7:0a:e5:fc:37:63:9c:25:d6:38:66:1f:8f:10:52:
                    47:b3:1c:6c:59:89:8c:9e:1a:77:cf:50:82:f6:92:
                    19:a6:84:98:80:67:b4:e0:aa:cd:8e:6e:c9:65:da:
                    6d:0e:72:ab:71:bb:7c:39:35:ba:33:73:11:11:04:
                    af:5e:08:a9:a7:ea:15:34:dc:3f:ad:9c:19:52:3b:
                    03:57:54:69:4c:17:71:18:21:59:19:a3:24:8d:ae:
                    85:1f:e6:22:6d:4c:9d:a2:54:1f:10:6f:bd:bc:bc:
                    1d:83:5e:c3:fc:36:4e:c6:72:93:a7:c8:7c:46:a0:
                    a0:fd:c1:54:f2:8d:22:cf:63:aa:9a:1d:9f:7d:6e:
                    c9:28:55:ce:63:2f:7e:fd:a7:6e:3a:f2:93:42:3d:
                    58:c3:70:e3:b1:2d:a8:b4:85:7b:34:37:68:ef:7c:
                    42:b2:ff:aa:55:5c:a0:f3:7c:8e:05:4f:20:22:62:
                    bf:06:36:36:16:75:de:7d:63:d8:66:57:07:bb:5a:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:6A:EA:59:97:ED:30:AD:C4:F7:25:5A:78:A7:41:1B:CE:DB:A8:B7
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e20313430313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:96:2f:ab:2c:ea:51:79:8a:0a:f1:a1:ae:fa:0e:eb:aa:de:
         0c:ef:39:d4:23:16:8d:7c:67:8b:dc:00:5f:ea:a4:6e:90:05:
         8b:86:17:f4:cc:75:2c:70:0a:8a:6d:61:07:f0:1e:bb:de:0e:
         54:1d:70:a9:30:0b:1b:b3:ba:52:f6:e4:ea:a3:b9:77:d5:c9:
         d6:73:ba:62:95:e3:8b:0a:d8:2f:2e:ba:02:03:64:f9:17:82:
         65:27:97:cb:c9:d8:d7:e2:ee:53:fb:38:e4:c4:c1:d1:5d:e6:
         45:4a:4d:d7:ac:66:a7:6d:61:f3:34:90:53:60:c2:89:bc:ba:
         7a:4b:eb:64:97:72:e9:f3:72:06:5d:c7:a4:70:e5:9b:74:36:
         83:0d:96:4c:77:80:32:5c:c8:ad:f4:44:f3:e7:93:51:47:83:
         7e:a0:f3:6f:83:1d:ec:c2:18:26:13:55:bd:97:e8:f0:68:e4:
         f8:89:7b:c0:ed:dd:8a:d0:31:17:dd:92:c7:89:fe:3f:9a:b7:
         14:b6:2c:68:9b:0f:6d:9a:43:86:ff:fd:a1:16:7b:4d:b4:c4:
         12:25:3b:1f:80:9d:d7:c3:e1:d7:49:e3:a2:2c:3c:8a:10:e3:
         47:59:96:bb:a2:d0:94:d5:25:e8:1b:0a:fb:cc:4c:3a:21:45:
         cc:a3:e1:25
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUc4nzrRlrOkz6uaXy+ngFoCQV/EYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjYwNzA1MDcwMzE3WhcNMjcwNzA0MDcwODE3
WjAzMTEwLwYDVQQDEygzQzZBRUE1OTk3RUQzMEFEQzRGNzI1NUE3OEE3NDExQkNF
REJBOEI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndANmJmMYPky
6+ZJ6ml68WeJE000JW9uMFFH8yXX5HewjQcTTUHvZQ/J3M2cj4pt9jKNcpfq5P9u
hPXXCuX8N2OcJdY4Zh+PEFJHsxxsWYmMnhp3z1CC9pIZpoSYgGe04KrNjm7JZdpt
DnKrcbt8OTW6M3MREQSvXgipp+oVNNw/rZwZUjsDV1RpTBdxGCFZGaMkja6FH+Yi
bUydolQfEG+9vLwdg17D/DZOxnKTp8h8RqCg/cFU8o0iz2Oqmh2ffW7JKFXOYy9+
/aduOvKTQj1Yw3DjsS2otIV7NDdo73xCsv+qVVyg83yOBU8gImK/BjY2FnXefWPY
ZlcHu1qlnQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFDxq6lmX7TCtxPclWninQRvO
26i3MB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzMTMxMzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM0MzAzMTM4MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADY928wDQYJKoZIhvcN
AQELBQADggEBACyWL6ss6lF5igrxoa76Duuq3gzvOdQjFo18Z4vcAF/qpG6QBYuG
F/TMdSxwCoptYQfwHrveDlQdcKkwCxuzulL25OqjuXfVydZzumKV44sK2C8uugID
ZPkXgmUnl8vJ2Nfi7lP7OOTEwdFd5kVKTdesZqdtYfM0kFNgwom8unpL62SXcunz
cgZdx6Rw5Zt0NoMNlkx3gDJcyK30RPPnk1FHg36g82+DHezCGCYTVb2X6PBo5PiJ
e8Dt3YrQMRfdkseJ/j+atxS2LGibD22aQ4b//aEWe020xBIlOx+AndfD4ddJ46Is
PIoQ40dZlrui0JTVJegbCvvMTDohRcyj4SU=
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:41 2026 by rpki-client