Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132362e302f32342d3234203d3e20323138383837.roa
File:                     3231362e3132322e3132362e302f32342d3234203d3e20323138383837.roa (raw, json)
Hash identifier:          l1sLWAdqG0ITZhJEURduLCtK7dm+QxAwFDj+anMDKxg=
Subject key identifier:   23:FA:9E:43:62:50:EA:C9:5F:B3:AF:C7:62:F2:FC:5F:6E:07:EE:55
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       643349D96E14EBD623CD86919502C1828D493D22
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132362e302f32342d3234203d3e20323138383837.roa
Signing time:             Mon 07 Sep 2026 09:32:49 +0000
ROA not before:           Mon 07 Sep 2026 09:27:49 +0000
ROA not after:            Mon 06 Sep 2027 09:32:49 +0000
asID:                     218887
IP address blocks:        216.122.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Sep 2026 16:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:33:49:d9:6e:14:eb:d6:23:cd:86:91:95:02:c1:82:8d:49:3d:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep  7 09:27:49 2026 GMT
            Not After : Sep  6 09:32:49 2027 GMT
        Subject: CN=23FA9E436250EAC95FB3AFC762F2FC5F6E07EE55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:17:8f:93:f1:8e:53:2c:91:96:08:30:b3:03:
                    58:b8:50:ce:47:80:0f:e4:24:9c:23:ea:a1:23:7f:
                    2d:79:04:7d:1f:44:5b:c8:09:3d:06:2b:3b:f9:64:
                    87:b0:43:dc:7e:54:a1:a3:72:06:23:f3:1b:42:45:
                    05:fb:c8:5d:45:2e:e9:ae:63:b8:67:63:c8:08:d9:
                    f8:37:da:a0:86:ee:8f:f3:6f:e0:8d:66:3f:a3:4f:
                    06:d2:eb:5f:77:67:37:af:0c:63:d7:e7:91:6b:7b:
                    30:7b:73:3e:3b:25:d5:fa:8a:1c:34:08:d4:cd:db:
                    f9:4a:82:e3:a7:e6:d7:9e:48:c3:00:00:30:90:75:
                    54:0a:22:bc:b8:21:23:22:15:f4:d1:ab:fa:a1:cf:
                    e3:75:f9:b7:20:13:ec:cf:46:2b:38:53:9c:61:f5:
                    81:8e:33:f0:7c:ff:f5:8f:60:88:6b:31:74:19:09:
                    19:22:a6:f3:6a:bd:91:61:c0:ce:84:cb:78:be:11:
                    71:e4:90:af:f3:40:74:f6:e6:91:ed:57:66:b2:79:
                    83:c1:5c:fb:88:fc:5e:54:0c:17:e8:9c:58:81:54:
                    5d:ed:2e:83:5b:e7:67:6a:7c:19:e9:12:fc:03:ff:
                    1c:03:56:c2:8d:fa:db:ab:61:83:39:1c:e6:fc:fa:
                    ea:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:FA:9E:43:62:50:EA:C9:5F:B3:AF:C7:62:F2:FC:5F:6E:07:EE:55
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132362e302f32342d3234203d3e20323138383837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:1b:34:ef:20:79:8e:99:bb:6c:ca:ad:22:b4:d6:9d:11:f2:
         87:fa:63:d5:4d:b5:c6:f8:7b:88:d4:01:92:79:15:ec:e0:a7:
         d0:19:53:74:f8:5a:b4:09:d6:30:df:cd:9f:fc:fc:18:4f:e4:
         d5:a4:c4:98:c3:2e:2d:54:18:64:ee:4e:6d:15:27:8c:46:23:
         3a:0b:ad:01:dc:89:a7:89:b2:2e:27:2f:81:4e:ef:15:03:89:
         81:de:d9:07:34:41:de:1f:cb:2d:7b:d1:94:e5:3f:86:57:9c:
         03:ff:fa:77:8e:81:6a:cf:d1:7a:c7:8b:1a:14:ae:72:dd:60:
         8c:f1:00:05:7e:cc:6d:bc:2e:a1:52:aa:e3:66:22:91:93:53:
         b2:0e:05:29:6d:af:ab:d2:c4:11:8c:92:bd:dc:05:7f:54:93:
         c2:c3:73:1c:d1:72:2f:de:01:69:3a:f8:67:56:8a:3c:7a:87:
         a1:02:04:49:90:2a:1d:bf:4f:2e:32:25:61:76:38:f8:b3:56:
         3f:eb:35:94:2e:2f:f9:39:78:1e:0d:fb:6e:2f:ee:f9:ef:60:
         72:75:f9:05:cb:d2:c8:aa:a4:03:d4:74:97:99:1f:28:a3:9d:
         3c:bf:ca:1d:89:b9:71:4a:e1:49:89:5d:5b:65:b0:9d:dc:4e:
         36:1c:38:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 07:33:01 2026 by rpki-client