Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e20323038343632.roa
File:                     3137362e3130332e3231382e302f32342d3234203d3e20323038343632.roa (raw, json)
Hash identifier:          PdQy57Py0dDeguEVd5gqjbKC67Ggh8+QV0iuC/e32jQ=
Subject key identifier:   60:E3:D9:43:D8:E0:BA:CB:08:C5:C5:60:AC:5A:8C:92:42:2B:49:13
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       047D47462564AF57B4AF7581911BF32DFC3BC17E
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e20323038343632.roa
Signing time:             Wed 27 May 2026 04:49:38 +0000
ROA not before:           Wed 27 May 2026 04:44:38 +0000
ROA not after:            Wed 26 May 2027 04:49:38 +0000
asID:                     208462
IP address blocks:        176.103.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 07:11:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7d:47:46:25:64:af:57:b4:af:75:81:91:1b:f3:2d:fc:3b:c1:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: May 27 04:44:38 2026 GMT
            Not After : May 26 04:49:38 2027 GMT
        Subject: CN=60E3D943D8E0BACB08C5C560AC5A8C92422B4913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:27:f8:12:32:d8:48:75:43:50:42:4b:77:ed:
                    ce:27:ad:2e:47:9e:65:e6:a6:79:4b:c0:17:05:84:
                    f7:2e:c4:2e:fc:3e:85:33:47:ef:5a:b4:50:fe:a8:
                    d4:d4:4e:f3:97:7e:05:8a:89:5b:c5:82:97:08:18:
                    a6:7e:d2:45:92:8f:ef:9d:6d:e6:e9:84:91:27:ea:
                    ca:c5:60:53:2b:68:29:1b:54:bc:6c:cd:81:37:b9:
                    7d:f6:9b:66:e3:50:09:09:37:7a:35:e0:b3:60:18:
                    80:ee:90:f5:57:ed:c6:91:c8:e0:21:44:9c:45:9c:
                    d6:c1:77:b8:75:74:80:51:33:3c:93:06:8d:66:58:
                    db:77:16:b5:6e:4f:a0:68:cd:e5:1c:93:d8:3d:96:
                    e3:6d:0e:6d:0e:12:43:e2:c0:e5:d3:aa:6b:1d:02:
                    db:55:e3:7f:08:67:df:c9:ba:d9:82:76:6d:5f:bc:
                    06:4c:73:27:a1:29:f3:ad:c1:58:4f:1d:03:f6:24:
                    af:23:3d:13:43:4e:28:88:74:50:90:28:4f:e6:38:
                    3d:e9:1c:48:5c:84:69:8a:0e:47:3c:f5:b5:8a:9d:
                    43:36:14:93:34:44:df:44:7d:d9:8c:0a:a3:df:29:
                    aa:53:32:63:dd:f2:47:d4:83:ab:8d:f4:5e:ba:1f:
                    ea:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E3:D9:43:D8:E0:BA:CB:08:C5:C5:60:AC:5A:8C:92:42:2B:49:13
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e20323038343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.103.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:98:1f:f7:02:8e:3d:21:6b:40:d2:95:3d:0b:15:3a:47:a6:
         c2:88:86:79:e3:df:97:e7:ac:7e:4b:05:86:66:12:f4:88:73:
         57:4f:58:ac:f2:54:c9:9b:62:0e:a5:c7:60:1e:19:25:6d:c6:
         77:ef:22:bb:2d:1e:0c:b9:90:97:58:cb:e0:91:bf:9d:f5:c1:
         6e:98:bc:7c:2e:d6:f2:b5:ee:da:80:25:09:f1:15:03:5c:33:
         15:51:b9:08:1d:29:2a:95:c3:47:7f:e8:ee:39:c7:a5:d2:1c:
         df:f0:f1:10:ea:9a:e2:8a:15:8c:8b:fe:6a:fc:54:6e:94:54:
         08:96:6b:90:d6:15:28:f1:3a:49:94:4e:76:ce:76:0d:7f:38:
         72:85:e0:3e:ce:b2:f2:19:92:0e:e8:31:8f:aa:13:8d:e1:85:
         55:a5:7f:2d:c8:59:a5:3d:e2:e3:c5:bc:81:b7:82:1d:96:5f:
         14:5f:fd:a5:2c:56:96:9e:5c:99:d4:e4:ef:e0:1f:fd:00:89:
         45:78:23:02:7f:f0:0a:df:fd:fc:77:b4:bf:81:d1:4a:42:21:
         2f:94:a1:fb:b3:3a:d9:24:87:8b:f6:51:25:04:9c:d5:c2:36:
         35:94:b5:66:57:0f:e8:27:7d:34:b4:96:a5:42:7b:c8:ad:85:
         4e:38:45:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:01:03 2026 by rpki-client