Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e20343032333036.roa
File:                     3231362e3132322e3132302e302f32342d3234203d3e20343032333036.roa (raw, json)
Hash identifier:          fYZuZVs8oFWkoPSuOGRbM+aObGgMKGtr9EqclFuDYrU=
Subject key identifier:   06:89:47:80:30:FC:F6:82:0F:ED:CC:2B:9D:7B:2B:08:8C:56:0E:F8
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       5BB7FF13EEB7B20C0BB0401B207D63A99E1358E4
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e20343032333036.roa
Signing time:             Thu 23 Apr 2026 15:31:00 +0000
ROA not before:           Thu 23 Apr 2026 15:26:00 +0000
ROA not after:            Thu 22 Apr 2027 15:31:00 +0000
asID:                     402306
IP address blocks:        216.122.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 27 Apr 2026 20:02:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b7:ff:13:ee:b7:b2:0c:0b:b0:40:1b:20:7d:63:a9:9e:13:58:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Apr 23 15:26:00 2026 GMT
            Not After : Apr 22 15:31:00 2027 GMT
        Subject: CN=0689478030FCF6820FEDCC2B9D7B2B088C560EF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c0:b9:b4:bb:c0:f3:db:2d:5c:c5:bf:b2:91:
                    18:f6:9a:f2:eb:a5:d6:66:2c:23:a0:a2:d9:13:eb:
                    3f:98:fb:f2:0f:ae:b0:8d:b9:88:d3:29:c2:98:62:
                    ec:5f:f9:4e:07:d4:f9:e1:81:4d:5e:c0:ee:8d:d6:
                    e5:9e:1e:92:8e:c4:58:67:25:ba:96:37:96:c5:75:
                    47:73:73:25:3e:6e:60:3d:cc:27:3c:3e:e3:88:49:
                    85:81:7d:69:72:d1:d5:58:3d:c6:27:bf:66:0b:59:
                    89:25:ad:06:e7:fc:1f:6f:e6:d8:63:d8:89:b4:11:
                    7b:cf:14:95:2e:e2:54:f9:03:87:11:8e:6e:2c:e0:
                    3c:46:35:a0:0b:48:19:5f:1a:0b:01:11:dd:d7:71:
                    cb:1b:8a:29:c1:c8:be:1a:82:08:cf:54:0b:24:29:
                    95:f5:60:f5:03:a2:58:5a:8e:6b:39:24:6c:37:90:
                    b9:99:71:1f:62:ce:74:3a:31:51:c6:1e:15:5d:6e:
                    55:37:ca:a1:37:2a:e2:59:30:5a:69:29:5c:25:15:
                    70:e9:11:ab:18:d9:94:5a:b1:f7:1f:dd:aa:70:c9:
                    aa:fe:4b:2e:b9:b4:fc:26:1e:0b:fd:d2:ee:aa:76:
                    95:35:2a:92:8f:29:9a:70:55:f7:a9:be:16:ee:ab:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:89:47:80:30:FC:F6:82:0F:ED:CC:2B:9D:7B:2B:08:8C:56:0E:F8
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32342d3234203d3e20343032333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:13:47:2e:44:fd:9d:0e:8c:f3:8e:5a:63:5d:ce:b8:f8:de:
         22:99:16:6d:d0:6c:f4:95:9d:a5:52:e5:74:31:9c:9a:bc:72:
         37:87:c8:94:70:b0:b0:54:78:ba:90:c9:ef:55:76:fe:83:fc:
         7b:ac:c5:08:4e:3e:ba:84:98:4b:f1:11:ec:8d:ad:08:85:bf:
         29:b7:5c:e2:58:45:ca:3b:ea:a7:7d:86:9e:c5:4f:2b:1c:ee:
         70:44:19:c4:a4:b4:6f:a4:a5:57:37:4c:a8:4c:7b:35:c4:4f:
         e9:f9:dc:aa:4e:79:4f:5c:62:6d:20:28:22:be:c2:10:53:2b:
         12:13:c7:5b:f8:b9:95:5b:b4:42:31:f0:a5:fe:4f:55:7c:d1:
         44:e1:5f:fd:ae:53:93:9e:b4:dd:56:59:c5:8e:d2:d7:bd:62:
         51:8b:4a:14:80:2f:b0:0a:92:55:82:3f:46:ac:24:56:13:f8:
         a2:11:fe:39:7a:fd:20:40:3e:1f:7e:62:9a:8d:55:ad:ea:e5:
         96:03:78:ff:44:d4:5e:ff:45:2f:f0:03:f0:ff:b5:89:29:3d:
         87:05:e5:7a:5b:cf:9c:a2:16:ce:8b:b9:4a:93:6e:05:92:1e:
         f0:78:ea:8e:1a:87:71:0e:cc:c7:07:36:b8:76:87:38:25:51:
         d8:0f:39:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:15:49 2026 by rpki-client