Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132352e302f32342d3234203d3e20323139343237.roa
File:                     3231362e3132322e3132352e302f32342d3234203d3e20323139343237.roa (raw, json)
Hash identifier:          ZVyVHyk5ZoK1S5U09kV2ihwqoRYBHCZgfsNSjGofeno=
Subject key identifier:   63:A7:2D:AC:10:D8:73:87:67:02:D9:5D:D5:68:A7:C6:D4:9B:40:54
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2D2F8C3802919D967D33381EB233D6BA4877EA9A
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132352e302f32342d3234203d3e20323139343237.roa
Signing time:             Mon 03 Aug 2026 16:56:20 +0000
ROA not before:           Mon 03 Aug 2026 16:51:20 +0000
ROA not after:            Mon 02 Aug 2027 16:56:20 +0000
asID:                     219427
IP address blocks:        216.122.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 02:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:2f:8c:38:02:91:9d:96:7d:33:38:1e:b2:33:d6:ba:48:77:ea:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug  3 16:51:20 2026 GMT
            Not After : Aug  2 16:56:20 2027 GMT
        Subject: CN=63A72DAC10D873876702D95DD568A7C6D49B4054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c8:33:d7:bc:3e:65:f5:2b:b5:c2:2e:99:03:
                    0d:d2:72:ad:a0:77:bd:9b:c1:13:a5:7f:de:0b:26:
                    bd:7c:81:7e:f4:f7:23:fd:ee:a8:b5:46:75:c8:a4:
                    3c:df:c8:ba:e2:d2:dc:a2:e1:a4:31:96:29:d5:27:
                    95:fe:41:78:58:61:a4:60:46:58:9a:48:6c:06:c4:
                    08:d7:52:e9:c7:8b:88:93:ba:94:2b:8e:a9:17:a5:
                    a3:52:6b:74:5f:88:ae:97:54:bf:d5:ec:ed:cb:ef:
                    15:58:3a:b3:38:fe:22:4d:d7:0b:1a:b1:e3:96:97:
                    81:0c:d2:58:92:71:ec:c5:3f:ba:92:b6:e5:69:37:
                    c9:53:2c:24:2e:d8:ef:76:77:3e:91:d6:ff:5b:68:
                    66:84:f1:d6:18:80:17:b7:71:92:9a:0e:51:19:6d:
                    73:56:a2:ee:f3:99:1d:88:4c:f4:9f:4d:19:a5:64:
                    e2:78:6c:e9:a4:ce:9e:4b:8c:77:87:c5:7c:4b:6a:
                    1b:06:c2:ec:11:69:bd:5e:66:3e:5e:9d:ab:3b:ff:
                    81:c0:f9:25:71:08:23:dc:9e:c9:c6:9f:0e:c2:d0:
                    d4:c0:04:f5:cc:52:43:f5:e2:60:ec:01:a6:be:be:
                    bd:30:3b:f8:cc:d8:db:7e:3e:24:ef:7f:ff:b2:58:
                    bc:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:A7:2D:AC:10:D8:73:87:67:02:D9:5D:D5:68:A7:C6:D4:9B:40:54
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132352e302f32342d3234203d3e20323139343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:c9:28:2d:48:c5:d1:a0:f1:48:8a:63:df:7e:1e:4f:c1:f0:
         f3:f0:8b:96:86:f0:9c:e7:d6:3b:ed:6f:e7:50:2c:28:9f:67:
         48:82:45:f3:fa:49:d5:40:bb:77:0e:df:94:10:e3:22:e5:33:
         b9:05:8c:49:6f:d0:5a:f7:a3:ee:6c:05:a3:28:d4:4e:b0:cd:
         62:86:38:a3:ae:b7:f9:23:c6:b8:95:36:88:c5:75:d6:82:ba:
         8c:76:a3:2c:39:76:75:7a:54:12:91:e3:fc:1b:0b:fb:e6:38:
         39:8f:2b:a0:23:a0:3b:e8:d2:26:b1:93:9b:a8:a7:21:ad:67:
         04:df:d0:02:b0:7e:a1:cb:ce:79:02:0e:4d:b1:41:e6:b1:13:
         7c:dc:1c:bc:20:fe:08:7e:2c:22:24:08:e4:8a:68:07:e7:71:
         f4:4b:80:29:fb:07:95:56:5b:97:3e:fa:81:3e:6b:72:5a:09:
         35:04:a6:75:03:df:30:2f:16:97:b8:ad:5b:ec:0c:ec:dd:0a:
         cc:e1:05:c9:a3:40:7e:17:0f:c5:22:a5:13:8b:df:df:ad:36:
         08:8b:8c:46:0b:e2:a3:b1:d5:4f:f8:66:ca:91:8d:5b:47:eb:
         7f:2d:a1:fd:d4:b5:3e:17:47:e6:3d:d8:4f:4d:b8:be:b1:f3:
         ed:60:b7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:25:09 2026 by rpki-client