Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132312e302f32342d3234203d3e20383334.roa
File:                     3231362e3132322e3132312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          0xR48w1I7wIxeFcV1fc+eXXAC0AsZqLsKFTG82MF4BM=
Subject key identifier:   A4:FB:52:D2:FF:E6:7C:F0:99:A1:31:3E:FA:09:B8:23:5B:29:57:61
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       20CF5FA2215D6B5CF93F54AA971D05DCAF3DDF61
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132312e302f32342d3234203d3e20383334.roa
Signing time:             Sat 30 May 2026 13:28:54 +0000
ROA not before:           Sat 30 May 2026 13:23:54 +0000
ROA not after:            Sat 29 May 2027 13:28:54 +0000
asID:                     834
IP address blocks:        216.122.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Jun 2026 08:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:cf:5f:a2:21:5d:6b:5c:f9:3f:54:aa:97:1d:05:dc:af:3d:df:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May 30 13:23:54 2026 GMT
            Not After : May 29 13:28:54 2027 GMT
        Subject: CN=A4FB52D2FFE67CF099A1313EFA09B8235B295761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:8a:e3:7e:b8:54:c3:13:ae:a4:b7:45:ae:88:
                    6b:c4:7d:a8:e2:b6:59:31:f7:da:87:cb:fc:3b:60:
                    11:93:a4:d4:2e:09:15:52:ed:d7:47:8e:47:c0:21:
                    72:d4:7c:5c:10:35:a8:08:5a:53:91:cb:fc:e8:49:
                    df:eb:4b:c5:83:e0:5d:cd:63:d7:f1:83:0b:3a:b2:
                    5b:34:e7:48:94:a4:06:fa:79:f8:a3:e7:68:1f:f6:
                    69:53:5c:8c:20:9c:a2:5c:fa:85:81:51:f5:1a:4e:
                    d5:a6:3e:eb:38:16:91:68:8a:58:2f:24:f9:dc:3f:
                    8f:86:16:35:ba:44:43:f4:04:9a:7f:0a:aa:3b:94:
                    10:1d:7a:7c:d7:21:82:cf:ab:cc:4e:9d:8c:48:9f:
                    5c:ae:84:c1:ab:c2:d4:61:81:4c:51:d5:c6:da:a6:
                    10:86:e5:46:e5:58:70:89:0c:ad:0b:ae:ab:76:cd:
                    9d:9f:55:d1:25:b5:62:de:5a:61:40:b9:a4:bf:67:
                    ca:ff:9d:22:eb:7d:01:50:14:74:e8:82:b2:32:1c:
                    a3:29:e6:79:b5:9d:e0:5b:4a:78:bd:18:1d:d9:3a:
                    ba:28:d9:b3:8a:57:b8:47:2d:32:f7:23:98:91:e2:
                    6b:3a:f3:13:4a:bd:9e:47:81:35:83:2b:f5:7e:63:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:FB:52:D2:FF:E6:7C:F0:99:A1:31:3E:FA:09:B8:23:5B:29:57:61
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:e4:28:f6:c7:9e:79:17:d2:82:80:1d:77:1f:78:33:84:27:
         e8:c1:26:3b:1d:22:4e:7c:92:2e:96:8f:dd:15:16:7c:97:8a:
         2c:4b:26:96:a0:65:15:c7:bd:46:f7:cb:74:50:c6:cb:15:e9:
         da:ae:e2:e0:27:00:cc:3c:66:7b:a0:d6:df:80:85:df:c2:10:
         23:07:b9:84:8a:0b:f9:85:a0:88:d6:34:8f:62:44:ab:26:8d:
         5c:d7:0e:be:ad:c1:3a:30:6f:89:14:52:c6:b2:ef:01:1c:92:
         0f:8e:15:7a:74:78:19:ae:a1:f5:a0:f6:cc:fb:c2:66:a6:73:
         03:ad:d5:b7:b7:92:eb:13:c4:82:f5:44:82:06:99:82:87:11:
         d6:56:c8:c7:32:78:9a:42:cf:53:e8:fa:2b:3d:08:43:ff:6f:
         7e:7c:9b:e0:04:db:d8:63:2a:12:ae:65:c8:bd:c6:21:08:c2:
         ae:67:91:6b:a8:5b:dc:da:a8:2f:35:f6:65:d9:68:34:9a:77:
         e5:6a:35:94:d5:75:ef:8e:1e:e8:81:f8:7a:f3:8d:0e:71:8d:
         e9:50:6f:f9:f1:19:e2:71:9d:cc:d1:c7:8b:cd:96:fc:f3:65:
         1c:cb:d1:ce:c7:95:b3:b9:00:8d:fc:a9:33:27:b3:76:bc:bf:
         a4:c7:b7:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 16:03:38 2026 by rpki-client