Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232362e302f32332d3234203d3e20383334.roa
File:                     36392e3136362e3232362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          p2L9o0k/4KXPWPCRxNFL357IrcdzIAY8HrILI7Jvpw4=
Subject key identifier:   9B:C8:55:B8:29:E0:A0:2D:30:13:29:66:87:0B:44:EB:EC:58:7C:3D
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       38D98056AD479171C8795089291F9949B48FDC89
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232362e302f32332d3234203d3e20383334.roa
Signing time:             Mon 25 May 2026 11:51:03 +0000
ROA not before:           Mon 25 May 2026 11:46:03 +0000
ROA not after:            Mon 24 May 2027 11:51:03 +0000
asID:                     834
IP address blocks:        69.166.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 04:37:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d9:80:56:ad:47:91:71:c8:79:50:89:29:1f:99:49:b4:8f:dc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: May 25 11:46:03 2026 GMT
            Not After : May 24 11:51:03 2027 GMT
        Subject: CN=9BC855B829E0A02D30132966870B44EBEC587C3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7b:b7:cd:19:a7:61:08:da:44:79:92:5f:0e:
                    32:48:7a:53:46:a5:09:21:aa:57:af:20:37:ba:98:
                    25:0b:60:a2:9e:94:c4:58:11:e0:4f:d6:d5:cf:63:
                    81:3d:16:d6:f2:87:2e:97:08:94:6d:37:1f:9a:cf:
                    53:94:df:76:82:cf:55:32:b6:fe:23:6f:94:bd:7a:
                    fb:71:4b:ba:06:63:4c:46:1c:ca:e0:bc:26:79:09:
                    1a:af:22:05:f6:8e:dc:a5:e9:0c:f4:75:8c:1d:93:
                    b0:1a:44:df:85:6e:b1:7a:ed:0c:d3:26:93:4e:5e:
                    5b:94:bc:03:3a:46:64:0d:1f:ee:2b:1b:2e:f7:d4:
                    25:56:88:d0:2c:8e:f4:e9:1b:2d:98:e2:6a:f8:be:
                    8d:4b:bf:51:e5:2d:ac:c2:d6:5f:f7:20:00:95:7e:
                    5e:b8:79:b5:5c:b5:c8:c5:75:2c:ec:cb:a9:10:f5:
                    c2:c4:fb:6a:28:3c:2b:c4:86:20:23:36:cc:0e:a8:
                    15:e0:cc:59:33:dc:c6:dc:5a:d5:3c:a9:13:22:a1:
                    73:9f:d2:d9:cb:ab:cc:12:1f:40:05:89:bb:11:4e:
                    b4:5e:be:0b:35:35:98:6a:44:05:ef:f4:bf:ce:c9:
                    7d:c8:59:bc:01:7c:98:6f:c5:af:87:d1:c2:b4:30:
                    bb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C8:55:B8:29:E0:A0:2D:30:13:29:66:87:0B:44:EB:EC:58:7C:3D
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232362e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:28:33:a3:12:42:1b:7d:0f:30:c1:a3:33:90:d5:c2:71:
         54:68:a4:10:00:5f:ce:71:dc:89:2c:b2:fb:c6:0f:79:e2:6c:
         a4:dc:5d:41:29:4c:4f:20:87:a6:91:6d:2e:a7:bb:82:f8:c5:
         b2:fb:82:f7:32:9f:79:85:6d:15:0e:d7:6f:7d:63:36:10:fc:
         7c:11:45:ac:5c:26:cf:4d:cb:85:6c:0b:55:06:67:c8:81:df:
         3b:86:cf:72:76:d3:78:a0:e6:03:0b:75:f4:10:f3:8f:04:f3:
         5f:ed:0f:33:b9:8e:ad:40:60:d6:77:23:88:bc:5d:7b:ef:e6:
         9b:02:43:62:6b:b1:13:94:4e:8c:73:f1:28:32:58:21:7f:fd:
         71:1e:14:0f:2a:47:2a:d1:6d:3f:84:f7:5b:16:3c:2f:e9:1e:
         b3:51:1c:f3:b4:b9:7e:8f:82:7c:eb:15:6b:23:52:66:f8:f5:
         c4:9f:41:e8:be:f3:d7:f5:12:66:a5:70:47:98:f3:90:21:72:
         b8:08:65:5c:1d:40:fd:c2:89:db:3c:39:38:2e:dd:2a:84:5d:
         00:64:ab:19:72:b2:78:3c:cb:3b:74:06:e3:43:11:fb:61:07:
         b2:2a:7a:7b:37:5e:b2:6d:05:cd:77:bb:04:a4:c8:ea:6a:ef:
         63:89:86:0d
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUONmAVq1HkXHIeVCJKR+ZSbSP3IkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDgzMDcyM2Y1ODNiM2UzZDRmMGE4YzU1NTY5OGQ4MDJk
ZTA2NWE1ZGE4OTMzOTk4ZTAwHhcNMjYwNTI1MTE0NjAzWhcNMjcwNTI0MTE1MTAz
WjAzMTEwLwYDVQQDEyg5QkM4NTVCODI5RTBBMDJEMzAxMzI5NjY4NzBCNDRFQkVD
NTg3QzNEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3u3zRmnYQja
RHmSXw4ySHpTRqUJIapXryA3upglC2CinpTEWBHgT9bVz2OBPRbW8oculwiUbTcf
ms9TlN92gs9VMrb+I2+UvXr7cUu6BmNMRhzK4LwmeQkaryIF9o7cpekM9HWMHZOw
GkTfhW6xeu0M0yaTTl5blLwDOkZkDR/uKxsu99QlVojQLI706RstmOJq+L6NS79R
5S2swtZf9yAAlX5euHm1XLXIxXUs7MupEPXCxPtqKDwrxIYgIzbMDqgV4MxZM9zG
3FrVPKkTIqFzn9LZy6vMEh9ABYm7EU60Xr4LNTWYakQF7/S/zsl9yFm8AXyYb8Wv
h9HCtDC7dQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFJvIVbgp4KAtMBMpZocLROvs
WHw9MB8GA1UdIwQYMBaAFNQIcBJ18jyH/kLNbEKyXdsOVIKSMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMzOTQ1OWIyYmVhLzAv
RDQwODcwMTI3NUYyM0M4N0ZFNDJDRDZDNDJCMjVEREIwRTU0ODI5Mi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzYxNTRmOTZiLTZiOGYtNDhkNC05NGJkLWRkZDJjOWZmZjVhYi8wODMw
NzIzZjU4M2IzZTNkNGYwYThjNTU1Njk4ZDgwMmRlMDY1YTVkYTg5MzM5OThlMC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MWMz
OTQ1OWIyYmVhLzAvMzYzOTJlMzEzNjM2MmUzMjMyMzYyZTMwMmYzMjMzMmQzMjM0
MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFFpuIwDQYJKoZIhvcNAQELBQADggEB
AGywKDOjEkIbfQ8wwaMzkNXCcVRopBAAX85x3IkssvvGD3nibKTcXUEpTE8gh6aR
bS6nu4L4xbL7gvcyn3mFbRUO1299YzYQ/HwRRaxcJs9Ny4VsC1UGZ8iB3zuGz3J2
03ig5gMLdfQQ848E81/tDzO5jq1AYNZ3I4i8XXvv5psCQ2JrsROUToxz8SgyWCF/
/XEeFA8qRyrRbT+E91sWPC/pHrNRHPO0uX6PgnzrFWsjUmb49cSfQei+89f1Emal
cEeY85AhcrgIZVwdQP3Cids8OTgu3SqEXQBkqxlysng8yzt0BuNDEfthB7Iqens3
XrJtBc13uwSkyOpq72OJhg0=
-----END CERTIFICATE-----
Generated at Fri Jun 12 05:13:54 2026 by rpki-client