Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20383334.roa
File:                     3231362e3234372e3130352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          KH8sBo0X5/4HehunQySdLH0CH/OLlIuu8vv5qF14Zfo=
Subject key identifier:   99:B7:5F:C4:B1:62:A7:31:19:92:41:78:99:72:CF:17:3F:60:2F:BE
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       06E3DF2246BC17F6B65BB47C151D0A940C610224
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20383334.roa
Signing time:             Tue 01 Sep 2026 08:28:18 +0000
ROA not before:           Tue 01 Sep 2026 08:23:18 +0000
ROA not after:            Tue 31 Aug 2027 08:28:18 +0000
asID:                     834
IP address blocks:        216.247.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e3:df:22:46:bc:17:f6:b6:5b:b4:7c:15:1d:0a:94:0c:61:02:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep  1 08:23:18 2026 GMT
            Not After : Aug 31 08:28:18 2027 GMT
        Subject: CN=99B75FC4B162A731199241789972CF173F602FBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a9:82:bd:f1:07:f1:1e:d3:28:f7:0f:39:a9:
                    dc:1e:7f:d4:7a:88:14:63:79:90:21:a0:de:98:a9:
                    66:66:8a:c1:40:9e:0c:17:7e:f2:a2:6d:21:e9:94:
                    97:62:27:5a:5a:07:bd:5d:3f:bd:c0:01:d3:16:25:
                    83:7f:1a:e5:f7:5b:7f:1a:fc:bb:8d:80:f7:37:91:
                    fe:da:24:77:85:5d:c6:1d:fb:68:24:7f:2b:c4:b7:
                    c1:bb:06:21:32:a6:af:b8:c0:0f:aa:44:62:20:e3:
                    c8:aa:9f:68:49:e8:33:eb:85:6e:d4:0f:65:5c:98:
                    a4:f5:da:5b:91:36:30:e1:90:a6:b6:4f:33:a2:03:
                    6a:04:b4:cb:81:c4:7d:4e:14:35:21:98:61:fd:2e:
                    13:f5:94:fd:c9:95:e1:f0:6e:22:05:37:c3:43:20:
                    6b:a9:d5:34:10:41:cb:7f:d4:93:95:39:b7:2b:e0:
                    4d:ad:73:9a:cf:01:22:eb:37:0c:f5:a1:09:2e:c6:
                    85:91:7b:1e:54:6a:c0:44:df:4e:89:1b:e0:49:f2:
                    25:c9:ee:15:20:cd:c3:f1:65:7e:e0:fe:d9:0e:bd:
                    25:b2:53:24:2d:a2:7d:69:01:22:60:5d:97:60:b5:
                    fc:d1:a8:f9:e2:10:80:f9:1a:c5:7a:7a:08:36:bb:
                    10:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B7:5F:C4:B1:62:A7:31:19:92:41:78:99:72:CF:17:3F:60:2F:BE
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:2b:db:3c:97:ff:e6:4d:dc:15:b7:ae:7e:49:8c:5c:7d:79:
         ab:ba:55:88:75:15:03:95:d6:0f:32:07:69:a3:de:41:5c:56:
         56:15:73:2c:dc:84:e9:fb:41:1b:31:29:b3:e0:4d:93:5c:26:
         28:8d:c1:4a:17:18:cb:d0:48:b2:ff:72:fe:cd:eb:d2:13:6f:
         55:e8:2d:81:4e:71:1c:b3:b9:7b:01:18:9f:eb:7a:7d:4d:5d:
         a5:74:fb:7e:6f:89:a2:c6:58:52:a6:9b:db:48:61:de:b6:60:
         3d:c6:50:60:25:4d:6a:03:27:76:6f:92:4a:c4:f5:36:c9:57:
         fb:df:96:4a:64:2d:a2:40:a9:7f:cc:da:c7:18:cd:a4:7b:53:
         11:f8:b2:a9:77:31:cd:97:a8:63:24:79:23:0b:15:04:06:0b:
         4a:d4:87:69:cd:73:5d:f2:43:40:7c:8a:08:e8:f8:48:2a:a3:
         6d:94:fe:59:2a:9f:3f:b1:8f:22:b3:00:87:63:be:f1:63:d3:
         cf:1d:2f:8b:e1:31:5f:f1:d4:05:4b:03:71:cd:a4:dc:e2:43:
         02:2f:61:d4:c7:bd:11:9b:72:d1:cd:d3:80:48:a0:1b:ca:0f:
         63:09:e6:e4:00:43:d3:21:d0:f0:82:46:51:3a:21:38:28:59:
         f6:2b:1e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 21:11:29 2026 by rpki-client