Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20313432323430.roa
File:                     3230392e38372e3137322e302f32342d3234203d3e20313432323430.roa (raw, json)
Hash identifier:          BHlnNT9yya+58mm+VynEZRAc/KVFWJXrW4TamLYiwdc=
Subject key identifier:   5E:B2:24:3A:65:15:F0:B2:9C:E6:0D:8A:73:8A:7E:C9:3E:F3:07:8A
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       2762698A868E420E492AB0BB5DD3809877FEF836
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20313432323430.roa
Signing time:             Sat 22 Aug 2026 03:11:31 +0000
ROA not before:           Sat 22 Aug 2026 03:06:31 +0000
ROA not after:            Sat 21 Aug 2027 03:11:31 +0000
asID:                     142240
IP address blocks:        209.87.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Aug 2026 05:29:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:62:69:8a:86:8e:42:0e:49:2a:b0:bb:5d:d3:80:98:77:fe:f8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Aug 22 03:06:31 2026 GMT
            Not After : Aug 21 03:11:31 2027 GMT
        Subject: CN=5EB2243A6515F0B29CE60D8A738A7EC93EF3078A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:a2:ea:d8:92:b9:60:c9:cd:86:2e:af:cd:
                    35:66:c8:32:ac:6e:9e:5b:62:84:24:19:cb:07:17:
                    74:fa:b4:4c:30:f2:d5:ae:04:00:08:5c:03:18:48:
                    e5:3a:e8:14:9f:9e:c2:0e:84:1d:5c:7a:9a:f4:b4:
                    0b:b5:2c:60:8e:5a:01:9a:45:8f:8d:d2:a4:54:db:
                    7a:1b:5c:32:bc:43:73:28:76:47:52:57:a6:10:62:
                    7f:8a:7c:4a:11:7e:82:7b:11:a2:fe:09:89:76:e0:
                    fb:b5:49:f5:e8:77:ad:0b:d7:ea:8c:ff:f0:39:fe:
                    8d:67:c3:b7:45:c9:05:d8:e8:8d:b6:22:4c:17:21:
                    18:64:0c:73:fc:24:7b:5c:29:d1:42:b6:d9:21:5c:
                    46:be:c9:e8:99:23:c4:e0:ed:ff:16:13:9e:3c:ee:
                    97:ac:0f:f6:ea:20:b1:fb:a0:ec:5d:d2:a2:c8:d5:
                    4f:18:f3:cd:9e:30:be:7a:3e:a9:58:6b:07:fc:35:
                    4a:4b:42:e9:35:d0:d9:17:48:fd:bc:52:c0:46:35:
                    1a:81:b8:3d:4c:4e:93:59:df:25:3e:35:10:7b:87:
                    da:b4:f2:cb:77:ae:a3:91:4f:e3:2f:e3:48:5e:8c:
                    bf:d6:94:86:f6:03:7f:ed:e1:66:88:6a:8f:1c:ea:
                    a7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B2:24:3A:65:15:F0:B2:9C:E6:0D:8A:73:8A:7E:C9:3E:F3:07:8A
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e20313432323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:1a:ff:d9:52:c9:2b:0d:12:62:4a:95:f9:a7:23:3d:39:e8:
         a1:3e:85:79:5d:85:ad:19:72:51:34:12:32:0d:57:9f:1b:7d:
         24:d9:3f:d5:52:aa:5c:45:24:89:bc:8d:7a:c0:eb:b7:ac:c7:
         5b:1f:2e:39:10:2c:fb:f9:19:69:f9:41:00:89:0a:3d:2a:8e:
         42:5e:d1:32:df:12:8a:0c:9a:57:7b:ea:6f:d0:60:2e:ca:22:
         a6:10:86:4e:eb:8f:88:92:3c:41:f3:8d:55:d3:c3:3e:d9:af:
         ed:5c:f0:4a:a4:88:84:04:b6:20:0f:0b:07:e2:12:08:fe:da:
         77:17:13:d4:26:54:9d:92:95:8b:ea:50:a6:3a:9a:e7:2d:ca:
         81:56:f8:8c:3e:67:eb:e2:f0:5b:63:64:fb:50:d9:1a:f6:e4:
         34:0c:d3:88:04:37:4c:c6:e4:75:06:40:cf:85:66:88:f6:80:
         c2:88:03:ee:68:6b:20:f5:0a:7d:fa:4e:8d:ba:25:99:5f:e6:
         6a:39:10:6d:58:6e:87:91:2f:ca:14:99:d9:e4:e6:04:19:a0:
         a1:96:f4:3d:ec:37:aa:58:01:4b:64:72:c7:06:ce:1e:06:cd:
         2e:91:78:ca:69:54:d3:37:6c:31:de:94:df:04:d0:27:59:bc:
         80:8f:df:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 21:07:48 2026 by rpki-client