Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130312e302f32342d3234203d3e2032373131.roa
File:                     3231362e3234372e3130312e302f32342d3234203d3e2032373131.roa (raw, json)
Hash identifier:          tRA/YswBDcscZ7pCH+VYp68VpW7FLesBSkdSmu5pjoQ=
Subject key identifier:   44:06:14:64:55:83:CB:94:15:89:C2:EF:9B:99:61:6D:55:40:24:C0
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       5A4ADA39050A9AC8568C4814C1EFB2EAD8C148EE
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130312e302f32342d3234203d3e2032373131.roa
Signing time:             Tue 05 May 2026 08:36:00 +0000
ROA not before:           Tue 05 May 2026 08:31:00 +0000
ROA not after:            Tue 04 May 2027 08:36:00 +0000
asID:                     2711
IP address blocks:        216.247.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 09:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:4a:da:39:05:0a:9a:c8:56:8c:48:14:c1:ef:b2:ea:d8:c1:48:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May  5 08:31:00 2026 GMT
            Not After : May  4 08:36:00 2027 GMT
        Subject: CN=440614645583CB941589C2EF9B99616D554024C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a9:ba:e4:5b:f5:a1:db:ae:6f:1a:01:cd:42:
                    98:85:9b:98:14:78:76:1e:f8:7f:09:c9:e9:55:f5:
                    eb:7a:c8:b2:7b:8d:49:b5:b7:5d:1e:d0:11:4a:8b:
                    77:ee:bd:f4:f4:02:53:52:e4:64:5e:c9:22:ae:71:
                    ab:fd:94:59:6c:6c:7c:6e:71:55:d8:74:ba:c0:e4:
                    99:bf:a9:01:ca:a4:58:a5:01:34:30:fc:d3:1c:b8:
                    4f:a2:0f:a1:06:93:b6:be:d4:19:09:7b:3e:0e:c0:
                    f4:92:51:39:3e:a1:6d:b6:30:f5:66:4a:ad:b7:3f:
                    cd:e6:d6:0a:19:b9:3b:99:a3:fc:3b:bf:27:1d:68:
                    5f:a1:4c:01:1f:f9:f1:e0:c1:b9:f8:c1:83:d4:7c:
                    65:17:7e:b0:dc:7f:ba:f8:a4:8d:40:ae:a9:8a:65:
                    a8:99:8e:61:dd:01:2f:8c:95:dc:4f:d3:c6:b9:bc:
                    da:d7:b1:28:21:e5:9a:1a:93:3b:51:69:59:1b:0b:
                    0c:65:c5:99:ba:ef:56:c0:c3:84:63:2a:e3:8a:62:
                    81:9b:28:5f:1d:6a:89:f7:0b:9a:ad:ce:fe:b1:8a:
                    fd:b5:7d:a1:77:ba:69:b1:1e:5d:26:f6:ee:b5:9d:
                    b6:1a:95:6a:42:68:c5:ca:6b:46:8d:61:f5:e2:17:
                    de:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:06:14:64:55:83:CB:94:15:89:C2:EF:9B:99:61:6D:55:40:24:C0
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130312e302f32342d3234203d3e2032373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:d2:17:2c:40:9e:9e:16:4d:33:4a:bc:bf:50:18:80:7a:80:
         54:4e:46:94:47:57:08:00:8b:63:5a:95:81:ba:4d:b8:71:59:
         8a:0e:0a:f3:5d:c1:92:c6:e4:4a:4c:e7:ef:37:3f:19:9c:5d:
         d9:5f:5d:a9:df:83:6f:c6:8c:0e:70:18:3c:e0:d8:bf:3a:f0:
         ca:6a:b5:fd:01:66:b5:6e:2f:9e:03:1c:a9:3b:14:7a:d3:8a:
         02:ef:27:e5:03:88:52:0c:9f:67:f0:93:a5:47:cc:d8:fb:26:
         35:31:c0:99:ca:2e:73:45:11:61:43:55:b4:a3:2d:58:51:0b:
         a6:3e:e4:83:0f:a7:53:5f:5d:be:4b:32:16:9b:ac:8b:22:2a:
         f6:ad:9b:3f:f3:19:50:f9:44:f8:25:b3:6b:b6:dd:2d:c4:0f:
         8f:7b:d8:50:70:3a:0b:70:ec:1b:1d:cd:36:6e:fe:4b:4b:d2:
         da:71:64:4c:b4:1a:40:8c:b0:dc:cf:73:a0:34:8f:e4:2f:87:
         f6:01:51:44:4a:9c:8b:33:da:71:09:fe:d0:60:84:96:e8:7a:
         fd:0e:a4:8d:e2:e0:16:4c:58:9e:1b:26:77:ee:b0:ed:81:1b:
         f2:e5:f1:97:e9:9f:48:76:f3:b8:b1:ac:e1:2e:65:a2:9a:32:
         e5:d1:2d:fb
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUWkraOQUKmshWjEgUwe+y6tjBSO4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjYwNTA1MDgzMTAwWhcNMjcwNTA0MDgzNjAw
WjAzMTEwLwYDVQQDEyg0NDA2MTQ2NDU1ODNDQjk0MTU4OUMyRUY5Qjk5NjE2RDU1
NDAyNEMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6m65Fv1oduu
bxoBzUKYhZuYFHh2Hvh/CcnpVfXresiye41JtbddHtARSot37r309AJTUuRkXski
rnGr/ZRZbGx8bnFV2HS6wOSZv6kByqRYpQE0MPzTHLhPog+hBpO2vtQZCXs+DsD0
klE5PqFttjD1Zkqttz/N5tYKGbk7maP8O78nHWhfoUwBH/nx4MG5+MGD1HxlF36w
3H+6+KSNQK6pimWomY5h3QEvjJXcT9PGubza17EoIeWaGpM7UWlZGwsMZcWZuu9W
wMOEYyrjimKBmyhfHWqJ9wuarc7+sYr9tX2hd7ppsR5dJvbutZ22GpVqQmjFymtG
jWH14hfeCwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFEQGFGRVg8uUFYnC75uZYW1V
QCTAMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzMTMwMzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjM3MzEzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANj3ZTANBgkqhkiG9w0BAQsF
AAOCAQEAiNIXLECenhZNM0q8v1AYgHqAVE5GlEdXCACLY1qVgbpNuHFZig4K813B
ksbkSkzn7zc/GZxd2V9dqd+Db8aMDnAYPODYvzrwymq1/QFmtW4vngMcqTsUetOK
Au8n5QOIUgyfZ/CTpUfM2PsmNTHAmcouc0URYUNVtKMtWFELpj7kgw+nU19dvksy
FpusiyIq9q2bP/MZUPlE+CWza7bdLcQPj3vYUHA6C3DsGx3NNm7+S0vS2nFkTLQa
QIyw3M9zoDSP5C+H9gFRREqcizPacQn+0GCEluh6/Q6kjeLgFkxYnhsmd+6w7YEb
8uXxl+mfSHbzuLGs4S5lopoy5dEt+w==
-----END CERTIFICATE-----
Generated at Tue May 5 23:39:24 2026 by rpki-client