Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32372e302f32342d3234203d3e2037303239.roa
File:                     3136322e3231372e32372e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          W3NtDOdLdJWbdXc5+8IG3va2m2qCuUoFgAcxp6dhw/Y=
Subject key identifier:   85:DB:13:0E:20:09:96:3E:7E:96:0D:18:D6:9B:1F:CF:FC:C8:DD:9A
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       30801D1C0617CED25E852BFA286640DAA402D548
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32372e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 13 Aug 2026 07:36:19 +0000
ROA not before:           Thu 13 Aug 2026 07:31:19 +0000
ROA not after:            Thu 12 Aug 2027 07:36:19 +0000
asID:                     7029
IP address blocks:        162.217.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 11:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:80:1d:1c:06:17:ce:d2:5e:85:2b:fa:28:66:40:da:a4:02:d5:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Aug 13 07:31:19 2026 GMT
            Not After : Aug 12 07:36:19 2027 GMT
        Subject: CN=85DB130E2009963E7E960D18D69B1FCFFCC8DD9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:07:e7:bd:5b:62:36:b5:87:95:07:ed:62:
                    39:73:2a:da:02:97:ce:96:c8:e6:38:d3:70:cf:24:
                    34:f4:c2:6b:ce:6a:1e:76:1d:ce:2b:15:89:f2:fc:
                    5d:d6:fe:ba:f2:83:d8:54:f8:b3:de:26:95:2e:5b:
                    77:72:ed:63:5a:da:7d:4b:53:7e:a6:e4:4c:ca:8d:
                    70:bd:11:bb:18:a9:85:ff:7f:4b:0c:b0:6e:c3:88:
                    3f:af:b0:7e:04:66:cd:be:02:cc:8d:dd:e4:f3:8b:
                    ca:ee:44:40:d0:bf:2c:c2:1e:98:da:bd:7a:d8:de:
                    60:6e:de:b7:06:3e:b7:ad:1a:09:3d:d4:27:28:fc:
                    02:b3:bb:d5:64:61:ef:6e:23:d6:3a:01:39:2c:03:
                    62:1b:e2:21:b9:08:d3:cd:99:91:20:36:71:6d:76:
                    61:e1:1b:37:8f:db:8a:be:b9:0c:2f:c1:f2:19:42:
                    8d:50:04:70:61:ed:1b:dd:ce:91:91:f8:1e:2e:f0:
                    ae:90:f1:a6:de:f3:b0:42:96:08:69:2a:aa:12:29:
                    a1:5d:a4:79:a5:d9:fa:24:90:8c:e7:ed:93:66:72:
                    c1:da:68:e9:90:1e:61:2c:0f:8c:a3:db:b0:4b:79:
                    27:9b:50:5d:e4:ba:70:e9:4e:59:85:99:42:84:97:
                    40:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:DB:13:0E:20:09:96:3E:7E:96:0D:18:D6:9B:1F:CF:FC:C8:DD:9A
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32372e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:ad:de:ae:31:9d:a5:5a:12:47:27:f2:0c:86:b9:58:5c:13:
         65:24:71:ee:36:3f:b9:5c:d2:aa:f7:88:9f:81:2b:32:b2:55:
         c0:2f:83:e3:64:e4:d6:56:1a:cf:86:cf:ba:72:26:16:39:aa:
         1f:b2:66:81:83:3a:17:fc:11:0d:ce:4f:05:b0:4a:12:c1:3f:
         a9:fc:3f:c7:1a:59:33:c5:ab:60:fe:11:5c:d3:e9:43:6b:ce:
         43:61:4e:eb:d7:10:23:40:fe:b3:f7:1f:2c:a7:08:bc:5a:9f:
         89:8c:9c:0d:e7:41:99:04:ec:b3:4c:62:cc:4f:be:ab:97:d5:
         d7:b2:ba:87:d2:9a:94:04:c0:d1:34:ea:5f:93:18:41:08:2a:
         f4:a7:e8:83:00:dd:05:7d:d4:a4:32:59:8b:56:a0:94:b9:c0:
         4d:57:9b:5b:52:2e:8a:1f:f5:b8:1b:ed:27:51:f4:33:59:2d:
         3d:0e:06:86:36:e4:bc:f5:f1:e6:01:cb:cb:4e:45:66:61:c2:
         4b:4b:f2:6d:69:dc:f0:40:75:04:9e:10:e5:a8:ef:cc:59:4a:
         91:fb:3a:08:0e:67:e3:b8:e9:36:aa:48:45:96:b6:23:6b:56:
         66:69:c2:34:ba:57:9b:53:b6:d1:5c:63:d8:de:d4:f9:ed:71:
         02:54:f1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:41:22 2026 by rpki-client