Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31342e302f32342d3234203d3e20383334.roa
File:                     3136322e3232312e31342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          2KmLPGO6Fob0TC37Hj7ZhM3qg5ch3Xd+1JSEJdaovUo=
Subject key identifier:   C4:C8:18:E3:DA:73:63:FA:57:34:F3:8F:07:39:BD:D2:E6:02:21:B4
Certificate issuer:       /CN=9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e
Certificate serial:       7E6DD3FB0146A57B927AB0D0384BDD8201ABC6B3
Authority key identifier: EE:2E:BA:7A:2F:07:A4:74:7A:75:EB:84:07:67:ED:C1:2A:E9:E9:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31342e302f32342d3234203d3e20383334.roa
Signing time:             Sat 17 Oct 2026 15:38:41 +0000
ROA not before:           Sat 17 Oct 2026 15:33:41 +0000
ROA not after:            Sat 16 Oct 2027 15:38:41 +0000
asID:                     834
IP address blocks:        162.221.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.crl
                          rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 21:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:6d:d3:fb:01:46:a5:7b:92:7a:b0:d0:38:4b:dd:82:01:ab:c6:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e
        Validity
            Not Before: Oct 17 15:33:41 2026 GMT
            Not After : Oct 16 15:38:41 2027 GMT
        Subject: CN=C4C818E3DA7363FA5734F38F0739BDD2E60221B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:db:82:ee:bf:31:0b:a4:a8:59:6f:bc:e5:d9:
                    bf:c1:71:f7:ca:c5:5d:39:13:f4:b4:b1:6b:93:e3:
                    c0:0a:dd:d0:b7:06:9d:51:37:26:5c:60:43:38:14:
                    ca:d9:f4:8c:12:f2:0a:cd:84:26:5b:da:63:d6:c0:
                    c5:61:74:83:ec:24:32:9d:4a:cc:0c:a6:9c:0d:7e:
                    53:27:77:17:27:98:54:e7:fc:13:95:c7:2c:e4:0a:
                    4a:97:4a:04:27:7b:95:44:bb:d5:0e:c3:aa:4c:64:
                    ad:fe:8e:5d:88:60:5a:16:e8:ea:0b:b9:4a:bd:2e:
                    6d:92:b1:99:df:c1:33:d1:72:88:d4:62:c9:dc:ef:
                    c8:29:5d:3f:a8:97:96:15:21:6f:4e:17:8d:35:db:
                    04:e0:dd:16:c2:f8:42:c2:26:41:1e:ab:cf:11:f1:
                    1c:d9:22:dd:e4:1f:52:c7:a1:77:6a:ed:73:78:95:
                    ba:ea:9f:ef:9c:d1:f5:20:94:b3:e8:70:73:8e:f6:
                    54:6f:c9:fb:4f:51:63:60:28:3f:88:cf:51:6c:04:
                    f0:5e:fd:41:cf:80:99:98:99:3d:b2:04:d2:02:55:
                    61:68:c4:7f:32:be:a7:ae:08:9f:75:c5:0d:7b:42:
                    a1:cc:a6:f4:14:47:ec:c9:2a:fa:2e:46:e4:27:fa:
                    c0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C8:18:E3:DA:73:63:FA:57:34:F3:8F:07:39:BD:D2:E6:02:21:B4
            X509v3 Authority Key Identifier:
                keyid:EE:2E:BA:7A:2F:07:A4:74:7A:75:EB:84:07:67:ED:C1:2A:E9:E9:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:2f:d6:3f:f9:c7:19:64:a7:a7:e2:31:1b:87:b8:4d:36:2e:
         37:0e:4f:94:7c:95:2b:25:7e:db:89:05:9c:8f:37:25:5c:a1:
         a5:ac:ac:1c:17:c6:1d:22:9f:dc:fd:7e:61:25:4e:66:cf:0c:
         10:5f:28:df:78:51:72:7b:26:3d:c0:f8:ce:e3:ae:3c:48:44:
         81:6c:be:83:68:6b:9e:e1:69:d9:97:ee:e6:07:77:80:68:af:
         56:9c:ef:8a:38:51:2a:3e:16:5e:c0:ee:38:6f:0f:4c:25:b7:
         f9:6c:39:41:7f:2d:dd:8a:cf:86:2b:e1:d0:46:ab:3d:28:2b:
         15:3f:52:f3:15:b4:f3:44:6a:49:df:fd:38:da:91:4e:be:ba:
         73:57:5e:d7:dc:35:ce:76:52:9b:d1:6a:d6:fb:5f:ff:41:85:
         23:43:01:0f:3c:fb:38:2a:e3:bc:55:f4:06:10:e1:12:eb:b5:
         15:d5:2f:bf:d9:ea:99:0d:3e:59:f9:c3:21:38:db:40:b3:9a:
         42:a8:93:7c:3f:c9:89:24:6f:bb:ea:7f:ff:76:26:22:91:8c:
         a2:7b:b3:0e:66:7c:84:64:38:74:75:ee:09:2f:94:c1:02:c6:
         9b:75:9f:fa:e7:37:16:7b:20:53:a3:c5:05:1c:85:b3:ee:12:
         7c:2f:c9:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 09:07:06 2026 by rpki-client