Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
File:                     3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          0Cwc7jCotJeXT1oZOSdjSajT551SRN2hONnrLTv1DTk=
Subject key identifier:   12:42:67:B4:21:E0:48:11:BB:D4:FC:3B:C0:FB:14:9B:2A:F1:89:6B
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       161D0AC32E1AF667FD5A4DF8C412A82F3455054A
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa
Signing time:             Tue 08 Sep 2026 03:59:10 +0000
ROA not before:           Tue 08 Sep 2026 03:54:10 +0000
ROA not after:            Tue 07 Sep 2027 03:59:10 +0000
asID:                     23470
IP address blocks:        128.254.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:42:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:1d:0a:c3:2e:1a:f6:67:fd:5a:4d:f8:c4:12:a8:2f:34:55:05:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Sep  8 03:54:10 2026 GMT
            Not After : Sep  7 03:59:10 2027 GMT
        Subject: CN=124267B421E04811BBD4FC3BC0FB149B2AF1896B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bf:f4:6a:78:64:f6:91:82:1c:b7:5e:ac:99:
                    ae:7e:d7:77:62:f6:73:07:4b:ec:8d:c1:bd:b2:4f:
                    36:4e:91:f9:7e:86:e3:2e:05:9c:ef:9f:3a:5d:db:
                    3d:f3:3b:6e:fc:26:45:b5:fe:5d:57:0b:7a:1f:5f:
                    60:7a:52:b6:d5:27:ca:47:fe:80:a8:a7:96:82:2b:
                    7b:e7:4e:69:62:57:2c:9d:48:51:a5:a9:8b:2b:ff:
                    6a:43:de:a4:3f:15:8c:7b:3f:50:de:11:17:11:37:
                    0f:0b:90:81:72:88:36:12:20:f1:dc:33:ca:2c:29:
                    f9:c9:42:c9:00:b4:4b:40:61:f2:61:4e:79:d9:1d:
                    66:a5:e3:68:ee:a8:98:ec:28:3b:35:f1:6d:71:70:
                    ec:51:d5:33:e8:a7:c2:3d:f1:4d:32:b2:8e:51:d5:
                    4d:a0:78:de:88:f6:e6:52:a4:54:88:ad:82:c4:04:
                    a7:47:73:8b:1a:f9:67:cc:57:2f:43:f3:c7:bf:44:
                    ed:83:57:15:e3:ff:10:cb:fc:62:4a:d7:04:0a:cc:
                    6b:b5:fd:af:43:b9:43:f2:c4:8e:b2:64:66:11:16:
                    84:2c:2f:f8:4a:25:49:fd:fa:53:a8:5b:26:77:f2:
                    7b:9d:93:66:fd:d8:ba:16:b6:2b:15:cf:4a:0d:a4:
                    6a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:42:67:B4:21:E0:48:11:BB:D4:FC:3B:C0:FB:14:9B:2A:F1:89:6B
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:15:5d:16:c9:ae:15:d8:3c:89:31:0d:10:33:c1:73:01:2c:
         27:9d:30:d3:d4:ca:fe:c3:fb:b1:00:26:41:9c:84:e8:e8:c6:
         7a:90:05:99:3b:22:81:ca:a7:a6:d0:19:72:ad:ab:e8:08:32:
         1b:cc:cf:b8:b9:77:c9:bd:ce:5b:f5:f5:c2:79:b1:64:a2:be:
         62:0e:12:c8:5f:11:91:ce:3f:72:c3:85:7d:00:36:fa:ba:b8:
         7c:a9:37:d9:aa:02:c8:7b:bf:ea:fd:fc:bd:0c:91:e5:85:93:
         71:43:85:7a:24:1d:81:20:b1:7c:66:0e:cf:5f:a7:d6:da:9f:
         e2:c8:80:a3:0d:03:9b:ba:a3:81:8a:26:96:76:ec:d8:6b:16:
         30:fc:d4:b5:8f:03:de:61:a8:e7:2b:84:a7:a3:a8:2e:50:f9:
         5f:20:a8:cd:c7:db:b9:85:de:26:78:a2:cd:d4:52:e8:70:6c:
         0a:8b:05:a6:45:62:3b:c1:6a:b7:08:9f:44:1f:cc:f6:38:a4:
         ca:c8:17:e2:d1:7a:f5:cb:31:dc:d5:8a:98:75:f5:41:ae:e9:
         78:6f:36:69:0d:f3:ed:8f:c7:f8:9a:e0:98:ab:8d:cb:a0:fc:
         ab:74:42:7d:52:10:10:68:66:48:c1:6a:5c:c8:86:da:b7:f4:
         57:14:89:b7
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUFh0Kwy4a9mf9Wk34xBKoLzRVBUowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjYwOTA4MDM1NDEwWhcNMjcwOTA3MDM1OTEw
WjAzMTEwLwYDVQQDEygxMjQyNjdCNDIxRTA0ODExQkJENEZDM0JDMEZCMTQ5QjJB
RjE4OTZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL/0anhk9pGC
HLderJmuftd3YvZzB0vsjcG9sk82TpH5fobjLgWc7586Xds98ztu/CZFtf5dVwt6
H19gelK21SfKR/6AqKeWgit7505pYlcsnUhRpamLK/9qQ96kPxWMez9Q3hEXETcP
C5CBcog2EiDx3DPKLCn5yULJALRLQGHyYU552R1mpeNo7qiY7Cg7NfFtcXDsUdUz
6KfCPfFNMrKOUdVNoHjeiPbmUqRUiK2CxASnR3OLGvlnzFcvQ/PHv0Ttg1cV4/8Q
y/xiStcECsxrtf2vQ7lD8sSOsmRmERaELC/4SiVJ/fpTqFsmd/J7nZNm/di6FrYr
Fc9KDaRq+wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFBJCZ7Qh4EgRu9T8O8D7FJsq
8YlrMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMxMzIzODJlMzIzNTM0MmUzMjMwMzcyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMzMzQzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgP7PMA0GCSqGSIb3DQEB
CwUAA4IBAQApFV0Wya4V2DyJMQ0QM8FzASwnnTDT1Mr+w/uxACZBnITo6MZ6kAWZ
OyKByqem0BlyravoCDIbzM+4uXfJvc5b9fXCebFkor5iDhLIXxGRzj9yw4V9ADb6
urh8qTfZqgLIe7/q/fy9DJHlhZNxQ4V6JB2BILF8Zg7PX6fW2p/iyICjDQObuqOB
iiaWduzYaxYw/NS1jwPeYajnK4Sno6guUPlfIKjNx9u5hd4meKLN1FLocGwKiwWm
RWI7wWq3CJ9EH8z2OKTKyBfi0Xr1yzHc1YqYdfVBrul4bzZpDfPtj8f4muCYq43L
oPyrdEJ9UhAQaGZIwWpcyIbat/RXFIm3
-----END CERTIFICATE-----
Generated at Thu Sep 10 09:37:27 2026 by rpki-client