Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131382e302f32332d3233203d3e203436343735.roa
File:                     3134312e3139352e3131382e302f32332d3233203d3e203436343735.roa (raw, json)
Hash identifier:          2TNVi9DsRHjH92bqHU5LVDLnXFIt2tbW0MZpK/n2Tag=
Subject key identifier:   17:0E:80:B5:61:59:00:0D:BB:86:95:07:75:67:BF:4C:E4:E7:09:C5
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       01266CFD4D652D327EFCD0A834BB01BCDFE36A60
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131382e302f32332d3233203d3e203436343735.roa
Signing time:             Wed 11 Feb 2026 00:56:03 +0000
ROA not before:           Wed 11 Feb 2026 00:51:03 +0000
ROA not after:            Wed 10 Feb 2027 00:56:03 +0000
asID:                     46475
IP address blocks:        141.195.118.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 22:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:26:6c:fd:4d:65:2d:32:7e:fc:d0:a8:34:bb:01:bc:df:e3:6a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Feb 11 00:51:03 2026 GMT
            Not After : Feb 10 00:56:03 2027 GMT
        Subject: CN=170E80B56159000DBB8695077567BF4CE4E709C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:d0:29:ed:4c:f6:7f:5d:bf:1f:c4:96:a2:
                    45:a3:29:d1:43:64:0d:84:60:55:e6:af:b3:76:64:
                    28:d6:91:04:0d:c1:29:c1:40:f7:0d:ee:cf:a5:43:
                    2b:b9:2f:91:e7:21:0b:0d:34:fa:41:ad:85:88:88:
                    62:0e:36:8d:6a:05:c2:83:5e:63:47:5c:4d:c3:51:
                    47:71:98:01:b7:26:2c:c9:ce:dd:81:42:9c:e7:37:
                    c1:d8:a4:15:e1:d7:9b:6b:e2:1f:ea:ea:22:ee:fd:
                    55:8c:c4:a4:40:25:97:a1:96:4a:c3:21:92:14:f9:
                    4c:23:ba:03:8a:39:7c:2d:7a:da:0f:95:45:8f:51:
                    91:4e:ce:4b:39:1e:e8:18:a9:2d:b3:d4:89:1e:58:
                    97:5c:6e:7b:21:be:3c:96:73:c0:bb:29:d7:71:e8:
                    eb:e7:b7:cd:e5:ed:f5:4f:b1:32:97:6b:d5:89:ae:
                    e8:ed:17:d3:f3:23:ae:00:af:07:39:56:9a:59:2e:
                    77:99:a9:6e:97:df:c8:95:74:1e:14:02:b2:c5:6e:
                    61:ae:be:66:3c:4c:57:28:34:f7:0e:c7:ad:dd:f4:
                    70:f9:ed:4c:11:2f:de:15:1e:87:79:25:1b:45:0f:
                    9c:f9:7b:99:c6:91:e0:5c:55:f2:a4:de:92:6f:81:
                    04:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0E:80:B5:61:59:00:0D:BB:86:95:07:75:67:BF:4C:E4:E7:09:C5
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131382e302f32332d3233203d3e203436343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:4e:85:26:af:d8:f1:4e:6f:78:b8:87:47:7e:3c:b5:ba:
         1b:bc:f9:ce:30:2c:7f:d8:60:29:b5:d4:b5:53:38:2b:46:b6:
         2c:e2:c7:22:03:a2:15:a9:64:bf:b5:31:9f:8d:71:73:3d:1b:
         be:4a:b4:40:28:18:aa:84:5b:d3:67:fe:02:5c:9b:82:f4:62:
         3c:1f:d2:5d:53:9d:3a:a3:cb:5b:bc:2c:d7:20:94:79:e2:e4:
         53:47:43:4d:89:92:2b:7f:9e:53:f1:35:9f:6e:93:f8:d5:ad:
         0a:2e:77:c1:95:f9:62:db:35:5f:15:e8:f2:0e:45:c6:9e:cb:
         77:cf:28:6b:8c:f5:47:fd:7f:6f:50:0e:68:f9:3d:a0:27:61:
         c0:96:f9:33:dc:13:fc:e9:05:da:50:ef:92:49:b4:42:eb:d2:
         c8:2f:ad:a2:aa:7b:03:d5:a8:88:8f:eb:02:e9:65:60:d2:e5:
         68:a9:e7:26:37:ca:18:56:0f:36:7e:fe:d6:60:ca:11:98:0c:
         b1:c2:61:a0:75:9a:f6:99:2f:6b:34:d4:07:c7:49:bb:76:70:
         01:d4:72:4f:15:2a:7d:cb:af:2e:09:a5:34:fa:d0:c1:a9:94:
         d0:a6:77:d2:18:36:2e:83:77:25:75:5b:1d:4a:49:92:83:a4:
         c6:d3:23:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:55:50 2026 by rpki-client