Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132362e302f32342d3234203d3e20323139343237.roa
File:                     3231362e3132322e3132362e302f32342d3234203d3e20323139343237.roa (raw, json)
Hash identifier:          MrxBmxeLmapiZh0EN7Mlh+Pj4KKJQFrq0wfA3fwH0vs=
Subject key identifier:   0F:25:C8:F4:98:B2:67:46:66:ED:83:C3:D4:93:4B:90:B1:4C:D2:7E
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2B80627F4CDEA8293A7709C526EE67F44D480CD6
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132362e302f32342d3234203d3e20323139343237.roa
Signing time:             Tue 04 Aug 2026 01:38:34 +0000
ROA not before:           Tue 04 Aug 2026 01:33:34 +0000
ROA not after:            Tue 03 Aug 2027 01:38:34 +0000
asID:                     219427
IP address blocks:        216.122.126.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 27 Aug 2026 02:18:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:80:62:7f:4c:de:a8:29:3a:77:09:c5:26:ee:67:f4:4d:48:0c:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug  4 01:33:34 2026 GMT
            Not After : Aug  3 01:38:34 2027 GMT
        Subject: CN=0F25C8F498B2674666ED83C3D4934B90B14CD27E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3d:3c:5f:3c:a6:c6:36:37:0f:3c:9e:29:5e:
                    7b:b4:1f:81:45:1d:c7:4f:c1:09:1e:5c:2e:1e:51:
                    a0:db:49:86:fb:1c:02:c9:28:ce:56:f6:02:59:10:
                    4a:c5:d5:81:4a:a3:f4:eb:c2:97:32:c9:75:17:a0:
                    16:6a:c7:29:03:58:39:a4:60:cb:5d:78:6b:92:da:
                    7c:97:9a:d0:5f:1f:7b:c4:4f:6e:95:68:17:bc:fd:
                    4e:91:1b:5e:6f:67:94:87:a7:57:00:dc:52:86:f3:
                    f4:8a:48:0a:b5:eb:f3:93:a7:a7:22:f6:92:22:01:
                    86:1f:d7:de:a7:94:4d:f8:89:c2:d7:d7:cf:3b:4d:
                    37:8d:85:0d:87:b0:c6:95:80:63:98:9c:0a:ff:62:
                    b9:fd:b3:c6:30:29:9d:ab:6f:35:d3:d0:fe:ba:22:
                    ac:ba:5f:8b:7b:d6:21:e9:b4:fa:49:81:00:48:11:
                    16:7d:11:be:d2:f6:fc:d3:b0:1c:be:10:00:d4:10:
                    21:ff:2d:98:85:ef:f2:df:7d:a8:e9:9c:98:ea:fe:
                    0b:64:d3:2a:6c:ab:35:de:24:4e:4f:3b:23:70:f4:
                    9c:78:4d:de:d2:e6:92:f0:45:a8:04:0e:49:37:58:
                    bc:da:6b:be:b6:79:a0:72:0f:51:62:78:b2:0c:a3:
                    c6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:25:C8:F4:98:B2:67:46:66:ED:83:C3:D4:93:4B:90:B1:4C:D2:7E
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132362e302f32342d3234203d3e20323139343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:ae:fe:69:bb:88:7b:c8:04:c9:73:1a:0b:d5:bc:0b:16:b1:
         ba:fd:45:56:08:ca:bd:b1:ef:aa:f2:14:08:76:4c:ce:ca:c0:
         4c:26:bc:5f:77:33:ea:63:28:0f:f5:5f:db:e3:cf:d2:ae:71:
         04:bf:c7:1a:27:de:2c:b6:7b:3a:57:ca:d3:df:9d:92:a0:32:
         5c:d1:f3:4e:2c:bc:47:82:f5:72:65:72:ae:90:94:0c:30:74:
         31:7a:9f:9d:40:69:b4:44:a7:f9:8b:22:68:d7:19:a1:f6:b9:
         1b:df:38:c0:b9:09:70:1f:68:f2:00:a0:a8:4d:1e:36:3c:a6:
         ee:1b:20:0d:c5:54:5f:b1:31:10:60:f4:94:f5:32:5c:15:d9:
         95:93:7d:9b:f4:1a:49:ae:9f:d0:2a:ef:50:96:63:cc:93:e5:
         54:f1:68:9c:18:3e:72:d9:bc:fc:52:7f:3f:a4:90:99:7b:5f:
         58:28:a4:7f:a1:d7:7b:67:f0:dc:67:3d:ec:9e:51:cd:7c:3c:
         2b:ba:e4:f9:bb:6a:3a:1d:39:ce:de:fb:0d:99:00:79:8a:3f:
         0d:d1:9f:59:72:ca:cb:c7:e8:36:c2:41:06:00:8a:c0:4c:17:
         26:66:7d:22:32:29:57:10:5e:77:b9:2b:d8:7f:7e:e9:04:2e:
         86:90:27:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:25:09 2026 by rpki-client