Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/3133362e3137352e39322e302f32342d3234203d3e20333938393033.roa
File:                     3133362e3137352e39322e302f32342d3234203d3e20333938393033.roa (raw, json)
Hash identifier:          yoW5m1OBX6aBIkjIL8BzJEbb/1yFfCDDOsMt6MmJg20=
Subject key identifier:   6E:AC:EF:C5:EB:BB:39:80:53:61:73:5D:66:AC:62:37:DB:3D:FE:D6
Certificate issuer:       /CN=4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc
Certificate serial:       56BD318A3434FD9C432A3C70EB5828CEEF1E3ED5
Authority key identifier: 93:86:DF:13:4F:B2:7C:DF:B7:72:42:D4:13:9D:59:39:92:44:07:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/3133362e3137352e39322e302f32342d3234203d3e20333938393033.roa
Signing time:             Sun 07 Jun 2026 23:30:31 +0000
ROA not before:           Sun 07 Jun 2026 23:25:31 +0000
ROA not after:            Sun 06 Jun 2027 23:30:31 +0000
asID:                     398903
IP address blocks:        136.175.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.crl
                          rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 10 Jun 2026 12:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:bd:31:8a:34:34:fd:9c:43:2a:3c:70:eb:58:28:ce:ef:1e:3e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc
        Validity
            Not Before: Jun  7 23:25:31 2026 GMT
            Not After : Jun  6 23:30:31 2027 GMT
        Subject: CN=6EACEFC5EBBB39805361735D66AC6237DB3DFED6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f4:2f:d3:61:01:2f:99:37:23:9b:08:c4:27:
                    7c:0b:50:fa:6e:55:e7:9f:7b:8c:4e:66:e1:6c:0c:
                    a8:ce:5c:95:90:ee:54:3c:3b:2c:ae:43:40:ae:30:
                    96:48:62:22:da:9b:47:64:8f:2c:9f:28:5b:35:69:
                    70:55:76:c2:6a:63:72:bd:7c:03:c6:4d:21:f9:64:
                    ca:ba:37:d9:93:52:06:a5:e2:79:c5:06:0d:4d:45:
                    32:ec:08:54:7a:8a:4f:9a:c9:cd:fc:28:ec:29:6e:
                    53:5b:6f:6f:fd:7f:b3:4f:c1:71:2a:40:54:c5:43:
                    55:96:03:12:ef:90:e6:d2:b3:69:3e:a0:c0:46:05:
                    3e:18:7f:9a:fb:33:e8:0b:51:5c:57:84:71:0c:f2:
                    f8:6e:63:6e:65:66:40:ce:ac:77:b3:d4:08:e4:b2:
                    7b:54:10:52:d8:b1:d8:88:9f:84:51:00:f2:44:36:
                    cb:54:22:fa:72:88:70:68:fd:64:3c:62:2b:55:ab:
                    aa:21:04:d2:b5:0c:3b:9c:1a:c8:6c:be:91:76:65:
                    26:ae:d3:20:14:c3:be:2b:16:2e:f3:cd:ef:46:54:
                    70:d1:35:f5:19:2a:57:94:bf:6b:fa:0f:99:f2:d6:
                    a3:bf:93:0a:59:5f:0d:be:7c:86:af:33:01:1f:11:
                    43:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AC:EF:C5:EB:BB:39:80:53:61:73:5D:66:AC:62:37:DB:3D:FE:D6
            X509v3 Authority Key Identifier:
                keyid:93:86:DF:13:4F:B2:7C:DF:B7:72:42:D4:13:9D:59:39:92:44:07:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/3133362e3137352e39322e302f32342d3234203d3e20333938393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:ef:82:f7:8f:14:82:98:b1:c9:cd:9c:b1:8c:15:db:0e:e3:
         60:62:9e:c2:73:f5:89:4d:2d:63:97:c4:ce:f6:68:9c:2f:68:
         9d:fe:97:4f:62:52:6c:f8:da:93:b4:95:3c:c9:11:6c:f6:18:
         83:8f:22:66:5f:16:54:30:3b:a6:3f:2b:06:43:61:24:e9:31:
         42:bc:04:f8:0b:ba:7c:28:96:bd:2a:2b:c4:2c:b5:1b:b9:c5:
         b6:fa:19:aa:91:12:12:3e:e1:1b:2f:eb:52:5a:4d:60:c8:42:
         7d:be:4a:af:4e:6d:f0:0a:12:62:ff:84:64:c8:b1:0d:a3:30:
         07:54:2e:15:af:d7:53:de:a4:e4:72:8e:ab:6d:5a:8d:d7:d1:
         89:5f:27:f2:7d:11:a8:74:eb:34:1d:2f:7c:5e:eb:4b:92:5a:
         4d:45:d6:73:44:20:10:d7:77:fa:40:13:02:6f:d2:aa:63:8f:
         7c:ce:58:39:65:40:2b:77:df:84:66:c5:87:ce:e0:5f:dd:a2:
         5b:b0:a3:c3:17:05:f9:26:e8:12:3d:35:a3:4b:9b:50:16:ed:
         d2:5d:a8:43:ce:20:dc:32:9a:2c:d8:a1:eb:0f:c1:b1:5f:1d:
         5a:4e:b3:35:44:11:c7:02:f2:a0:71:d0:e2:46:68:71:81:87:
         76:f0:2d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 05:13:07 2026 by rpki-client