Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e203136323736.roa
File:                     3133302e31322e3130322e302f32342d3234203d3e203136323736.roa (raw, json)
Hash identifier:          46AJgZF8bpwgUToK22DH1gfK/Uxd3w+ZtT/gRejlgcc=
Subject key identifier:   FE:5E:1B:BF:28:07:5F:B4:EE:07:D2:39:CD:D8:2E:B2:78:44:46:B6
Certificate issuer:       /CN=a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9
Certificate serial:       3269A375F8E2AB87E2904B401AAE4FC8BA6F448E
Authority key identifier: F9:36:A5:92:1A:43:1C:86:8B:B8:EA:81:0B:82:9F:BC:C1:8C:4B:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e203136323736.roa
Signing time:             Tue 06 Oct 2026 13:56:43 +0000
ROA not before:           Tue 06 Oct 2026 13:51:43 +0000
ROA not after:            Tue 05 Oct 2027 13:56:43 +0000
asID:                     16276
IP address blocks:        130.12.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.crl
                          rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 14:56:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:69:a3:75:f8:e2:ab:87:e2:90:4b:40:1a:ae:4f:c8:ba:6f:44:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9
        Validity
            Not Before: Oct  6 13:51:43 2026 GMT
            Not After : Oct  5 13:56:43 2027 GMT
        Subject: CN=FE5E1BBF28075FB4EE07D239CDD82EB2784446B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f1:25:ff:c6:b2:58:1f:4d:d4:68:b4:e7:8e:
                    ad:8b:d5:1b:e9:f6:7a:1a:67:17:5e:be:b9:c8:66:
                    3e:2b:d0:52:41:00:65:1a:a5:07:5e:0b:28:70:a9:
                    9f:eb:5a:e7:79:10:da:a1:4a:b9:f8:50:cc:7d:93:
                    6f:54:2c:19:07:38:f2:f0:32:95:e2:7d:c4:72:d9:
                    1f:19:6f:88:b7:4e:a5:82:e9:f9:e1:b1:1d:c3:7e:
                    e8:31:ea:42:ec:b2:19:cd:22:72:f5:3f:40:d9:7a:
                    84:53:f7:d8:06:5c:11:5d:26:c7:c1:b1:e1:86:87:
                    df:10:b4:98:06:56:21:f0:ff:7d:21:5b:e7:2a:d2:
                    32:c7:5b:6d:c5:45:16:c6:9d:36:b2:86:5d:1b:2d:
                    18:08:21:99:ca:20:60:9a:5c:0a:56:74:f5:59:27:
                    f7:33:12:05:32:cf:aa:e1:fe:d6:c6:8f:48:a8:ef:
                    40:db:21:78:4d:73:7e:19:11:e9:28:67:0e:de:01:
                    71:2f:35:74:a8:80:2a:0c:28:36:f4:c1:c0:46:e6:
                    a4:0a:96:67:b9:07:a2:ac:0e:be:dc:93:c5:3f:d0:
                    54:4f:3a:30:e0:9a:dd:a8:15:f0:b5:b4:c0:ae:eb:
                    a8:c0:52:bc:d4:ad:6c:a8:4a:09:19:fe:4e:24:0b:
                    0f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5E:1B:BF:28:07:5F:B4:EE:07:D2:39:CD:D8:2E:B2:78:44:46:B6
            X509v3 Authority Key Identifier:
                keyid:F9:36:A5:92:1A:43:1C:86:8B:B8:EA:81:0B:82:9F:BC:C1:8C:4B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e203136323736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:e1:c8:5b:f1:12:c2:5a:d2:4a:51:61:75:c5:eb:a0:ed:31:
         88:23:02:c5:f5:ff:33:d3:aa:7c:14:aa:f1:b3:d3:98:5e:35:
         e8:d3:21:59:52:96:37:58:32:af:a4:a6:7c:9c:2c:95:4d:70:
         4e:db:75:51:a0:41:75:d7:c9:08:d6:ba:d8:de:b4:cb:2f:56:
         57:8c:2a:45:1b:b7:ef:8c:a0:ac:63:92:45:20:bf:3a:bc:9b:
         3d:64:1c:4c:79:c2:6a:7e:c3:17:f4:40:12:fe:bb:a1:15:a6:
         b4:4d:d8:b1:c2:d9:db:b4:88:59:d3:14:f5:af:8c:3e:83:d8:
         98:f7:7d:8d:27:c9:73:63:6a:1a:29:b3:e7:16:90:90:a3:6f:
         60:3b:e6:82:47:b7:a4:00:28:7b:fb:45:b7:cc:fb:91:43:f9:
         b1:76:23:bc:08:d3:ef:a7:5f:7c:5f:62:27:08:9c:72:25:bf:
         7f:56:14:68:2d:d6:47:4b:73:a5:8f:9e:dc:b0:c3:d9:9b:10:
         23:03:82:70:a4:4e:de:31:c2:d3:0b:11:fc:2d:98:c5:6f:ba:
         39:9c:a2:65:91:47:3c:87:f2:31:c2:82:25:fc:dd:f3:ef:6e:
         70:64:58:b3:51:3a:06:bf:15:3f:f7:56:08:ac:4e:11:1b:72:
         57:4b:d2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 02:16:45 2026 by rpki-client