Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e203235313938.roa
File:                     3231362e3132322e3132302e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          +ZlMG90FAf6mUTdWsKHdLICgEIxywGXjmtCuOlqKb+U=
Subject key identifier:   D8:A0:26:93:DB:5D:B9:27:64:CF:2A:30:5B:C2:C6:CF:37:8F:42:03
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       7A7A0A2AFF432F9C48A94C88E633F5DE9DCFAFD0
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e203235313938.roa
Signing time:             Tue 30 Jun 2026 21:11:53 +0000
ROA not before:           Tue 30 Jun 2026 21:06:53 +0000
ROA not after:            Tue 29 Jun 2027 21:11:53 +0000
asID:                     25198
IP address blocks:        216.122.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 02:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7a:0a:2a:ff:43:2f:9c:48:a9:4c:88:e6:33:f5:de:9d:cf:af:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun 30 21:06:53 2026 GMT
            Not After : Jun 29 21:11:53 2027 GMT
        Subject: CN=D8A02693DB5DB92764CF2A305BC2C6CF378F4203
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b2:22:ea:45:1e:d5:08:d0:dc:d8:e7:75:16:
                    24:56:2d:7e:b1:0c:60:df:aa:f6:52:2a:b8:4a:86:
                    0b:13:93:96:61:13:77:91:03:d2:20:ca:cc:fc:67:
                    1c:03:58:bb:68:72:11:91:f8:0a:0e:95:64:f2:33:
                    79:3c:a4:72:18:b2:37:b5:da:12:01:be:53:d4:61:
                    92:b7:ef:b3:c8:eb:39:dc:b1:cb:13:00:15:7c:ea:
                    af:0b:50:0e:ee:e9:af:5c:b7:13:9c:c9:91:f8:da:
                    74:d8:3a:c4:45:eb:ed:5f:eb:3d:a3:48:92:bc:ad:
                    7b:e2:98:2b:e9:55:35:8a:85:c8:7e:98:79:ac:de:
                    7d:87:49:6f:12:2c:81:1d:44:2c:e9:90:45:bf:ca:
                    9b:52:77:b3:3e:ef:91:c8:8d:c2:98:7a:aa:75:0b:
                    a9:7c:73:38:54:9f:54:54:de:a3:b1:1a:fa:1c:60:
                    4b:47:c2:0e:1f:bc:19:bc:89:18:f8:c0:c1:bc:94:
                    97:19:f1:86:65:32:5b:6a:8b:16:bf:02:25:34:2e:
                    2b:91:df:66:55:01:7a:3e:34:e3:27:74:84:27:eb:
                    1b:80:d7:ed:a1:43:df:40:f8:1e:6f:11:f1:54:8c:
                    bb:f4:dc:da:3e:aa:e0:11:0f:7f:f4:85:4f:95:16:
                    f9:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:A0:26:93:DB:5D:B9:27:64:CF:2A:30:5B:C2:C6:CF:37:8F:42:03
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:65:f2:f4:14:6f:bf:0c:e8:1d:6c:77:04:a8:38:85:e9:03:
         4d:f5:9a:e9:2b:d2:0b:52:4d:80:6a:56:2e:4a:de:ec:c9:1a:
         ab:af:4a:91:86:60:c7:35:7c:8f:ac:d0:af:04:bc:b1:28:da:
         dc:f5:35:8a:dd:21:d8:1c:2e:34:93:fb:6b:97:ac:fd:f6:ae:
         b1:be:e8:c3:84:c5:7f:cd:a9:3e:e8:95:a6:8a:56:0b:df:69:
         af:d6:06:51:5d:24:25:f8:df:24:d5:05:6e:43:03:d1:be:db:
         66:fb:ed:04:e0:e3:55:6a:03:d8:ab:e5:85:96:6c:03:7a:b9:
         43:62:17:0b:e8:ee:74:0e:4d:91:ca:b2:3c:cc:7e:3b:de:9d:
         a4:dd:73:78:0a:2a:7f:20:ee:f9:21:21:31:86:13:77:df:10:
         54:0b:3c:ba:5f:1b:7f:b4:36:b7:f0:fa:84:46:98:2e:13:37:
         1c:f5:47:d1:31:ca:ea:f6:25:85:76:35:5e:cf:93:d5:67:0a:
         48:a1:15:d4:6c:9e:c5:3e:68:dd:7c:de:6c:1a:40:fa:7a:69:
         ad:a0:8c:83:79:4e:69:2c:ce:e7:e8:b2:2d:82:25:b8:3c:86:
         61:73:5b:fd:f2:dd:d1:63:83:f6:41:61:69:c0:60:1b:39:07:
         a3:58:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:25 2026 by rpki-client