Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e203633303233.roa
File:                     3136322e3231382e32372e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          xmS8NE4aVWVzTOJpT2Z5BDPXL85cfo96QzEfRvVery4=
Subject key identifier:   5D:97:E5:CE:47:35:82:A2:41:D6:61:6C:90:05:BD:83:12:04:40:2F
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       799A77AE934ACC85286EBF5E6F1A8DF0F7D19DB8
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e203633303233.roa
Signing time:             Fri 02 Oct 2026 22:36:20 +0000
ROA not before:           Fri 02 Oct 2026 22:31:20 +0000
ROA not after:            Fri 01 Oct 2027 22:36:20 +0000
asID:                     63023
IP address blocks:        162.218.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 17:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:9a:77:ae:93:4a:cc:85:28:6e:bf:5e:6f:1a:8d:f0:f7:d1:9d:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Oct  2 22:31:20 2026 GMT
            Not After : Oct  1 22:36:20 2027 GMT
        Subject: CN=5D97E5CE473582A241D6616C9005BD831204402F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b8:31:c3:f6:a5:53:ac:c5:d6:d2:ca:24:8b:
                    a6:24:d3:51:94:62:42:db:ed:74:bb:6e:32:ca:df:
                    24:d7:ef:81:a0:1a:78:26:76:23:aa:dd:53:03:af:
                    1e:50:71:27:ec:1b:70:73:ad:66:2b:4a:9f:d1:a4:
                    16:be:8f:c5:71:04:89:76:77:cc:e7:de:a8:5f:64:
                    b7:d9:ed:32:5a:55:57:6f:49:3a:c9:73:5b:22:fc:
                    a1:53:ee:d2:80:f2:f1:22:d6:50:f3:77:50:88:ce:
                    b3:b8:b2:9b:f9:81:91:6a:f4:f4:20:81:b1:0a:da:
                    a4:19:33:f3:5c:2b:90:e4:c7:6b:13:25:d5:98:c6:
                    3f:e9:23:2a:74:8b:45:20:af:c1:a6:8b:8b:45:f8:
                    5a:1e:e8:8e:9d:9e:08:1b:cc:4f:1e:a8:b5:ef:3d:
                    72:a9:3d:de:03:a7:06:6f:a7:cf:92:bd:cd:23:b6:
                    0e:75:dc:60:80:fd:d7:0b:5f:e4:67:3b:ff:10:b0:
                    5c:d1:a9:7a:88:65:8c:66:ca:a1:5c:4e:20:30:86:
                    72:c4:93:58:bd:5d:ee:ca:8b:e3:8e:e1:32:68:24:
                    f2:12:06:38:f8:82:ec:34:97:b1:cd:b4:3c:1c:98:
                    57:48:6a:68:e0:22:f9:6d:76:23:20:e9:cf:eb:57:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:97:E5:CE:47:35:82:A2:41:D6:61:6C:90:05:BD:83:12:04:40:2F
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32372e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:3d:a5:bd:d6:da:46:c7:97:21:24:7e:52:80:0d:f6:b5:36:
         1e:98:a7:2d:45:e9:e1:d5:96:29:8c:f5:6c:10:d9:0a:8a:d9:
         bd:e5:5e:82:4a:ca:8f:91:e0:f5:55:85:41:13:73:1a:3a:6b:
         1a:52:09:aa:f2:4f:dd:61:ce:db:bc:81:f6:c1:73:a5:79:88:
         82:ee:3f:a4:ef:d7:cc:50:34:23:7c:a3:1e:a0:5a:99:f9:4d:
         e7:f3:17:4c:f3:a5:c1:0b:e9:61:e2:6e:b0:5c:97:9e:70:17:
         d3:b4:9e:6e:14:91:32:e3:f1:6b:72:53:4b:a1:1c:44:89:15:
         dc:83:d2:10:2e:8f:1b:5f:3b:9f:cb:88:ad:8d:ae:b9:1c:25:
         24:84:45:33:c9:c5:48:7a:75:3c:2b:83:c3:da:f6:4a:3c:bb:
         63:12:78:a8:f4:79:26:d3:4e:4f:e1:d0:64:a2:5f:f5:29:d3:
         2b:a8:c4:c4:51:c7:9f:6b:ee:a8:6b:53:35:83:46:da:13:2d:
         b9:9e:d3:17:f1:69:1f:53:d4:33:8a:93:8b:d4:96:91:b9:5a:
         f1:35:61:ff:b5:34:52:22:b5:fa:35:62:c4:35:96:11:c6:1c:
         1b:0d:0e:9c:91:49:cc:1f:ce:0c:ca:2c:2c:7f:5b:20:fb:de:
         b9:4c:63:71
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUeZp3rpNKzIUobr9ebxqN8PfRnbgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjYxMDAyMjIzMTIwWhcNMjcxMDAxMjIzNjIw
WjAzMTEwLwYDVQQDEyg1RDk3RTVDRTQ3MzU4MkEyNDFENjYxNkM5MDA1QkQ4MzEy
MDQ0MDJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7gxw/alU6zF
1tLKJIumJNNRlGJC2+10u24yyt8k1++BoBp4JnYjqt1TA68eUHEn7Btwc61mK0qf
0aQWvo/FcQSJdnfM596oX2S32e0yWlVXb0k6yXNbIvyhU+7SgPLxItZQ83dQiM6z
uLKb+YGRavT0IIGxCtqkGTPzXCuQ5MdrEyXVmMY/6SMqdItFIK/BpouLRfhaHuiO
nZ4IG8xPHqi17z1yqT3eA6cGb6fPkr3NI7YOddxggP3XC1/kZzv/ELBc0al6iGWM
ZsqhXE4gMIZyxJNYvV3uyovjjuEyaCTyEgY4+ILsNJexzbQ8HJhXSGpo4CL5bXYj
IOnP61fmGwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFF2X5c5HNYKiQdZhbJAFvYMS
BEAvMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzYzMjJlMzIzMTM4MmUzMjM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMzMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKLaGzANBgkqhkiG9w0BAQsF
AAOCAQEAdD2lvdbaRseXISR+UoAN9rU2HpinLUXp4dWWKYz1bBDZCorZveVegkrK
j5Hg9VWFQRNzGjprGlIJqvJP3WHO27yB9sFzpXmIgu4/pO/XzFA0I3yjHqBamflN
5/MXTPOlwQvpYeJusFyXnnAX07SebhSRMuPxa3JTS6EcRIkV3IPSEC6PG187n8uI
rY2uuRwlJIRFM8nFSHp1PCuDw9r2Sjy7YxJ4qPR5JtNOT+HQZKJf9SnTK6jExFHH
n2vuqGtTNYNG2hMtuZ7TF/FpH1PUM4qTi9SWkbla8TVh/7U0UiK1+jVixDWWEcYc
Gw0OnJFJzB/ODMosLH9bIPveuUxjcQ==
-----END CERTIFICATE-----
Generated at Thu Oct 8 00:48:58 2026 by rpki-client