Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3139302e302f32342d3234203d3e203632363432.roa
File:                     3230382e39312e3139302e302f32342d3234203d3e203632363432.roa (raw, json)
Hash identifier:          KlFBE9thxyfaR1UXgiKUOTBx2U20XCOwHCYBUrmBV/Y=
Subject key identifier:   00:33:0C:D0:B6:01:C4:CF:E5:2B:B3:35:0B:12:C1:65:F1:88:65:9C
Certificate issuer:       /CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
Certificate serial:       60619B721DBB1007FA25BC24CDE0D0C7E979BE1F
Authority key identifier: 27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3139302e302f32342d3234203d3e203632363432.roa
Signing time:             Sun 23 Aug 2026 10:31:50 +0000
ROA not before:           Sun 23 Aug 2026 10:26:50 +0000
ROA not after:            Sun 22 Aug 2027 10:31:50 +0000
asID:                     62642
IP address blocks:        208.91.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl
                          rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/48f6121a-943c-4c0d-8b87-3fecbe71067d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 21:59:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:61:9b:72:1d:bb:10:07:fa:25:bc:24:cd:e0:d0:c7:e9:79:be:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd
        Validity
            Not Before: Aug 23 10:26:50 2026 GMT
            Not After : Aug 22 10:31:50 2027 GMT
        Subject: CN=00330CD0B601C4CFE52BB3350B12C165F188659C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4c:1c:15:04:c0:9c:4e:51:f4:32:c7:06:5a:
                    da:ce:49:e5:b5:85:04:ed:0a:65:db:18:b3:66:ad:
                    ae:69:68:27:88:02:2f:cf:99:79:16:3c:64:b2:32:
                    34:3e:a1:e0:ea:c8:35:de:cb:7d:7d:57:aa:1d:ed:
                    57:da:41:54:68:e7:61:11:4f:c0:98:49:03:79:eb:
                    0e:76:01:00:ab:ce:88:20:ce:98:a2:b9:f5:39:ae:
                    9d:30:05:4c:6e:57:05:e8:7c:21:45:0b:3e:fd:2b:
                    08:89:09:c1:ea:92:1d:4c:85:82:ff:c7:0b:c8:b7:
                    c1:8f:07:e4:55:2d:45:e2:e4:0d:75:b5:76:4e:72:
                    0e:f4:4f:09:eb:39:c2:1b:f0:44:fb:05:53:b1:c0:
                    ba:31:91:d9:0d:ba:f5:e6:ff:0e:e7:d3:3b:7c:45:
                    79:74:1a:7f:86:b3:af:ae:a7:b7:d4:25:56:4d:ae:
                    f2:59:0a:71:95:64:ed:f7:52:9f:9e:26:e5:59:3f:
                    9c:a2:03:79:9e:66:87:73:19:1c:99:ae:4d:1b:54:
                    f8:33:62:42:b6:3a:2c:94:55:8a:ec:d0:c1:c5:be:
                    d9:65:ac:2e:a5:f7:73:23:8f:c9:94:7e:98:0e:81:
                    98:4d:b8:62:67:59:85:1c:9f:94:65:85:4a:24:16:
                    6f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:33:0C:D0:B6:01:C4:CF:E5:2B:B3:35:0B:12:C1:65:F1:88:65:9C
            X509v3 Authority Key Identifier:
                keyid:27:67:9F:C2:3A:06:E4:5F:AF:BF:DC:18:B2:3B:97:98:91:1C:19:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/27679FC23A06E45FAFBFDC18B23B9798911C19D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/48f6121a-943c-4c0d-8b87-3fecbe71067d/2ddd7a8d05518a86d314330212b52ef7f1fdfab09b0f4824dd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/78309c5aaa3e4168af2c9f7c2c042641/0/3230382e39312e3139302e302f32342d3234203d3e203632363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:7b:2a:7a:2f:dd:75:29:e9:f6:65:96:30:92:79:e3:53:e5:
         65:2e:cd:1a:c4:3d:d2:62:39:31:2f:65:70:e5:75:75:e8:e0:
         5e:d8:14:a2:48:59:21:99:1a:53:0e:b4:ed:21:42:c5:a1:7c:
         30:02:a0:d9:08:41:b2:a8:5d:f1:74:1f:bb:8f:2b:4a:4f:39:
         ba:20:59:63:d3:4f:02:5e:ba:bb:83:56:99:19:f7:f4:bd:c0:
         45:43:d5:05:e8:c6:9c:63:10:46:85:62:c5:ed:ca:ad:e6:b7:
         5a:56:d2:6e:00:d7:45:14:e9:e9:8a:13:90:29:08:aa:5f:a6:
         cd:5c:88:54:db:6c:97:51:02:d6:b7:29:90:e6:1e:fe:d6:bc:
         2d:f6:45:cf:6a:52:03:89:8e:e1:f2:df:17:a8:42:9a:e2:94:
         ce:fa:7e:ff:99:b1:24:68:e0:4e:5c:af:6b:3c:53:a8:1c:ee:
         85:56:83:78:cd:21:c3:01:42:c5:d7:c7:1f:53:72:19:15:a1:
         25:93:6c:e4:c8:6b:1a:97:34:85:1b:e9:98:88:7d:e9:db:bf:
         67:6d:f5:3c:9f:a5:1f:93:11:64:1b:89:0b:a8:b4:0c:b2:5c:
         74:aa:f1:63:1d:57:d5:50:8d:83:ab:9f:41:3c:3d:f5:75:2e:
         16:3f:f5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 28 00:39:06 2026 by rpki-client