Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/3139382e31372e3137302e302f32342d3234203d3e203131333538.roa
File:                     3139382e31372e3137302e302f32342d3234203d3e203131333538.roa (raw, json)
Hash identifier:          OmeMWQmwwG8Qz1bMGRbpQBnMKYmWX9sYRLHcda6/m+o=
Subject key identifier:   1B:EF:63:83:92:5A:91:48:14:AE:20:C9:60:CF:F8:1B:EB:D6:B2:4D
Certificate issuer:       /CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
Certificate serial:       32C1178E246744C0CD6A62926A91221FB2D1705B
Authority key identifier: D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/3139382e31372e3137302e302f32342d3234203d3e203131333538.roa
Signing time:             Sat 03 Oct 2026 20:23:33 +0000
ROA not before:           Sat 03 Oct 2026 20:18:33 +0000
ROA not after:            Sat 02 Oct 2027 20:23:33 +0000
asID:                     11358
IP address blocks:        198.17.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 15:29:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:c1:17:8e:24:67:44:c0:cd:6a:62:92:6a:91:22:1f:b2:d1:70:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0
        Validity
            Not Before: Oct  3 20:18:33 2026 GMT
            Not After : Oct  2 20:23:33 2027 GMT
        Subject: CN=1BEF6383925A914814AE20C960CFF81BEBD6B24D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:eb:74:dc:b8:d3:05:6e:39:55:53:cc:91:8a:
                    7b:f9:67:f5:07:f7:7a:63:a9:59:02:4b:53:d9:b6:
                    80:7c:34:ef:35:6f:04:6f:69:dd:d0:4b:25:f3:48:
                    5b:1d:56:65:40:f1:34:e2:bf:ae:f5:5b:ba:8d:94:
                    15:3d:96:45:55:0c:14:49:79:24:1d:95:83:bf:b0:
                    3d:c4:e1:a0:e1:bd:a5:e8:11:ef:50:3a:71:50:39:
                    28:7d:aa:23:79:de:35:bc:95:dd:59:d8:a6:53:37:
                    4d:0e:6e:47:b3:01:1f:eb:00:fe:6a:cf:aa:77:10:
                    90:9f:0a:98:5a:ef:24:62:1a:54:37:79:65:dd:5c:
                    4d:24:1c:fb:83:00:64:c3:a0:f5:d4:43:6a:70:e6:
                    d1:e7:6c:e0:fa:0c:40:3d:b9:2b:49:ec:30:5e:cb:
                    c5:c5:76:59:62:5e:28:e9:8e:ff:13:75:48:7e:f9:
                    1a:71:fd:4c:fe:77:94:9c:b3:38:bf:d0:a8:cb:13:
                    19:bd:c1:f7:bf:5d:06:60:fc:e2:ab:ea:4d:d7:c4:
                    30:7e:2b:35:a2:18:48:03:eb:1d:a0:83:c0:5d:5d:
                    d5:ce:45:b8:39:b3:5d:f4:58:12:b1:6e:3a:3e:27:
                    66:fc:78:42:bf:44:9b:21:aa:c9:bc:58:09:49:77:
                    d5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:EF:63:83:92:5A:91:48:14:AE:20:C9:60:CF:F8:1B:EB:D6:B2:4D
            X509v3 Authority Key Identifier:
                keyid:D3:27:C6:08:C1:E8:56:F6:C0:78:97:6E:50:55:59:94:5A:23:DA:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/D327C608C1E856F6C078976E505559945A23DAD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2cd85896-beca-4cc9-8e09-9367b0ea9ea4/ba21647aac3dc2133bd3618a417f5a479a5720fc340f8e9cc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8ea98bae018ec180acc111a2/0/3139382e31372e3137302e302f32342d3234203d3e203131333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:69:77:ea:03:27:3f:13:c1:0d:b9:87:f1:94:1f:35:39:56:
         f1:03:37:b1:34:b0:6d:2c:30:a5:fe:2a:5a:6b:4b:3a:0b:eb:
         0a:b8:d6:c8:32:31:08:8c:af:6c:9f:b1:75:06:5c:5a:3a:81:
         5a:9b:63:be:20:33:ff:d5:17:9f:c3:7d:16:93:fb:d4:e3:30:
         80:10:66:68:f9:e2:66:ac:66:db:e7:99:a0:8f:a2:30:b4:0b:
         cf:b2:cd:96:75:98:0d:42:af:21:38:a7:2c:de:ae:f2:04:a1:
         a9:ea:06:e2:4e:e7:cc:6c:d3:fb:3f:dd:ca:b8:5f:66:32:84:
         6b:27:5c:4e:2e:22:0c:15:83:60:2d:de:08:d7:ad:91:e5:c0:
         d3:7b:1c:93:8a:bb:ed:be:75:3f:10:74:32:80:01:4a:e7:62:
         76:7f:d8:ab:ee:99:0d:41:24:80:35:fe:7c:9b:2c:8e:5e:58:
         60:c2:64:b4:a1:9e:3a:27:45:36:6c:61:92:e2:0d:3a:1c:04:
         9e:43:79:20:12:8f:a7:b8:94:8b:7e:d8:f9:8a:ee:6a:16:56:
         38:b3:ff:5e:b0:ac:de:f7:a6:f4:18:9b:07:d0:75:07:73:5f:
         e8:15:44:50:11:09:e7:b9:2e:a6:cb:b9:91:b1:65:5d:7b:d8:
         06:c0:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 07:59:58 2026 by rpki-client