Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20383334.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          FxzWAE+Q2k06ULTUYday57iT+1wkPOtsupo4hp91Rjo=
Subject key identifier:   41:2F:69:10:22:93:C6:8C:17:38:71:F2:E8:4D:DF:17:20:47:7D:A3
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       5D69CA2D355556A8E641703641B650E2B7847B11
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20383334.roa
Signing time:             Mon 20 Apr 2026 10:38:38 +0000
ROA not before:           Mon 20 Apr 2026 10:33:38 +0000
ROA not after:            Mon 19 Apr 2027 10:38:38 +0000
asID:                     834
IP address blocks:        216.247.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 05:56:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:69:ca:2d:35:55:56:a8:e6:41:70:36:41:b6:50:e2:b7:84:7b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Apr 20 10:33:38 2026 GMT
            Not After : Apr 19 10:38:38 2027 GMT
        Subject: CN=412F69102293C68C173871F2E84DDF1720477DA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:0c:f3:e9:fe:31:d2:e1:ae:cc:e4:0a:2b:01:
                    58:b7:96:48:52:99:87:06:3d:57:4c:66:ee:fe:02:
                    bd:40:87:6b:38:d7:7d:b8:c3:75:fe:a3:c0:28:c9:
                    68:63:42:53:2d:d4:d1:94:ba:55:6e:4f:b3:ef:53:
                    e5:ff:50:e3:de:55:1e:0a:e0:5c:90:07:2c:d3:85:
                    2e:70:4d:7c:39:ce:04:42:ff:c6:43:39:cb:44:b3:
                    f0:4d:09:b8:90:fc:4f:e4:7d:e7:93:67:3b:99:a3:
                    b3:56:4a:d1:80:f3:0f:ac:c6:a9:b4:c9:70:46:cd:
                    1c:96:ed:cc:d9:59:6c:98:fa:c9:86:af:c2:ea:5b:
                    a2:2d:dc:a1:96:3f:52:f9:34:4c:99:54:73:f8:03:
                    35:7f:76:e8:dc:87:55:e0:cb:c2:6d:c8:41:8d:cb:
                    d8:a1:8d:0d:db:b1:fa:e6:21:09:52:41:bd:e5:cc:
                    9b:1b:90:d0:02:f2:b9:4c:c7:53:65:12:48:67:ee:
                    39:82:c9:3c:79:a7:31:cb:34:6c:b2:9d:5d:c9:a4:
                    e0:79:c2:80:ec:07:9d:a3:03:1c:37:23:c7:ad:9c:
                    81:95:f5:0d:94:29:8d:b6:f4:79:5f:ba:99:7f:28:
                    ec:a8:fe:ac:3c:69:2b:59:cd:df:3d:ac:f4:b4:e3:
                    29:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:2F:69:10:22:93:C6:8C:17:38:71:F2:E8:4D:DF:17:20:47:7D:A3
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:87:99:81:43:ea:c8:78:1c:40:51:74:fa:8c:e1:1e:b5:4c:
         4a:72:36:8b:ae:c7:db:38:0b:05:7e:0b:09:b7:3d:4d:f8:af:
         61:68:78:6d:c8:07:bc:57:f6:c2:02:96:7c:c3:a3:9e:12:4b:
         17:5e:e8:93:21:a7:48:fa:90:37:cf:11:ce:52:19:ff:83:e6:
         4c:fd:d3:92:92:09:48:4d:ce:59:65:20:ff:8f:6c:6d:ad:75:
         87:c4:d6:dc:28:3c:98:40:2f:8c:61:bc:24:40:59:32:7f:7e:
         b2:83:2f:a0:be:20:37:5f:e3:7a:0c:96:6b:90:2c:b1:fd:a9:
         51:cd:bb:2d:a9:a3:0c:ef:8c:ff:55:f1:83:5d:77:af:fd:6a:
         8a:5e:81:3d:15:23:fc:70:68:d3:87:32:62:f8:14:89:c5:1b:
         cd:0a:fa:da:76:88:0e:f3:40:e2:cf:ac:1c:bb:41:02:b5:0b:
         d5:17:50:e0:fd:63:d8:59:6d:f5:18:ef:49:e5:d7:bb:bc:f3:
         44:4c:d3:d0:16:78:32:82:56:e4:3d:f5:76:59:62:6e:9c:e3:
         fb:d0:b3:3b:cc:94:b7:21:85:50:96:f0:fb:f9:3c:67:40:4c:
         b4:25:23:a4:27:2c:39:ec:77:de:13:2f:6a:81:a2:71:96:d0:
         3b:1d:8c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 15:31:05 2026 by rpki-client