Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138392e302f32342d3234203d3e203230343733.roa
File:                     3230382e39312e3138392e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          LZeB/xDRHQW89tnaCAk3rT3dZTz1fa4CLCoK8Dg/t6o=
Subject key identifier:   19:5C:03:10:83:12:45:7E:55:17:6F:41:05:7C:93:48:87:E8:D8:DE
Certificate issuer:       /CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Certificate serial:       15FF058D0BD607170277FF3E39E764C64DC47ACD
Authority key identifier: 27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138392e302f32342d3234203d3e203230343733.roa
Signing time:             Wed 26 Aug 2026 06:14:33 +0000
ROA not before:           Wed 26 Aug 2026 06:09:33 +0000
ROA not after:            Wed 25 Aug 2027 06:14:33 +0000
asID:                     20473
IP address blocks:        208.91.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
                          rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 08:33:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:ff:05:8d:0b:d6:07:17:02:77:ff:3e:39:e7:64:c6:4d:c4:7a:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
        Validity
            Not Before: Aug 26 06:09:33 2026 GMT
            Not After : Aug 25 06:14:33 2027 GMT
        Subject: CN=195C03108312457E55176F41057C934887E8D8DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:9f:f6:61:88:3f:a5:d9:d8:fe:1a:be:58:1f:
                    8e:48:4b:cd:29:65:47:96:8c:70:0c:04:9b:91:88:
                    45:af:4c:5e:15:71:4a:0f:3e:0b:77:ba:d0:38:3e:
                    7d:3f:9a:27:7d:7c:fc:98:fd:6b:fa:04:a6:e3:60:
                    af:4d:ed:60:0c:cb:07:be:2c:59:ed:1e:7e:08:57:
                    be:b1:5a:67:ec:7b:aa:e9:40:a2:7d:14:67:f5:20:
                    81:0a:1e:19:93:19:dc:87:5b:87:4c:7f:93:d0:23:
                    f4:97:a2:c5:cc:aa:32:a6:ac:30:71:99:2b:b1:92:
                    0e:29:c6:4a:53:fb:bf:b3:c8:8c:eb:26:75:33:e1:
                    84:71:e4:01:e3:d5:3a:21:b9:72:6d:2c:ae:ea:d2:
                    92:94:ad:47:99:f1:14:af:bc:da:ab:37:28:7e:23:
                    b9:60:79:ba:16:e3:96:eb:da:0d:c5:70:40:2f:c6:
                    71:fb:19:fd:25:f7:1a:be:49:04:94:35:74:4c:88:
                    49:fe:fa:f1:86:24:64:d7:e3:c4:ab:88:2d:5c:e4:
                    01:6c:ff:54:09:05:c3:b2:0c:26:77:0f:76:7e:b1:
                    ac:f2:f2:a6:de:50:b6:40:69:b0:14:07:ab:1b:0c:
                    90:1a:18:46:c3:93:d8:2c:a9:97:79:a3:dc:ca:15:
                    99:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5C:03:10:83:12:45:7E:55:17:6F:41:05:7C:93:48:87:E8:D8:DE
            X509v3 Authority Key Identifier:
                keyid:27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3138392e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f4:22:54:43:d1:e8:11:42:e0:79:26:ca:b8:8f:0a:89:90:
         6d:85:7f:dc:ea:81:03:c8:c9:f0:3a:3a:ac:eb:c3:f1:74:47:
         b8:35:a0:cd:69:aa:b9:a3:b6:6c:b4:fb:14:25:7b:75:ff:83:
         9c:80:d7:0e:4c:55:29:54:24:8c:3a:dd:99:fa:24:cf:e7:5a:
         a4:a2:94:cf:39:57:31:0a:c6:40:43:0f:b9:85:c1:34:d8:b9:
         13:eb:28:a4:9c:c2:cd:08:dd:c2:74:78:2b:a4:c8:c6:e2:e4:
         7a:60:ea:57:98:b0:2e:ae:6f:27:87:51:c0:2a:e6:40:70:33:
         79:2f:6f:95:29:ed:9b:4c:5c:52:28:3e:3c:82:f0:cd:0b:bd:
         99:38:4d:66:92:b4:6e:b1:17:1f:b4:8b:da:38:1b:d9:a0:e4:
         43:48:0b:7a:10:79:3c:05:14:b2:9e:08:24:cc:52:8d:08:9b:
         a7:4e:24:60:c0:a2:22:27:22:92:9c:ac:a7:da:14:1f:0a:d0:
         29:63:2d:62:75:8a:b2:55:7a:f1:63:5a:89:f9:38:64:b5:83:
         42:3f:af:cc:70:66:53:2e:f9:90:77:2b:b9:c9:4e:33:9a:1b:
         16:49:cc:1a:db:ac:dc:d4:2c:5a:8b:a6:7a:7a:ca:13:48:37:
         21:ba:dc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:30 2026 by rpki-client