Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2033323537.roa
File:                     3132382e3235342e3230352e302f32342d3234203d3e2033323537.roa (raw, json)
Hash identifier:          PEfoXU+cHXVQbvsQELaZx6QxXlLJN4ajkjbNfvBUf9s=
Subject key identifier:   65:AD:FA:3E:CE:D2:DD:82:04:DB:EB:31:60:B0:60:C2:DB:7A:F2:43
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       481AE27DF8463E16F12F403164238867885E4FC8
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2033323537.roa
Signing time:             Wed 12 Aug 2026 20:19:28 +0000
ROA not before:           Wed 12 Aug 2026 20:14:28 +0000
ROA not after:            Wed 11 Aug 2027 20:19:28 +0000
asID:                     3257
IP address blocks:        128.254.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 20:10:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:1a:e2:7d:f8:46:3e:16:f1:2f:40:31:64:23:88:67:88:5e:4f:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Aug 12 20:14:28 2026 GMT
            Not After : Aug 11 20:19:28 2027 GMT
        Subject: CN=65ADFA3ECED2DD8204DBEB3160B060C2DB7AF243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4f:c7:56:8b:22:69:e4:fa:f1:4c:7b:e5:61:
                    1a:d5:75:d0:5c:58:79:d2:d9:ae:0c:9e:a9:b9:97:
                    31:62:05:25:41:02:0a:30:b2:5e:86:f2:db:1b:e8:
                    2f:ab:69:e5:13:2f:1a:59:d6:27:77:b7:cf:7b:1c:
                    1b:da:de:2c:89:de:58:29:f2:ab:32:15:0b:10:52:
                    3c:8d:db:30:c7:d3:34:20:90:07:88:56:42:9a:49:
                    06:d7:07:ad:2c:bc:cb:7d:37:a8:4c:1a:9b:34:b6:
                    d0:34:c1:44:ad:65:5f:db:72:17:73:fc:ce:64:5a:
                    10:9c:e1:f3:d9:85:ef:22:81:2b:2b:cd:1c:f4:c2:
                    33:65:35:c2:94:47:68:8c:ac:22:9b:4a:ad:7e:38:
                    92:a8:2c:0d:73:6f:8a:3f:64:06:44:a0:43:c3:b3:
                    48:62:43:15:1a:6d:14:2f:25:4c:a6:17:18:30:1e:
                    27:ad:37:e8:01:a1:0b:8b:ef:54:75:f3:9c:80:f7:
                    51:ee:93:d0:e2:9d:ae:5d:fd:da:04:50:0a:b2:ab:
                    9f:53:87:29:f6:80:e7:42:54:94:d3:4d:54:3b:ea:
                    c9:bc:4a:44:03:b8:b7:f0:7e:04:f9:34:a3:16:ef:
                    d6:95:7b:15:2f:38:a5:b6:89:50:97:74:4f:9b:a5:
                    68:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AD:FA:3E:CE:D2:DD:82:04:DB:EB:31:60:B0:60:C2:DB:7A:F2:43
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e2033323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:07:83:05:3f:2e:9c:d5:4e:9b:69:99:53:17:7d:63:c1:e9:
         2f:14:47:eb:09:84:35:d0:80:9e:58:c8:33:7b:ee:cb:5a:5e:
         4a:45:a2:cb:dd:55:fd:8a:99:be:55:63:f7:5c:fc:a8:08:54:
         e2:6f:0b:46:99:3f:5e:93:26:65:bc:c0:19:0e:33:fa:a4:88:
         04:ce:3a:e2:10:6e:00:61:99:f6:e2:7e:bb:64:7a:93:c0:1c:
         30:09:8f:fb:ef:5b:1c:bc:98:47:d7:22:a8:ce:b0:fe:64:dd:
         7b:8f:4f:9f:70:09:92:db:3f:db:5e:e8:e3:96:0d:b3:ee:d2:
         02:05:f5:d0:c1:df:0a:8f:6e:2e:64:aa:16:48:b2:8c:1d:65:
         d0:1f:b0:93:c9:c2:25:98:24:74:10:f3:9a:12:0a:dc:63:28:
         a4:39:e4:90:9e:04:3e:2f:ea:2f:99:cf:a9:a3:5f:97:20:61:
         56:9b:86:58:03:8e:3c:63:bd:9a:57:c4:89:59:d3:60:c4:29:
         f7:7e:82:20:34:24:f7:42:52:1c:95:a7:96:18:19:79:f7:79:
         b4:ae:d2:04:f2:38:bf:3a:8c:53:12:37:1c:b0:82:4c:2c:21:
         41:1a:dc:03:cc:68:06:82:a9:68:47:0e:43:e7:f8:b5:65:b7:
         39:96:b0:7b
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUSBriffhGPhbxL0AxZCOIZ4heT8gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjYwODEyMjAxNDI4WhcNMjcwODExMjAxOTI4
WjAzMTEwLwYDVQQDEyg2NUFERkEzRUNFRDJERDgyMDREQkVCMzE2MEIwNjBDMkRC
N0FGMjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE/HVosiaeT6
8Ux75WEa1XXQXFh50tmuDJ6puZcxYgUlQQIKMLJehvLbG+gvq2nlEy8aWdYnd7fP
exwb2t4sid5YKfKrMhULEFI8jdswx9M0IJAHiFZCmkkG1wetLLzLfTeoTBqbNLbQ
NMFErWVf23IXc/zOZFoQnOHz2YXvIoErK80c9MIzZTXClEdojKwim0qtfjiSqCwN
c2+KP2QGRKBDw7NIYkMVGm0ULyVMphcYMB4nrTfoAaELi+9UdfOcgPdR7pPQ4p2u
Xf3aBFAKsqufU4cp9oDnQlSU001UO+rJvEpEA7i38H4E+TSjFu/WlXsVLziltolQ
l3RPm6VoTQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFGWt+j7O0t2CBNvrMWCwYMLb
evJDMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMxMzIzODJlMzIzNTM0MmUzMjMwMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzMyMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAID+zTANBgkqhkiG9w0BAQsF
AAOCAQEAKAeDBT8unNVOm2mZUxd9Y8HpLxRH6wmENdCAnljIM3vuy1peSkWiy91V
/YqZvlVj91z8qAhU4m8LRpk/XpMmZbzAGQ4z+qSIBM464hBuAGGZ9uJ+u2R6k8Ac
MAmP++9bHLyYR9ciqM6w/mTde49Pn3AJkts/217o45YNs+7SAgX10MHfCo9uLmSq
FkiyjB1l0B+wk8nCJZgkdBDzmhIK3GMopDnkkJ4EPi/qL5nPqaNflyBhVpuGWAOO
PGO9mlfEiVnTYMQp936CIDQk90JSHJWnlhgZefd5tK7SBPI4vzqMUxI3HLCCTCwh
QRrcA8xoBoKpaEcOQ+f4tWW3OZawew==
-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:46 2026 by rpki-client