Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233342e302f32332d3233203d3e20323734373230.roa
File:                     3137332e3234372e3233342e302f32332d3233203d3e20323734373230.roa (raw, json)
Hash identifier:          jN9HyY+hxmy7piZzR4BF/+tOsN1bSWntmyrEgkr0RVE=
Subject key identifier:   03:F4:37:D1:DE:A2:95:75:9F:33:4A:50:5F:80:01:A0:14:E9:35:02
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       46F0F5F1E0CAEA875AF81303C86349E15ADDE0F1
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233342e302f32332d3233203d3e20323734373230.roa
Signing time:             Tue 06 Oct 2026 17:55:36 +0000
ROA not before:           Tue 06 Oct 2026 17:50:36 +0000
ROA not after:            Tue 05 Oct 2027 17:55:36 +0000
asID:                     274720
IP address blocks:        173.247.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 30 Oct 2026 08:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f0:f5:f1:e0:ca:ea:87:5a:f8:13:03:c8:63:49:e1:5a:dd:e0:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Oct  6 17:50:36 2026 GMT
            Not After : Oct  5 17:55:36 2027 GMT
        Subject: CN=03F437D1DEA295759F334A505F8001A014E93502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:aa:f7:b7:05:07:30:ab:46:e0:fc:1e:8a:
                    57:43:14:b0:5d:3d:51:da:dd:79:2e:f7:ac:ee:d2:
                    7a:8a:29:cf:04:85:b2:56:2b:b1:8f:89:7c:d9:2a:
                    ea:42:5c:97:83:69:69:cf:04:b4:85:c4:41:5d:b0:
                    19:e1:cb:ab:d6:d4:91:9d:43:7a:b3:ff:35:cb:f8:
                    16:0a:93:98:7b:15:5a:9f:5f:2c:08:75:12:91:df:
                    8c:12:04:7e:ea:a0:b9:af:8a:77:76:12:8d:6e:c6:
                    db:53:fd:63:d5:1c:87:58:a1:df:f1:dd:85:5e:fa:
                    74:2c:f2:de:78:ad:2c:b7:36:e9:5a:c9:54:ec:72:
                    2b:ba:0d:7a:9f:92:2c:b9:fc:b5:c6:f1:66:e2:5b:
                    51:fa:53:79:2b:67:a7:33:22:e7:11:0e:ed:ac:ad:
                    13:66:b3:89:b4:d2:52:e7:da:d8:c5:83:74:96:e8:
                    44:bf:d2:fe:77:ba:d5:d2:0f:bb:d9:f6:42:92:b7:
                    42:6e:9c:29:c1:24:73:da:0c:ea:40:8d:7c:43:98:
                    fa:cc:ea:cd:84:67:75:99:3f:08:47:72:01:f5:4e:
                    6d:11:21:b0:84:b8:ea:31:3d:50:c1:95:41:20:e6:
                    18:1c:40:8d:42:17:8d:ab:ca:75:2a:0e:9d:b7:14:
                    97:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:F4:37:D1:DE:A2:95:75:9F:33:4A:50:5F:80:01:A0:14:E9:35:02
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233342e302f32332d3233203d3e20323734373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:f5:b2:bc:bd:08:f3:9c:c4:de:b3:c1:2e:7d:e7:a8:00:97:
         de:36:f5:79:08:53:c8:02:bc:bb:12:ff:4e:58:f3:c4:91:52:
         98:73:dd:26:fb:86:a7:b9:c6:cd:9e:30:c8:29:da:8c:9f:c1:
         95:29:32:2d:70:6b:82:4b:3f:9c:2c:17:13:96:e4:d2:02:d6:
         c9:48:43:c5:6c:54:22:33:59:9d:4e:3d:8a:68:fc:73:3d:28:
         7d:d9:2f:93:b7:3c:c3:5a:29:b6:d1:ab:5b:75:c5:4b:56:8d:
         58:b0:70:ad:58:a6:99:82:1c:2f:17:46:84:8a:30:c1:45:50:
         88:32:c6:77:4a:6b:e1:49:dc:7b:41:ad:31:ed:2d:a2:b0:23:
         41:62:a1:c7:be:e0:c0:b2:92:d6:ec:2c:fd:44:6e:2f:8a:bc:
         6d:08:b2:99:11:da:00:91:96:a2:e9:55:cf:e2:df:d1:e8:22:
         57:d6:36:b7:94:e6:64:29:34:6f:2e:96:3a:a1:90:a5:70:d0:
         1b:1d:22:cc:fa:8c:de:73:a9:8f:2a:3f:b4:84:f9:af:b4:62:
         a2:16:96:94:b0:45:42:4e:e3:f1:55:02:4e:2b:71:17:07:bf:
         4d:cc:68:fd:85:74:98:cd:46:b1:84:b0:49:61:2d:9b:91:bb:
         77:a4:49:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 12:38:54 2026 by rpki-client