Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa
File:                     3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          m0MTeli2W38K1bzqYJU3nQvp9fcUU8BJffN68Sa0wls=
Subject key identifier:   68:02:72:2C:AF:19:C6:C2:B5:B6:77:79:A3:03:61:CE:E0:C5:56:EF
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       617AAE7F7237376219F016E4D82F38377B186383
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 28 Apr 2026 13:36:00 +0000
ROA not before:           Tue 28 Apr 2026 13:31:00 +0000
ROA not after:            Tue 27 Apr 2027 13:36:00 +0000
asID:                     212384
IP address blocks:        216.151.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 03:13:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7a:ae:7f:72:37:37:62:19:f0:16:e4:d8:2f:38:37:7b:18:63:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Apr 28 13:31:00 2026 GMT
            Not After : Apr 27 13:36:00 2027 GMT
        Subject: CN=6802722CAF19C6C2B5B67779A30361CEE0C556EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:99:25:63:81:6f:2f:06:95:c9:b5:8e:01:8b:
                    fc:c1:40:b6:f0:42:09:0e:30:7e:b1:bc:08:b2:d8:
                    55:26:8b:bc:2c:1d:2d:66:ff:7d:c6:a8:f4:c7:e7:
                    7d:58:c6:0a:d3:41:50:fb:d2:e5:19:d2:83:26:04:
                    76:12:06:bc:0f:ff:c5:e6:26:ea:77:82:e4:9e:3c:
                    c8:a9:99:10:f3:7c:50:e8:8c:8d:73:25:16:b0:b7:
                    a0:2e:fb:fb:8a:41:2c:04:ac:eb:a3:cb:bd:bb:23:
                    97:27:bc:09:55:8b:b6:5a:a1:1a:88:80:49:f9:51:
                    8f:f0:45:88:74:93:d9:44:18:ca:21:a4:00:25:2c:
                    76:b9:29:82:ca:d5:c1:eb:1f:bf:2f:09:9c:39:7a:
                    3a:ab:54:f6:ec:04:d4:b4:8a:69:57:c1:62:41:a9:
                    9d:00:48:8c:6a:53:eb:94:9c:47:61:33:c6:61:9d:
                    c3:25:1b:c7:fd:de:28:60:f5:60:6e:6c:cf:24:01:
                    8a:7d:4a:b6:c4:43:f7:03:67:e6:85:6d:9e:0b:91:
                    09:06:c8:9f:da:eb:62:cb:5b:f5:6c:86:2e:27:a9:
                    14:28:ac:68:45:08:8a:cc:b4:a0:3c:33:b6:41:38:
                    47:d3:cd:99:06:50:0a:f2:62:d1:65:d1:2b:db:e7:
                    8d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:02:72:2C:AF:19:C6:C2:B5:B6:77:79:A3:03:61:CE:E0:C5:56:EF
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:86:47:bf:de:19:52:4b:09:93:bd:02:b3:6c:85:a5:60:73:
         95:9d:27:75:b4:da:bb:b2:4c:db:d9:61:b9:16:c9:9c:5a:20:
         0e:c9:7d:6f:88:f8:be:d6:66:78:73:0f:6d:1a:32:fa:74:3a:
         f5:70:ba:d2:b5:39:29:c6:38:fd:34:2c:f9:6a:27:6a:e9:88:
         d5:58:ae:0c:60:43:c3:59:1e:83:c8:73:23:e7:32:47:0e:7b:
         14:b4:d2:6d:7b:17:f6:59:28:71:77:bc:40:69:51:01:6e:b1:
         0b:d3:84:50:cd:2d:ea:55:10:d1:19:b6:d5:31:66:39:56:ef:
         29:5a:bb:da:c6:4f:c3:9c:cf:4e:22:ac:76:95:ea:66:c2:91:
         a1:1a:68:14:8c:2d:f2:48:76:49:c5:92:ce:7d:94:0b:78:51:
         82:7e:51:64:97:56:ec:8c:bc:f5:4e:1c:a9:af:20:09:1e:b1:
         c6:cc:ed:39:1c:14:97:37:c1:26:fb:3c:21:06:ab:48:22:d7:
         a6:32:55:29:b9:65:ff:ad:81:12:ce:5a:97:fd:65:a2:0d:09:
         23:64:63:78:5a:bb:ac:6b:20:85:97:9c:c2:db:67:36:3a:01:
         77:ed:07:1b:ac:14:4b:b1:f1:4a:02:5b:5c:02:8b:1f:0f:7b:
         7b:d1:06:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:45:46 2026 by rpki-client