Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3223.roa
File:                     AS3223.roa (raw, json)
Hash identifier:          sGwQg8iFZaxzhKuW+h2x73zqV5wtiotiKVAX5UqRqlI=
Subject key identifier:   8E:41:35:01:26:76:54:DE:79:C7:9D:B0:2F:E0:6D:3F:35:4F:0C:86
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       19110501F320273DC184007F361DF872ACF5B300
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3223.roa
Signing time:             Mon 24 Aug 2026 03:57:46 +0000
ROA not before:           Mon 24 Aug 2026 03:52:46 +0000
ROA not after:            Mon 23 Aug 2027 03:57:46 +0000
asID:                     3223
IP address blocks:        64.50.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 17:08:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:11:05:01:f3:20:27:3d:c1:84:00:7f:36:1d:f8:72:ac:f5:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Aug 24 03:52:46 2026 GMT
            Not After : Aug 23 03:57:46 2027 GMT
        Subject: CN=8E413501267654DE79C79DB02FE06D3F354F0C86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d5:4b:51:39:18:8d:99:38:96:de:3d:75:f3:
                    f2:ac:60:bc:e8:cf:68:a3:0c:8c:e8:97:33:fe:f6:
                    e2:51:a4:4f:1b:d1:a9:3b:1d:2f:4b:6b:d3:be:71:
                    d7:4c:0f:a4:3a:14:3f:6f:c5:25:ad:1a:6d:5d:8a:
                    17:75:a4:92:af:a0:2b:df:e5:52:c8:12:bf:b6:40:
                    35:9d:c0:d0:5c:c6:95:dc:3e:be:26:81:1b:50:fe:
                    63:ad:c3:4c:57:4e:44:ea:0c:34:14:07:98:8c:57:
                    a2:66:0d:81:a2:27:2d:fd:60:0d:db:63:80:4e:26:
                    e9:c1:75:c2:cb:ef:bb:46:86:55:e9:a2:f7:20:0a:
                    8b:ab:38:06:7b:cc:a2:d6:0b:75:26:c1:be:c1:d3:
                    0c:f9:d9:5c:3e:f5:95:32:56:8e:f6:6f:98:d4:43:
                    a4:d4:b7:3e:6d:8d:d0:30:be:6b:21:e3:31:0e:00:
                    5b:c8:f7:bd:64:f0:51:57:55:82:8e:93:b5:cc:af:
                    77:8a:4b:b9:f5:22:0f:a2:df:7d:13:6f:ee:81:6d:
                    22:b1:02:98:69:9d:14:f3:2b:5a:61:20:c3:86:c1:
                    98:ec:03:cd:b0:d4:20:0a:cc:6e:44:aa:2d:cb:ad:
                    9c:b1:c9:b8:bd:20:d1:55:c3:de:1d:2c:e4:98:6a:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:41:35:01:26:76:54:DE:79:C7:9D:B0:2F:E0:6D:3F:35:4F:0C:86
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS3223.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:e5:4b:96:7e:de:9e:90:7e:77:73:46:0b:67:ad:21:48:b3:
         eb:a5:d8:4e:59:c1:c9:44:79:bb:ca:d4:05:84:b3:04:7c:fd:
         51:58:86:99:9f:88:c5:3f:85:59:15:24:c9:f0:29:a6:9b:f7:
         72:4a:c9:88:b3:43:1f:ae:4c:47:0b:bd:e0:fe:14:48:04:f8:
         f8:0d:1e:81:e9:03:d9:b8:37:b0:07:03:36:d9:fe:e2:e1:70:
         96:ff:95:6e:d3:b5:76:ad:62:e9:6c:fd:a1:50:a8:b9:e4:32:
         51:a1:2d:35:14:b4:e0:f7:2e:88:58:30:3f:a1:ac:f8:3f:83:
         b5:72:24:1d:00:4a:29:f1:ca:b2:62:c4:64:81:7f:99:6f:de:
         3e:28:b1:08:f1:6e:c6:99:ac:60:d2:fb:cb:e9:fe:f7:66:56:
         0f:99:a9:6c:c9:64:ff:a5:df:55:be:4a:26:0a:3f:2f:98:93:
         d3:0d:29:60:e0:96:bd:46:f9:d0:8f:6f:f4:bf:fb:7e:72:8f:
         a8:76:de:84:38:24:c2:98:77:3b:20:80:02:b7:df:39:79:09:
         6f:af:9e:65:d6:31:22:8f:09:fd:ca:cf:44:38:c8:47:bf:7c:
         d3:9a:a4:5c:f3:67:d6:3c:01:ed:8d:a7:b2:a1:4c:cf:73:0f:
         96:7e:84:39
-----BEGIN CERTIFICATE-----
MIIFfTCCBGWgAwIBAgIUGREFAfMgJz3BhAB/Nh34cqz1swAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNDRkYTVkMTAzMjc3YzkzN2M1M2RjZTMwNWJkOWQ3OWMy
YmE3OTQyNTM1N2JiNTZlZWQwHhcNMjYwODI0MDM1MjQ2WhcNMjcwODIzMDM1NzQ2
WjAzMTEwLwYDVQQDEyg4RTQxMzUwMTI2NzY1NERFNzlDNzlEQjAyRkUwNkQzRjM1
NEYwQzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydVLUTkYjZk4
lt49dfPyrGC86M9oowyM6Jcz/vbiUaRPG9GpOx0vS2vTvnHXTA+kOhQ/b8UlrRpt
XYoXdaSSr6Ar3+VSyBK/tkA1ncDQXMaV3D6+JoEbUP5jrcNMV05E6gw0FAeYjFei
Zg2Boict/WAN22OATibpwXXCy++7RoZV6aL3IAqLqzgGe8yi1gt1JsG+wdMM+dlc
PvWVMlaO9m+Y1EOk1Lc+bY3QML5rIeMxDgBbyPe9ZPBRV1WCjpO1zK93iku59SIP
ot99E2/ugW0isQKYaZ0U8ytaYSDDhsGY7APNsNQgCsxuRKoty62cscm4vSDRVcPe
HSzkmGrfTQIDAQABo4ICfTCCAnkwHQYDVR0OBBYEFI5BNQEmdlTeecedsC/gbT81
TwyGMB8GA1UdIwQYMBaAFFtA03PWcXxwTEg8oGWM+1JXxOk8MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgyMTEzZWVhNDkwZDMzLzEv
NUI0MEQzNzNENjcxN0M3MDRDNDgzQ0EwNjU4Q0ZCNTI1N0M0RTkzQy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5LzJiZDBmYWM2LTFhNDYtNDBiNS1iZTY2LTllMGY3YjU0ZGY3Ny80NGRh
NWQxMDMyNzdjOTM3YzUzZGNlMzA1YmQ5ZDc5YzJiYTc5NDI1MzU3YmI1NmVlZC5j
ZXIwbgYIKwYBBQUHAQsEYjBgMF4GCCsGAQUFBzALhlJyc3luYzovL3Jwa2ktcnBz
LmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4MTQzYmY2MjAxODIxMTNlZWE0
OTBkMzMvMS9BUzMyMjMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABAMrgwDQYJKoZIhvcNAQELBQADggEB
ACvlS5Z+3p6QfndzRgtnrSFIs+ul2E5ZwclEebvK1AWEswR8/VFYhpmfiMU/hVkV
JMnwKaab93JKyYizQx+uTEcLveD+FEgE+PgNHoHpA9m4N7AHAzbZ/uLhcJb/lW7T
tXatYuls/aFQqLnkMlGhLTUUtOD3LohYMD+hrPg/g7VyJB0ASinxyrJixGSBf5lv
3j4osQjxbsaZrGDS+8vp/vdmVg+ZqWzJZP+l31W+SiYKPy+Yk9MNKWDglr1G+dCP
b/S/+35yj6h23oQ4JMKYdzsggAK33zl5CW+vnmXWMSKPCf3Kz0Q4yEe/fNOapFzz
Z9Y8Ae2Np7KhTM9zD5Z+hDk=
-----END CERTIFICATE-----
Generated at Fri Sep 4 02:49:12 2026 by rpki-client