Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323135333637.roa
File:                     3132382e3235342e3230342e302f32342d3234203d3e20323135333637.roa (raw, json)
Hash identifier:          OGY5SrjHLmaeujpSMg07GIlMtHaTxrTOFWaA/4Ni2vU=
Subject key identifier:   D2:AA:A9:5C:B2:DB:26:CC:CB:CE:14:C8:B6:C4:51:9E:AB:67:8E:81
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       534940850330B7A5A5848C9DF70419B256AB16A3
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323135333637.roa
Signing time:             Sun 07 Jun 2026 22:32:35 +0000
ROA not before:           Sun 07 Jun 2026 22:27:35 +0000
ROA not after:            Sun 06 Jun 2027 22:32:35 +0000
asID:                     215367
IP address blocks:        128.254.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:07:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:49:40:85:03:30:b7:a5:a5:84:8c:9d:f7:04:19:b2:56:ab:16:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jun  7 22:27:35 2026 GMT
            Not After : Jun  6 22:32:35 2027 GMT
        Subject: CN=D2AAA95CB2DB26CCCBCE14C8B6C4519EAB678E81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2f:e0:b1:0e:b8:f0:be:7b:20:a7:cb:50:d8:
                    5e:4d:bc:25:80:52:ed:cb:de:12:de:4b:98:94:be:
                    77:f7:b3:20:ed:a7:c4:9b:30:b0:b4:96:40:98:44:
                    20:fe:29:e4:72:e0:bb:2c:cb:e3:14:87:59:72:c8:
                    c1:7c:47:03:80:97:ee:72:ab:2d:42:1e:06:9d:0b:
                    62:f0:87:8b:60:3d:c7:3c:d7:ce:a0:11:75:20:b1:
                    ca:07:07:78:73:80:72:e1:9f:fd:76:28:af:e5:27:
                    35:8b:18:8b:0e:8d:bc:b7:11:ee:66:8f:f7:97:d3:
                    10:78:c9:35:c4:2f:19:9c:c0:35:c2:e0:df:c2:38:
                    e0:7a:fd:96:5a:ea:5a:5c:65:ba:0f:8b:bb:e6:fe:
                    c2:5a:7a:9c:f3:d5:48:59:5e:04:95:5f:7a:e8:7b:
                    0e:da:07:c9:0a:02:c3:72:e7:dd:ea:18:1d:78:ab:
                    6f:0f:aa:bd:c9:b6:d9:ed:0c:88:da:e1:fa:99:90:
                    0e:b7:11:1f:bb:05:80:57:32:df:53:fb:cc:d7:b6:
                    9b:67:7c:da:a9:76:42:28:f3:a6:ba:23:65:61:dc:
                    92:97:34:ad:50:bb:d6:ec:ae:ad:33:50:36:e9:03:
                    d6:83:69:73:6f:5b:27:e3:fc:02:46:41:25:f7:d8:
                    03:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:AA:A9:5C:B2:DB:26:CC:CB:CE:14:C8:B6:C4:51:9E:AB:67:8E:81
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230342e302f32342d3234203d3e20323135333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:85:35:82:9f:53:e6:64:e3:76:ee:f0:a4:47:d8:d0:7d:54:
         57:42:b0:b2:92:8c:08:88:9c:81:59:68:63:d5:20:2d:11:84:
         b2:3b:32:83:ed:92:b5:ea:2f:dc:2d:d2:ba:63:18:58:cc:dc:
         3c:39:d7:dc:26:eb:7c:29:5c:3f:b9:15:ba:08:53:65:8c:9c:
         d6:43:57:90:ec:5d:e8:10:ff:66:4e:f9:e8:4f:f5:f4:65:cc:
         03:fa:6d:e0:06:5b:cc:8a:92:2d:99:72:dc:f9:42:15:e2:51:
         24:2d:dc:0e:fc:c5:8c:85:9c:cd:55:6a:74:54:4a:5e:eb:99:
         ca:4a:b7:6c:93:81:95:c8:7c:f2:f2:e2:16:d0:65:4f:77:f3:
         59:c3:8c:70:d4:ff:d4:5f:e3:2a:db:98:33:e5:b1:22:5a:38:
         41:5c:05:15:15:b0:52:6c:1e:47:64:10:51:11:3f:42:ac:54:
         ac:e4:9e:f4:f6:52:51:42:5c:d4:aa:f7:c8:d9:4d:5d:52:b7:
         6e:1c:4b:69:1c:40:0e:c0:39:9e:08:e5:00:30:6d:99:07:77:
         33:78:e0:90:23:85:8d:d4:cc:3d:65:f7:01:54:a0:50:77:7b:
         93:b2:59:83:41:c9:6a:06:9b:f4:30:1e:0b:01:f4:19:f1:76:
         20:53:e1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:37:32 2026 by rpki-client