Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20343032323336.roa
File:                     36392e3136362e3230352e302f32342d3234203d3e20343032323336.roa (raw, json)
Hash identifier:          Ps+ln6cQvCqOi73bsrgBIVGKyHIONN6YNz+UV47X4og=
Subject key identifier:   10:97:D3:FC:41:0E:DB:71:C9:DB:41:49:84:FA:5A:6C:16:83:6F:14
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       03A732EAAFF70CC893237154EA66A95C8D447192
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20343032323336.roa
Signing time:             Mon 06 Jul 2026 18:22:26 +0000
ROA not before:           Mon 06 Jul 2026 18:17:26 +0000
ROA not after:            Mon 05 Jul 2027 18:22:26 +0000
asID:                     402236
IP address blocks:        69.166.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 17:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:a7:32:ea:af:f7:0c:c8:93:23:71:54:ea:66:a9:5c:8d:44:71:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Jul  6 18:17:26 2026 GMT
            Not After : Jul  5 18:22:26 2027 GMT
        Subject: CN=1097D3FC410EDB71C9DB414984FA5A6C16836F14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2a:62:e4:26:6f:92:e1:31:70:27:cd:f7:0b:
                    c3:4a:a4:ad:12:8b:b0:8c:0d:05:bb:4b:ba:60:bc:
                    20:a3:92:09:f4:eb:f2:1f:0f:d4:57:09:ee:85:38:
                    23:4a:22:67:f3:6e:56:89:d7:a1:86:5c:7b:08:e5:
                    7a:d9:64:75:dc:ba:19:87:46:57:1d:19:cc:b3:e8:
                    79:63:07:42:37:66:bd:29:66:42:f3:ad:72:28:08:
                    87:77:52:05:fc:a6:82:2e:6b:7d:5a:78:a5:c1:c1:
                    20:b5:a6:96:74:2c:79:6f:d1:33:3c:fb:36:b5:1c:
                    73:37:26:28:b4:55:97:86:87:8e:5c:cc:90:e1:52:
                    58:d6:c2:1c:87:28:d6:51:1e:43:d1:64:c7:c8:0a:
                    5e:1a:23:d0:82:d9:00:fe:c5:5c:65:86:f1:95:95:
                    03:f0:0a:c7:61:30:6f:2a:d8:1a:e4:02:b4:11:62:
                    92:17:fa:4f:3c:43:cd:fe:6c:88:bb:7a:f1:6d:71:
                    ea:a3:f2:e3:0e:c2:25:c2:ad:70:53:f9:79:fd:4f:
                    bd:90:76:4a:13:8a:99:a5:17:71:b8:c2:4a:0f:ef:
                    51:59:37:7b:f4:ab:90:69:6b:48:75:4d:fc:de:f3:
                    af:8d:84:5f:b7:b2:4e:61:df:1f:73:e3:06:a0:8a:
                    73:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:97:D3:FC:41:0E:DB:71:C9:DB:41:49:84:FA:5A:6C:16:83:6F:14
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e20343032323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:2d:8f:72:30:74:52:fe:90:0d:44:bf:b7:36:c7:94:b4:f3:
         b6:0a:dd:af:24:b9:ec:6d:41:ea:74:e5:86:48:99:37:86:71:
         4e:0f:75:37:99:95:dc:37:c7:5c:e8:43:4c:bf:57:a8:ab:0c:
         8a:fd:cb:20:ec:0e:b8:7f:9a:be:07:18:61:0c:15:fe:9e:55:
         c9:da:5f:05:04:fe:d5:1e:82:a6:99:c6:dc:5b:43:ca:15:6a:
         29:5a:32:c8:a3:4b:71:d9:17:95:92:9a:c9:25:f6:05:a0:3d:
         2f:6c:8c:04:7c:0e:3c:b6:e9:5e:4d:25:63:6b:f3:ce:67:1f:
         43:32:51:b2:97:cd:55:69:9c:82:58:00:6b:bd:71:46:93:32:
         b2:6f:56:cb:e8:d1:d8:ae:e1:39:66:2c:14:03:fc:25:25:b3:
         b2:39:c3:9f:c3:b4:ac:07:5e:8b:d0:8e:72:ea:93:7c:d7:e1:
         9d:bd:85:c2:c3:7f:48:39:7a:be:f0:58:cd:de:5e:a6:7a:7e:
         dc:c4:2b:5c:63:aa:b8:d8:33:2b:f5:30:ca:74:56:a1:59:4c:
         cb:41:7e:85:a7:d1:6d:45:ae:54:66:c1:2c:25:86:2f:9c:99:
         fa:4e:da:94:75:dd:7c:96:2a:a1:3e:ca:4f:3e:2a:09:1f:7f:
         61:05:f4:50
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUA6cy6q/3DMiTI3FU6mapXI1EcZIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjYwNzA2MTgxNzI2WhcNMjcwNzA1MTgyMjI2
WjAzMTEwLwYDVQQDEygxMDk3RDNGQzQxMEVEQjcxQzlEQjQxNDk4NEZBNUE2QzE2
ODM2RjE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSpi5CZvkuEx
cCfN9wvDSqStEouwjA0Fu0u6YLwgo5IJ9OvyHw/UVwnuhTgjSiJn825Widehhlx7
COV62WR13LoZh0ZXHRnMs+h5YwdCN2a9KWZC861yKAiHd1IF/KaCLmt9WnilwcEg
taaWdCx5b9EzPPs2tRxzNyYotFWXhoeOXMyQ4VJY1sIchyjWUR5D0WTHyApeGiPQ
gtkA/sVcZYbxlZUD8ArHYTBvKtga5AK0EWKSF/pPPEPN/myIu3rxbXHqo/LjDsIl
wq1wU/l5/U+9kHZKE4qZpRdxuMJKD+9RWTd79KuQaWtIdU383vOvjYRft7JOYd8f
c+MGoIpz6wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBCX0/xBDttxydtBSYT6WmwW
g28UMB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTFj
Mzk0NTliMmJlYS8wLzM2MzkyZTMxMzYzNjJlMzIzMDM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMyMzIzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARabNMA0GCSqGSIb3DQEB
CwUAA4IBAQB6LY9yMHRS/pANRL+3NseUtPO2Ct2vJLnsbUHqdOWGSJk3hnFOD3U3
mZXcN8dc6ENMv1eoqwyK/csg7A64f5q+BxhhDBX+nlXJ2l8FBP7VHoKmmcbcW0PK
FWopWjLIo0tx2ReVkprJJfYFoD0vbIwEfA48tuleTSVja/POZx9DMlGyl81VaZyC
WABrvXFGkzKyb1bL6NHYruE5ZiwUA/wlJbOyOcOfw7SsB16L0I5y6pN81+GdvYXC
w39IOXq+8FjN3l6men7cxCtcY6q42DMr9TDKdFahWUzLQX6Fp9FtRa5UZsEsJYYv
nJn6TtqUdd18liqhPspPPioJH39hBfRQ
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:21:28 2026 by rpki-client