Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31332e302f32342d3234203d3e20313432323430.roa
File:                     3136322e3232312e31332e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier:          Fu3qtSJaBU5FC3zyb8CcT/ZQZmQwiLcWyLsYXa41H3Q=
Subject key identifier:   DA:EF:7F:9C:28:16:EE:5A:4B:E9:08:ED:5B:DB:22:11:C7:06:2D:49
Certificate issuer:       /CN=9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e
Certificate serial:       6ADE877E1D6BB15894045E3C7156A5B7E49C41E4
Authority key identifier: EE:2E:BA:7A:2F:07:A4:74:7A:75:EB:84:07:67:ED:C1:2A:E9:E9:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31332e302f32342d3234203d3e20313432323430.roa
Signing time:             Fri 28 Aug 2026 22:01:38 +0000
ROA not before:           Fri 28 Aug 2026 21:56:38 +0000
ROA not after:            Fri 27 Aug 2027 22:01:38 +0000
asID:                     142240
IP address blocks:        162.221.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.crl
                          rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:de:87:7e:1d:6b:b1:58:94:04:5e:3c:71:56:a5:b7:e4:9c:41:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e
        Validity
            Not Before: Aug 28 21:56:38 2026 GMT
            Not After : Aug 27 22:01:38 2027 GMT
        Subject: CN=DAEF7F9C2816EE5A4BE908ED5BDB2211C7062D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d7:c7:47:8c:5c:67:62:b8:ab:ef:54:01:81:
                    ae:4a:3a:94:2a:10:4f:de:cc:c9:9a:ce:da:17:74:
                    ca:23:6b:f5:2b:cf:19:50:ab:1f:83:bb:95:ea:ff:
                    5c:b3:95:18:9d:38:74:c7:78:97:17:05:40:98:28:
                    33:03:8a:95:0f:78:bd:71:98:7e:b2:66:85:9c:4f:
                    42:61:d0:c1:6e:e5:2f:5f:a4:ab:22:1c:6c:d8:10:
                    d5:96:e3:98:9b:15:28:5d:96:7b:9d:4c:1b:56:f8:
                    94:80:c6:75:e7:50:f3:2d:18:30:2a:6a:8f:1c:e8:
                    13:6c:83:f1:82:ee:e0:09:ec:97:7c:49:90:12:4d:
                    54:cf:14:2a:96:82:aa:14:fd:c6:11:7c:b8:28:cb:
                    4f:23:ea:21:95:86:0d:b0:d2:fa:43:48:c7:ff:09:
                    77:2a:85:9e:79:4e:c6:a4:b4:77:0f:0a:fa:15:b5:
                    6c:42:a9:90:02:c0:11:31:38:c1:5a:b2:38:d4:2b:
                    79:bf:88:46:d9:8d:36:22:ee:bc:f4:23:e2:32:08:
                    9b:36:05:4b:b4:a3:60:cd:d8:64:fb:67:81:0c:ce:
                    87:e3:0e:64:1f:76:5b:c9:ed:88:38:2d:bd:52:61:
                    9f:78:d4:7f:a1:06:9e:b7:e7:ac:7e:f3:f9:01:8a:
                    1c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EF:7F:9C:28:16:EE:5A:4B:E9:08:ED:5B:DB:22:11:C7:06:2D:49
            X509v3 Authority Key Identifier:
                keyid:EE:2E:BA:7A:2F:07:A4:74:7A:75:EB:84:07:67:ED:C1:2A:E9:E9:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31332e302f32342d3234203d3e20313432323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:8d:70:f2:db:f3:d4:52:9b:7a:e9:ea:f7:19:4c:a9:96:09:
         30:c8:18:e4:51:07:50:94:5a:1e:d8:a4:5b:80:a4:c8:d1:11:
         b2:81:4a:85:09:98:bf:1f:04:9f:fe:e9:bb:d0:f3:e4:03:9e:
         64:b9:fa:a8:25:a1:05:d7:9f:f8:01:75:22:2a:18:25:33:23:
         40:4c:da:08:1a:19:42:28:ae:a0:64:53:bb:b1:7e:81:61:9c:
         7f:55:6c:c3:e1:64:13:c2:1f:bb:63:42:6f:16:d4:45:f5:7e:
         31:d5:40:ac:86:c9:09:6d:a6:58:e2:4c:bd:c3:d6:ad:57:94:
         66:26:77:6f:c5:18:9f:56:43:57:49:57:29:be:9d:c2:83:04:
         5f:34:bc:b1:99:b8:b2:b2:02:35:28:27:0d:9d:0d:59:a5:1e:
         bd:3f:a5:dc:5e:d7:ca:2f:7f:55:d1:8a:f0:e6:dd:0a:2e:53:
         b6:c9:eb:e5:1b:69:1b:49:77:ce:c5:62:9c:da:d1:47:06:5a:
         b0:81:81:9d:37:81:a3:5e:32:65:3c:ef:05:79:0f:3e:72:41:
         70:ed:d3:31:bd:7a:ff:67:68:bd:90:21:a6:a7:2c:1c:dc:28:
         c3:1e:20:7b:fc:07:65:35:57:bb:61:63:94:49:e7:39:1a:02:
         13:2a:5a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:27 2026 by rpki-client