Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e20343030333038.roa
File:                     3231362e3132322e3132302e302f32342d3234203d3e20343030333038.roa (raw, json)
Hash identifier:          4eJ9ECB0ZkNWe4mTU6bSJdsX81bf246zJ11yNII7Iis=
Subject key identifier:   AF:E2:68:0D:B6:97:F1:98:AF:69:4C:E5:CD:4D:D5:41:2D:1C:0A:63
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       7659053EE7C249702CC2B6511391619D98D52D90
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e20343030333038.roa
Signing time:             Tue 26 May 2026 09:09:38 +0000
ROA not before:           Tue 26 May 2026 09:04:38 +0000
ROA not after:            Tue 25 May 2027 09:09:38 +0000
asID:                     400308
IP address blocks:        216.122.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 04 Jun 2026 18:36:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:59:05:3e:e7:c2:49:70:2c:c2:b6:51:13:91:61:9d:98:d5:2d:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May 26 09:04:38 2026 GMT
            Not After : May 25 09:09:38 2027 GMT
        Subject: CN=AFE2680DB697F198AF694CE5CD4DD5412D1C0A63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0d:9e:a8:50:f1:ef:10:93:2e:4a:88:0e:c7:
                    da:5c:02:ff:43:f5:0f:f7:db:eb:7d:80:06:c7:28:
                    03:e4:88:35:1e:03:7d:22:71:64:65:66:96:f5:84:
                    1d:fe:6d:c9:f6:c9:cb:d7:9f:65:4d:7b:c5:38:0a:
                    65:08:c2:be:50:cc:30:6c:ab:93:09:a0:36:97:f1:
                    15:92:a6:49:7e:e0:a2:9b:01:f8:e1:68:d3:f0:a6:
                    32:ca:c5:39:fa:2d:36:9e:94:99:7e:45:67:44:61:
                    19:65:ce:7b:66:9f:82:3f:3f:5a:07:fd:d6:b2:ac:
                    50:73:a3:39:16:16:f1:6a:79:90:b1:04:0b:30:0a:
                    3a:c4:03:9b:a5:e4:13:47:67:a6:12:0c:61:1b:46:
                    eb:b9:72:1e:a9:7e:05:5f:aa:9f:48:f1:77:95:ee:
                    2e:b9:00:eb:6e:28:f8:78:7d:0f:de:e0:fe:4c:d8:
                    4c:61:b7:85:ce:ff:f6:e0:92:65:ae:6d:53:3f:68:
                    d7:0e:d5:8a:1c:ca:ea:d1:f6:d7:3e:19:df:ca:c8:
                    ae:ee:a9:18:94:0e:cd:63:17:17:89:a6:ee:8b:20:
                    57:a0:45:a5:26:9c:5f:f8:d2:c2:f5:5a:22:4f:24:
                    a3:78:81:d8:fc:d6:fe:7d:18:6b:89:84:87:44:87:
                    c8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E2:68:0D:B6:97:F1:98:AF:69:4C:E5:CD:4D:D5:41:2D:1C:0A:63
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e20343030333038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:f0:a1:ae:ce:18:10:88:ab:de:ec:e5:e1:76:3c:5c:d1:11:
         a4:5a:ed:f8:ee:1f:9e:de:a8:84:03:6e:05:7e:65:5f:5a:f1:
         20:0f:16:0e:42:d1:8c:b8:68:9f:5e:c7:28:98:01:32:94:76:
         bd:41:84:ce:f5:1b:7b:59:d1:35:ce:c6:87:ba:3d:0e:03:96:
         ef:21:0f:96:60:f7:e1:c3:25:cd:60:ba:1f:98:2f:c1:86:ba:
         bb:0c:79:fa:76:27:9d:ae:53:a2:4d:0f:b8:69:fa:64:e4:df:
         ec:1f:1d:8a:44:0f:24:36:82:30:ce:c9:57:e1:de:5e:b1:08:
         63:12:97:bc:47:05:0a:d8:35:d6:9b:d2:df:5b:dd:ef:0f:71:
         24:ac:18:7e:a6:12:8d:aa:03:32:4a:34:bb:bb:5f:1b:0b:b1:
         90:c8:fe:b2:34:65:b2:9c:13:c6:fa:7a:b6:84:ee:5e:e1:57:
         29:10:f5:79:4e:d8:c7:04:3e:ea:6c:72:09:e6:37:1f:c1:a0:
         08:d1:6d:c3:a1:d2:14:80:e8:f2:d8:8b:42:6d:a4:8a:e1:53:
         c6:6a:39:72:7d:df:00:bf:d3:e9:f8:8c:5d:65:9b:a1:ef:15:
         4a:67:44:39:0d:ee:10:6d:f7:48:18:04:fa:d7:41:6f:37:91:
         6e:ab:4a:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:19:42 2026 by rpki-client