Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e2032393134.roa
File:                     3231362e3132322e3132302e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          HhrMAYuqglQ6mr01oz3OYDWMQl2NrWNTR6Pvjb3Yx7c=
Subject key identifier:   F7:09:B8:6F:7C:05:68:46:D6:7B:FD:FA:D9:F5:FA:D0:FB:18:04:E5
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       4C6CF6959450EE5AD2810964D772BB3BE326F354
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e2032393134.roa
Signing time:             Thu 13 Aug 2026 03:28:43 +0000
ROA not before:           Thu 13 Aug 2026 03:23:43 +0000
ROA not after:            Thu 12 Aug 2027 03:28:43 +0000
asID:                     2914
IP address blocks:        216.122.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:6c:f6:95:94:50:ee:5a:d2:81:09:64:d7:72:bb:3b:e3:26:f3:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug 13 03:23:43 2026 GMT
            Not After : Aug 12 03:28:43 2027 GMT
        Subject: CN=F709B86F7C056846D67BFDFAD9F5FAD0FB1804E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:a6:b9:2a:1b:5e:0d:c3:62:d2:43:e4:27:7e:
                    eb:8d:f7:c4:0a:f5:03:f2:89:eb:ab:da:b9:78:9d:
                    79:06:30:f0:cb:79:e6:d5:b1:6e:77:ba:e7:0d:22:
                    2a:3e:9a:73:ed:52:00:de:2c:19:4e:5f:ef:94:9a:
                    69:e5:e4:64:23:09:00:f9:05:91:54:e4:72:c7:43:
                    c2:5f:47:05:ac:d9:51:38:4b:1b:e0:e9:8d:1b:05:
                    07:b9:9b:c0:d0:7c:ee:3a:a8:6e:37:ad:9e:74:e0:
                    77:f8:a2:34:14:57:45:0c:8e:96:6b:96:67:24:38:
                    e7:84:de:34:53:ab:64:65:96:96:c9:c2:0d:08:a4:
                    de:bb:b9:63:a9:29:38:e5:ff:d2:29:b8:4d:a7:fe:
                    30:aa:7f:a1:ad:6b:d7:dd:f7:d5:80:14:61:70:b8:
                    e5:b9:98:75:88:fa:57:bf:a0:58:45:de:6e:38:4d:
                    59:6e:4f:eb:6a:0a:6a:ab:56:d0:ba:69:51:d9:3c:
                    37:e7:71:e8:65:af:0b:65:a7:6d:b9:8c:65:fb:76:
                    6c:8c:6a:73:40:4f:e5:fc:9b:0c:10:a7:a0:d9:20:
                    82:c5:e0:1c:aa:c1:19:fb:1a:00:10:dd:b8:c9:34:
                    42:7d:3b:b5:29:ed:3d:72:37:92:04:3b:77:72:8e:
                    35:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:09:B8:6F:7C:05:68:46:D6:7B:FD:FA:D9:F5:FA:D0:FB:18:04:E5
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:33:f3:df:40:45:c6:c1:5e:80:14:92:d9:5f:8a:84:b1:45:
         2a:5e:52:8c:f5:1c:16:f9:17:be:f7:49:a5:3c:eb:10:36:49:
         90:50:f9:28:a1:14:66:47:0a:21:88:94:eb:80:5f:e6:b2:21:
         d6:2a:a8:0d:be:0e:ec:25:7e:a5:e8:ce:ac:ed:04:05:21:7e:
         1a:64:9d:43:9c:9d:d6:9c:a6:32:01:55:54:0a:6c:15:0e:b2:
         5f:13:09:0c:ed:13:2b:82:db:89:ff:68:38:68:e6:13:02:46:
         eb:ae:d7:97:63:46:65:da:bb:62:52:eb:44:b4:30:7c:88:4e:
         23:5e:32:a1:d0:1e:0d:49:bd:85:4e:68:6a:5e:f8:b0:98:f0:
         11:a8:2c:9b:5f:b0:53:3b:d4:f4:33:0f:86:94:7e:dc:1b:35:
         06:01:7d:30:2e:9b:0c:cf:70:9f:c3:f7:6e:0e:ae:e2:3d:1d:
         a6:50:69:4c:57:9b:2c:a0:26:7b:4b:fb:12:34:9b:ee:95:bc:
         14:5c:30:63:28:58:32:1d:95:b5:63:c9:05:47:b4:72:4b:d8:
         c9:33:ff:0c:2f:8a:86:3b:5d:8d:ae:17:ad:37:74:1c:ce:ae:
         4d:ee:c8:5c:d3:fe:ce:e3:58:b0:55:f0:98:d6:b3:25:36:11:
         44:ce:6b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:24:17 2026 by rpki-client