Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20343031333632.roa
File:                     3137322e39392e32322e302f32342d3234203d3e20343031333632.roa (raw, json)
Hash identifier:          po/NbKv0nTz2oQDgq9dd7yVgAdtscJ4r2G0bdad1k2s=
Subject key identifier:   99:0A:74:4F:19:C4:87:A7:EA:39:3A:18:CE:0C:6D:1E:B4:CC:26:6F
Certificate issuer:       /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial:       6CDD2D66C998938EDBC0C00708A37928CC4A42DE
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20343031333632.roa
Signing time:             Thu 06 Aug 2026 03:36:34 +0000
ROA not before:           Thu 06 Aug 2026 03:31:34 +0000
ROA not after:            Thu 05 Aug 2027 03:36:34 +0000
asID:                     401362
IP address blocks:        172.99.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Sep 2026 17:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:dd:2d:66:c9:98:93:8e:db:c0:c0:07:08:a3:79:28:cc:4a:42:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
        Validity
            Not Before: Aug  6 03:31:34 2026 GMT
            Not After : Aug  5 03:36:34 2027 GMT
        Subject: CN=990A744F19C487A7EA393A18CE0C6D1EB4CC266F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:73:bf:cf:e4:d6:a2:ad:5a:29:37:91:bf:af:
                    89:46:c1:b1:e9:61:41:3d:18:8c:24:21:8b:7d:99:
                    5a:96:ae:69:26:09:03:db:d7:ba:eb:50:6b:4b:4f:
                    a6:d2:f6:36:41:09:f9:84:2b:4d:8b:57:9a:ab:74:
                    a1:19:d2:bd:a5:39:ff:82:36:3c:5b:42:11:8d:b7:
                    dd:61:55:b6:98:c7:c0:ba:5a:fe:d6:87:5f:c6:b3:
                    de:aa:9e:62:b1:77:e4:b0:cb:7a:69:0a:37:aa:40:
                    57:60:dd:15:c3:4f:24:c8:5c:3c:3e:00:68:25:72:
                    18:17:2c:a0:dc:78:19:71:dd:ab:8f:fb:e6:7c:54:
                    09:b0:48:9a:41:8a:42:5b:d6:7d:20:ae:0b:84:3d:
                    61:43:e5:48:78:d5:af:38:bb:a7:cf:c2:90:25:33:
                    d8:4a:bd:ee:2f:5e:d8:10:d4:bf:26:82:1d:da:9a:
                    ac:cc:3b:72:4e:fb:e4:58:2d:ac:47:2c:05:0c:0b:
                    c2:23:f6:f8:e3:54:f6:66:5d:58:4c:68:17:f0:99:
                    66:ac:c8:d2:f8:bb:09:2c:ee:dc:bc:f8:86:f0:82:
                    e0:ad:c0:01:ef:49:06:f6:6d:48:84:1c:a7:4b:1f:
                    57:9a:df:64:de:60:b8:bf:dd:f0:a2:0b:9c:d1:4e:
                    9b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0A:74:4F:19:C4:87:A7:EA:39:3A:18:CE:0C:6D:1E:B4:CC:26:6F
            X509v3 Authority Key Identifier:
                keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20343031333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:05:d3:4b:33:3a:c1:96:71:5a:e3:6d:1d:8b:67:6b:ee:34:
         47:ae:03:15:d6:9d:60:6d:f3:d8:ef:16:54:42:89:09:86:7d:
         09:46:e6:8a:b5:7e:7e:e7:1d:87:d2:eb:91:c8:e2:46:ec:ea:
         b3:d7:2e:3b:07:ca:f0:a8:82:44:6f:20:02:45:22:60:8b:3d:
         bb:e0:32:5b:43:b9:3c:60:a4:0f:cb:73:2f:c5:cf:1d:1e:89:
         e7:25:01:12:4f:3f:25:b1:1c:0e:6c:e3:77:3f:ae:2f:fe:71:
         23:fc:2d:27:36:04:1b:9b:75:71:04:aa:ef:f9:27:e8:c2:f4:
         b7:a0:06:6e:49:8e:94:e5:51:e2:f7:6e:34:99:47:b3:a1:bb:
         13:41:d0:2b:a1:d8:00:5d:94:f9:c8:9a:c6:85:35:27:35:65:
         e2:6f:ff:c8:ec:a2:ac:2c:9f:1c:52:d7:cd:dc:8d:5d:03:a1:
         50:bf:7b:c2:2a:f8:23:ed:d7:31:2b:9c:24:bb:8f:4f:88:ee:
         fe:87:d5:f8:f7:e8:9c:ed:78:77:0f:f6:e5:42:b7:91:07:08:
         28:4c:c0:c2:45:ea:04:0d:ce:ae:5c:4d:ec:3f:c8:77:74:f6:
         76:03:38:c6:4c:34:f4:d8:4b:2d:b2:70:6f:38:7a:bd:67:29:
         02:c9:3d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:50 2026 by rpki-client