Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130322e302f32332d3234203d3e2032373131.roa
File:                     3231362e3234372e3130322e302f32332d3234203d3e2032373131.roa (raw, json)
Hash identifier:          jVMZJz5zzLM5OkGm118CiVpxXlTIr9Z/Vpe3hty/sic=
Subject key identifier:   6F:1E:A4:33:F5:A1:A4:0D:32:77:F3:67:27:B0:D3:FF:1D:43:7F:05
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       18A309B60D7C2C11FFDC727D66D8D095AC3E03CE
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130322e302f32332d3234203d3e2032373131.roa
Signing time:             Tue 05 May 2026 08:36:00 +0000
ROA not before:           Tue 05 May 2026 08:31:00 +0000
ROA not after:            Tue 04 May 2027 08:36:00 +0000
asID:                     2711
IP address blocks:        216.247.102.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 09:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a3:09:b6:0d:7c:2c:11:ff:dc:72:7d:66:d8:d0:95:ac:3e:03:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May  5 08:31:00 2026 GMT
            Not After : May  4 08:36:00 2027 GMT
        Subject: CN=6F1EA433F5A1A40D3277F36727B0D3FF1D437F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d8:38:69:df:6f:82:13:d2:cf:a7:b1:56:10:
                    9f:cd:fa:8e:31:7f:a9:5d:04:3c:b1:d2:84:d5:54:
                    85:83:cd:13:32:83:78:c2:23:db:f9:21:f8:19:cf:
                    3f:10:fe:77:6a:ef:d1:fd:50:f7:fb:4f:7a:e0:7a:
                    52:64:99:70:f2:31:08:71:59:1a:12:ae:b1:ea:b4:
                    2e:ff:84:62:dc:fc:01:9c:15:80:e3:ce:7c:d1:2f:
                    84:f2:47:e1:23:ee:9e:c9:18:13:3b:7b:35:fb:a7:
                    b8:86:25:6b:58:e4:2e:00:72:f8:3d:50:9c:e0:dd:
                    d3:aa:49:12:fa:a6:2b:70:23:1d:80:25:4e:d5:c7:
                    a4:4c:3b:26:96:c9:af:31:15:b6:45:24:33:65:61:
                    14:78:fb:34:4b:de:27:16:fa:d6:98:33:89:a1:bf:
                    83:0a:96:ce:91:74:c4:6f:d1:4f:1c:e0:64:1f:2a:
                    df:3c:99:87:e5:ad:47:2d:dd:f8:94:7d:b7:26:1a:
                    fa:fd:a4:ce:b2:fb:86:92:8f:65:cc:77:85:2e:33:
                    41:58:72:b3:a7:56:74:b5:da:e1:dc:57:52:06:e8:
                    c8:7f:9f:ee:ca:d6:b4:d1:53:d3:16:4d:d9:d8:7b:
                    4c:68:b4:c5:59:c6:02:98:44:9a:22:79:f8:4e:4b:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:1E:A4:33:F5:A1:A4:0D:32:77:F3:67:27:B0:D3:FF:1D:43:7F:05
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130322e302f32332d3234203d3e2032373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         36:20:ba:22:a4:38:cf:a8:b3:47:d2:a9:f6:e3:3d:26:e4:04:
         ac:cc:b9:37:70:5c:33:48:c9:11:26:7b:63:dc:22:e7:24:55:
         5f:6f:25:30:6f:ad:c1:35:95:ad:0d:83:8d:33:65:d7:11:31:
         75:d0:b8:7d:a9:d5:5d:7e:53:22:d6:43:83:b5:4a:4a:51:98:
         df:f6:b6:da:de:f6:56:c4:0f:c6:98:65:cb:81:1b:28:d4:89:
         70:e6:2b:d7:85:cc:b9:6b:b5:55:2d:47:06:89:f6:d0:19:df:
         1e:33:39:a6:e1:97:ca:89:8d:21:14:df:57:08:72:98:17:68:
         15:91:45:fd:46:df:73:a2:f3:d7:e8:d4:75:96:1d:ab:27:0d:
         dc:1d:de:a5:d1:91:2e:c4:d4:b9:0e:b1:31:ca:df:b4:df:02:
         0c:88:3b:08:bb:38:82:4c:67:4d:3b:cd:8e:a1:49:66:c3:a1:
         44:c5:66:b5:42:dc:7e:3b:e1:13:4c:c9:64:d1:2b:d0:8f:62:
         bb:eb:0c:13:23:fe:10:06:fa:37:27:5c:bd:64:e5:d2:3b:3d:
         d8:06:2f:4a:be:b7:d1:87:e0:ac:6a:b9:34:da:12:80:fd:50:
         9c:d4:c7:a0:f0:4c:ed:ef:ad:dc:a2:90:f1:3c:bb:ba:66:0e:
         eb:cf:c7:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 23:39:42 2026 by rpki-client