Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/40b86b6237fc48b2b63e68abd7be61cd/0/3130372e362e38302e302f32332d3233203d3e20343032383532.roa
File:                     3130372e362e38302e302f32332d3233203d3e20343032383532.roa (raw, json)
Hash identifier:          Gt9gslRo4JSKvuq8u4yXEnZ8SWvkhXuShbYwAw4a/6A=
Subject key identifier:   16:7E:81:BF:18:04:5A:DB:79:FC:8C:56:DF:C0:CD:D8:7F:A6:77:41
Certificate issuer:       /CN=e7cb45c79a28ebdd57e9be9ca98521b34130c5167db3116aed
Certificate serial:       392B48AE1103954F9AEFD4C324B7349170C44BFA
Authority key identifier: 74:DC:C6:AE:F6:A8:53:47:7E:48:64:3E:A3:75:1C:BC:68:30:02:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/841007b2-6761-40e4-a288-0057971b5449/e7cb45c79a28ebdd57e9be9ca98521b34130c5167db3116aed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/40b86b6237fc48b2b63e68abd7be61cd/0/3130372e362e38302e302f32332d3233203d3e20343032383532.roa
Signing time:             Tue 27 Oct 2026 12:20:01 +0000
ROA not before:           Tue 27 Oct 2026 12:15:01 +0000
ROA not after:            Tue 26 Oct 2027 12:20:01 +0000
asID:                     402852
IP address blocks:        107.6.80.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/40b86b6237fc48b2b63e68abd7be61cd/0/74DCC6AEF6A853477E48643EA3751CBC68300233.crl
                          rsync://rpki-rps.arin.net/repository/40b86b6237fc48b2b63e68abd7be61cd/0/74DCC6AEF6A853477E48643EA3751CBC68300233.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/841007b2-6761-40e4-a288-0057971b5449/e7cb45c79a28ebdd57e9be9ca98521b34130c5167db3116aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/841007b2-6761-40e4-a288-0057971b5449/841007b2-6761-40e4-a288-0057971b5449.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/841007b2-6761-40e4-a288-0057971b5449/841007b2-6761-40e4-a288-0057971b5449.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/841007b2-6761-40e4-a288-0057971b5449.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 04 Nov 2026 17:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:2b:48:ae:11:03:95:4f:9a:ef:d4:c3:24:b7:34:91:70:c4:4b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cb45c79a28ebdd57e9be9ca98521b34130c5167db3116aed
        Validity
            Not Before: Oct 27 12:15:01 2026 GMT
            Not After : Oct 26 12:20:01 2027 GMT
        Subject: CN=167E81BF18045ADB79FC8C56DFC0CDD87FA67741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:29:73:b2:6d:b9:db:2c:cb:1b:0c:f8:5b:fa:
                    87:a0:33:c3:a6:b9:3f:f9:89:32:e7:ea:78:f8:8e:
                    4d:b3:c1:3d:eb:cd:21:87:25:6f:7d:ab:54:48:a5:
                    e9:45:62:ff:56:92:d2:c0:6f:17:ef:5d:5f:a8:98:
                    ea:55:18:f6:1c:2f:0d:45:34:57:0f:b5:d2:47:4a:
                    33:1d:aa:be:a0:63:53:43:38:a7:b7:a4:c2:f6:06:
                    c5:d8:07:0f:aa:ac:46:ee:49:3b:74:05:65:2c:d4:
                    a2:39:70:65:d1:18:8f:bd:e9:27:49:1e:99:ea:5c:
                    42:14:ec:88:39:95:ef:36:26:68:13:16:ac:be:44:
                    40:b1:ac:8e:ea:0d:bc:61:04:cc:7e:e2:6d:26:60:
                    d5:08:f5:57:02:d0:cc:00:ae:23:66:f3:3c:dc:f7:
                    33:49:a6:35:cb:02:b6:f1:04:82:20:27:d4:07:49:
                    6e:2a:97:64:59:6d:7c:8b:32:8e:97:f3:c5:8b:6c:
                    74:99:94:21:cc:da:73:11:4b:66:ee:96:dd:22:51:
                    9a:c0:38:82:b3:29:a5:73:15:db:ce:c8:9c:b4:68:
                    32:ed:9a:f6:44:1c:19:3a:ab:0a:8e:33:d1:87:f4:
                    d5:a3:25:a4:29:c3:9c:af:15:98:3c:e5:37:bb:cb:
                    cd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7E:81:BF:18:04:5A:DB:79:FC:8C:56:DF:C0:CD:D8:7F:A6:77:41
            X509v3 Authority Key Identifier:
                keyid:74:DC:C6:AE:F6:A8:53:47:7E:48:64:3E:A3:75:1C:BC:68:30:02:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/40b86b6237fc48b2b63e68abd7be61cd/0/74DCC6AEF6A853477E48643EA3751CBC68300233.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/841007b2-6761-40e4-a288-0057971b5449/e7cb45c79a28ebdd57e9be9ca98521b34130c5167db3116aed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/40b86b6237fc48b2b63e68abd7be61cd/0/3130372e362e38302e302f32332d3233203d3e20343032383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.6.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0a:a9:82:a7:03:ce:ef:04:dd:26:ea:50:dc:df:9d:c8:27:98:
         36:20:97:fe:4f:96:da:d6:75:f8:44:a2:a8:e8:08:62:73:ab:
         a9:78:ff:dc:2b:46:f3:1e:71:ff:3c:21:6c:36:60:2e:81:0c:
         af:e4:80:62:ce:93:ef:b7:b2:f5:0f:52:39:08:ee:5a:85:fe:
         0d:94:6b:60:30:cf:3f:02:86:f3:2b:28:74:3f:1b:46:35:62:
         3d:3a:6d:b2:34:ea:a3:be:25:0b:21:50:19:9d:d0:83:0d:fb:
         e4:0d:f2:82:09:84:c9:5f:00:d9:9b:6a:ed:6f:47:6b:2e:ea:
         2a:98:bd:a9:33:6c:b4:51:ec:59:91:27:6c:1f:b5:fc:de:d9:
         3a:a3:ed:e7:1b:9c:51:fc:a8:4b:98:5e:b4:0e:43:4f:4a:b8:
         7b:12:17:31:a9:da:2e:b7:f2:71:69:7c:12:7e:74:fe:59:0d:
         16:c3:92:d2:4c:b8:fa:d4:47:6d:98:ca:45:24:7c:08:2e:9b:
         dc:e2:09:ae:c7:31:97:ef:96:f4:d6:08:df:09:ef:93:5a:94:
         b1:72:95:70:12:e3:2f:80:84:9e:82:a0:1a:f7:8c:ae:b2:cc:
         54:83:4d:43:6f:f4:6a:b7:b9:5d:10:ff:f0:a0:28:63:f3:ff:
         04:80:69:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 11:21:18 2026 by rpki-client