Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2033333230.roa
File:                     3137322e38322e39302e302f32342d3234203d3e2033333230.roa (raw, json)
Hash identifier:          BpNtYwe1NOYV77TrkmKFwuwjSXdA2vtRmPje0Ollfb8=
Subject key identifier:   D4:5A:28:1A:28:8B:CA:C0:A1:79:2B:2A:1A:CA:DB:6D:6B:F7:8C:01
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       73ED271F30C43A5CA1ACA30DB8524F93AA159702
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2033333230.roa
Signing time:             Mon 06 Jul 2026 09:40:10 +0000
ROA not before:           Mon 06 Jul 2026 09:35:10 +0000
ROA not after:            Mon 05 Jul 2027 09:40:10 +0000
asID:                     3320
IP address blocks:        172.82.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 15:34:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ed:27:1f:30:c4:3a:5c:a1:ac:a3:0d:b8:52:4f:93:aa:15:97:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jul  6 09:35:10 2026 GMT
            Not After : Jul  5 09:40:10 2027 GMT
        Subject: CN=D45A281A288BCAC0A1792B2A1ACADB6D6BF78C01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e9:12:9b:4e:19:2a:d2:22:3b:46:d4:a1:b3:
                    82:1b:c4:2b:74:13:2c:ff:6c:8e:b7:b7:f1:b5:29:
                    68:9d:81:60:86:29:fe:06:da:1f:9d:50:a5:dc:c9:
                    4a:8f:25:83:ad:05:78:98:ae:72:df:7b:09:c9:b1:
                    57:41:ab:92:8f:58:4a:23:dd:7a:0b:c7:47:93:5a:
                    8f:a3:cb:d3:82:a7:7c:6c:34:a2:3f:8f:69:d6:75:
                    18:4e:ab:9f:89:1f:a2:92:38:14:f0:6a:ff:dc:e2:
                    40:50:d0:d5:6b:bf:92:54:7e:5c:0d:cb:e6:24:9c:
                    79:c3:bb:b8:16:a2:b6:97:04:c2:5b:cd:70:8c:21:
                    5e:9c:a9:a5:06:ce:60:d5:f3:81:e1:b2:79:e7:63:
                    28:63:fa:bb:47:09:4e:e3:9b:4d:4b:33:7e:b4:48:
                    2c:7a:ec:61:99:6c:22:65:2c:a0:d2:c0:73:26:2b:
                    62:9b:ec:04:0f:10:d3:54:34:f7:8c:af:c9:0a:cc:
                    c9:76:ba:13:5d:fd:69:41:aa:0c:f6:6e:ef:f6:ae:
                    0e:38:be:7e:96:08:51:00:6f:87:f4:8c:99:80:60:
                    20:6b:8d:9a:f8:eb:d6:20:22:c6:26:92:5d:ea:1e:
                    d8:4d:a4:8d:c8:cb:aa:f3:48:6b:eb:05:02:b1:c5:
                    93:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:5A:28:1A:28:8B:CA:C0:A1:79:2B:2A:1A:CA:DB:6D:6B:F7:8C:01
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2033333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:54:b7:6f:ed:bc:0c:c7:ff:6a:76:51:8a:51:40:0d:d2:81:
         7a:f9:46:7d:44:43:d8:54:41:b4:18:5e:dc:44:06:77:cf:c2:
         6c:4b:16:a5:38:24:d3:42:99:8c:a1:a4:17:a3:c5:0b:f8:02:
         64:1b:08:5d:9d:b4:1c:58:8a:fc:8a:93:ec:bd:5f:c6:4d:06:
         41:8b:f1:0e:3c:7c:ce:de:75:6d:1b:d3:37:fa:2c:9a:1a:4c:
         f3:79:fd:a2:8c:f4:d4:73:13:9c:02:1e:61:7c:69:f8:20:bb:
         25:ff:54:68:17:62:e9:a6:84:ec:f7:7a:ba:f5:66:ee:c5:6b:
         1a:b3:d4:f8:b2:84:d4:33:ed:ec:68:5f:34:d1:8f:fd:ab:d2:
         25:41:65:64:b3:11:e1:c9:42:8d:30:d1:c3:2a:c7:6b:3c:41:
         68:e9:5c:38:29:18:f3:4e:52:09:ea:88:eb:35:24:31:6d:a7:
         4d:87:9c:b0:3f:98:1e:d9:a3:65:16:ca:f9:70:34:72:90:bd:
         53:1c:ed:8f:31:e6:cf:67:ac:79:e2:4d:0a:b2:4b:5c:42:b7:
         cc:63:bb:ef:38:77:ce:e4:6f:cc:84:06:90:17:c7:9c:4c:df:
         b7:76:90:01:ad:17:4d:1c:4c:d4:a5:62:df:5a:8c:47:69:87:
         1d:13:08:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:53 2026 by rpki-client