Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203136353039.roa
File:                     3130342e3235342e3139322e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          SbzR8aaMzsXkjqb2+Nb9lc9igR3nKb0fePoYWq/vX0M=
Subject key identifier:   7E:25:0F:9B:F9:CF:9A:CD:06:82:40:A8:07:A4:8F:0B:85:8F:E3:46
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       5317B85256D2E46515F8066D5F5DFEE0508C1814
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203136353039.roa
Signing time:             Tue 06 Oct 2026 19:36:20 +0000
ROA not before:           Tue 06 Oct 2026 19:31:20 +0000
ROA not after:            Tue 05 Oct 2027 19:36:20 +0000
asID:                     16509
IP address blocks:        104.254.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 Oct 2026 09:29:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:17:b8:52:56:d2:e4:65:15:f8:06:6d:5f:5d:fe:e0:50:8c:18:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Oct  6 19:31:20 2026 GMT
            Not After : Oct  5 19:36:20 2027 GMT
        Subject: CN=7E250F9BF9CF9ACD068240A807A48F0B858FE346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:69:65:8a:1d:dc:4b:a5:19:e3:3b:a8:77:41:
                    5f:7b:df:f8:aa:2f:87:80:fa:be:fc:e7:0b:16:e0:
                    3d:73:af:26:33:62:4c:f0:10:ac:f5:5e:9a:ac:81:
                    84:32:6c:c2:bf:96:3e:9a:eb:91:b9:72:8b:ff:45:
                    12:36:38:50:5c:30:40:13:98:6d:5c:28:e0:cf:7c:
                    0c:73:42:f9:d5:79:d2:f8:e9:39:bb:51:90:96:1e:
                    75:d8:77:25:32:4b:ff:f3:2b:cf:a8:22:99:69:18:
                    ca:2f:10:bc:93:73:64:7e:90:4b:a2:5a:d4:5e:7e:
                    cb:d0:16:c2:68:f5:62:c1:32:f5:35:55:86:87:66:
                    69:b5:2d:77:63:fb:54:93:d6:7d:18:13:38:02:11:
                    99:bc:1b:c5:38:6d:30:f0:87:ab:f3:b3:fd:6a:32:
                    4c:63:4f:26:a3:eb:7c:6c:9e:ac:0b:52:2d:1a:32:
                    fa:ed:8b:86:8e:fe:87:fb:3d:9a:9e:55:78:c6:4b:
                    c2:ae:19:74:51:f8:2b:82:a6:70:be:a5:2b:c4:84:
                    45:67:18:46:19:6d:60:14:c1:c0:20:44:ea:65:3b:
                    12:01:19:f6:9d:35:06:ab:61:d6:d6:3f:ea:5c:0e:
                    e4:ce:e5:51:fb:87:26:4d:0f:ee:95:ec:9c:12:dd:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:25:0F:9B:F9:CF:9A:CD:06:82:40:A8:07:A4:8F:0B:85:8F:E3:46
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:ea:30:c6:28:67:7d:64:02:60:f7:73:b3:fd:85:36:b9:9a:
         ff:5c:13:18:27:fe:52:ee:ac:7a:89:d5:b7:b6:00:30:93:00:
         5e:07:c0:cd:cf:95:50:b1:dc:7d:93:0f:6e:47:98:50:e9:ee:
         cc:60:d5:43:d7:ef:2e:1c:f4:5c:e4:d1:20:8b:ba:4e:eb:66:
         fa:92:fe:d8:3d:a8:fc:69:d4:eb:f7:c8:71:83:e1:cd:52:eb:
         5d:a9:18:09:e2:29:f0:1c:d2:0d:73:39:80:47:af:27:c1:6c:
         74:8d:0d:ae:22:94:fd:cc:68:00:b6:03:c0:bb:f8:e1:15:ab:
         7e:cd:0c:b1:00:db:32:05:d1:e7:b9:9d:e2:66:04:3e:55:17:
         30:fd:0c:f3:f0:e5:9c:3a:3d:62:87:0d:2a:a1:d1:f9:5e:d7:
         b9:72:70:cc:38:65:3f:5e:a3:82:43:20:af:16:98:a5:05:5b:
         04:dd:64:a9:f6:02:9b:e8:a3:9c:bf:00:fd:a7:b5:b7:c9:05:
         2a:2f:93:01:46:c8:3c:0b:55:e7:e3:3e:87:f5:4a:f9:1b:24:
         c2:cd:8a:ed:fe:b3:91:c4:16:c0:73:aa:53:40:9a:59:14:04:
         4a:ae:bf:ca:39:c5:d8:73:05:71:dd:94:9e:b0:f3:ba:d9:da:
         8f:1d:79:16
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUUxe4UlbS5GUV+AZtX13+4FCMGBQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjgzMmIxMDczNTVkYTI3NjcxZDJiNTMyMmVkZDQxMjEy
ZmM2YjgyMmIwYjAxZGExZmQwHhcNMjYxMDA2MTkzMTIwWhcNMjcxMDA1MTkzNjIw
WjAzMTEwLwYDVQQDEyg3RTI1MEY5QkY5Q0Y5QUNEMDY4MjQwQTgwN0E0OEYwQjg1
OEZFMzQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2llih3cS6UZ
4zuod0Ffe9/4qi+HgPq+/OcLFuA9c68mM2JM8BCs9V6arIGEMmzCv5Y+muuRuXKL
/0USNjhQXDBAE5htXCjgz3wMc0L51XnS+Ok5u1GQlh512HclMkv/8yvPqCKZaRjK
LxC8k3NkfpBLolrUXn7L0BbCaPViwTL1NVWGh2ZptS13Y/tUk9Z9GBM4AhGZvBvF
OG0w8Ier87P9ajJMY08mo+t8bJ6sC1ItGjL67YuGjv6H+z2anlV4xkvCrhl0Ufgr
gqZwvqUrxIRFZxhGGW1gFMHAIETqZTsSARn2nTUGq2HW1j/qXA7kzuVR+4cmTQ/u
leycEt2CrwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFH4lD5v5z5rNBoJAqAekjwuF
j+NGMB8GA1UdIwQYMBaAFLzeKwASGPzMBEZ0RQLsb6XJhfRrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGNlOWRlZmUwMThlMzJkNzc3ZmIxYjYzLzAv
QkNERTJCMDAxMjE4RkNDQzA0NDY3NDQ1MDJFQzZGQTVDOTg1RjQ2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzUyYTI0YmZlLTc2OTUtNDU2Yy04YjNkLTM0OWIzN2IwNDdkMy9mODMy
YjEwNzM1NWRhMjc2NzFkMmI1MzIyZWRkNDEyMTJmYzZiODIyYjBiMDFkYTFmZC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThjZTlkZWZlMDE4ZTMy
ZDc3N2ZiMWI2My8wLzMxMzAzNDJlMzIzNTM0MmUzMTM5MzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM2MzUzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaP7AMA0GCSqGSIb3DQEB
CwUAA4IBAQAA6jDGKGd9ZAJg93Oz/YU2uZr/XBMYJ/5S7qx6idW3tgAwkwBeB8DN
z5VQsdx9kw9uR5hQ6e7MYNVD1+8uHPRc5NEgi7pO62b6kv7YPaj8adTr98hxg+HN
UutdqRgJ4inwHNINczmAR68nwWx0jQ2uIpT9zGgAtgPAu/jhFat+zQyxANsyBdHn
uZ3iZgQ+VRcw/Qzz8OWcOj1ihw0qodH5Xte5cnDMOGU/XqOCQyCvFpilBVsE3WSp
9gKb6KOcvwD9p7W3yQUqL5MBRsg8C1Xn4z6H9Ur5GyTCzYrt/rORxBbAc6pTQJpZ
FARKrr/KOcXYcwVx3ZSesPO62dqPHXkW
-----END CERTIFICATE-----
Generated at Thu Oct 8 14:13:23 2026 by rpki-client