Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313531343037.roa
File:                     3139322e3230382e322e302f32342d3234203d3e20313531343037.roa (raw, json)
Hash identifier:          gWKIZFUpjHUzuiCGGsuwIByjNouIqwXeVFg65/fONBg=
Subject key identifier:   4E:0A:F9:7F:BB:D2:A1:7F:E5:C5:59:7C:EB:47:F2:85:83:47:FD:D0
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       30CDED4931D8AF1C0CB6CF07144BC0D8B2B3709A
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313531343037.roa
Signing time:             Sat 23 May 2026 20:36:04 +0000
ROA not before:           Sat 23 May 2026 20:31:04 +0000
ROA not after:            Sat 22 May 2027 20:36:04 +0000
asID:                     151407
IP address blocks:        192.208.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 18:39:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:cd:ed:49:31:d8:af:1c:0c:b6:cf:07:14:4b:c0:d8:b2:b3:70:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: May 23 20:31:04 2026 GMT
            Not After : May 22 20:36:04 2027 GMT
        Subject: CN=4E0AF97FBBD2A17FE5C5597CEB47F2858347FDD0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6c:ce:86:d9:2c:52:4f:1a:bc:d2:5b:a6:ab:
                    c0:2a:bf:7f:e1:60:d3:39:52:75:a0:31:62:2e:89:
                    f2:a7:2f:2f:d0:f6:8f:52:25:98:7d:e5:3c:73:f6:
                    64:78:99:43:f2:72:0b:f8:c5:eb:93:1d:04:27:78:
                    a7:77:9a:d6:02:fb:c8:41:88:04:37:33:18:9c:39:
                    7e:70:86:bf:f4:fb:2e:cc:f6:da:d3:1e:b1:8d:d4:
                    ee:31:e3:af:fe:6d:19:30:fe:87:08:be:03:5d:8a:
                    57:fb:7b:e9:20:03:91:64:85:b0:48:96:e9:b1:36:
                    f0:38:00:33:3f:56:79:f8:54:f2:fd:d8:14:3c:d2:
                    f0:c9:17:45:d0:ac:7a:3a:a2:7b:e7:8f:ce:b7:47:
                    c8:c1:b1:98:f3:5a:7f:6a:7a:72:38:3c:e5:ba:4e:
                    f5:33:4d:b3:e3:83:41:09:3e:e5:52:1c:eb:a3:1d:
                    4b:ff:32:d4:50:fe:51:7a:ba:93:9c:31:42:05:10:
                    a6:68:7c:33:b5:65:1b:47:80:30:b9:45:c7:2f:b0:
                    80:f4:4f:57:2e:f3:6d:dc:ac:28:3c:5e:27:86:95:
                    de:b0:84:bb:72:6b:91:b4:3d:56:b2:39:e3:99:3d:
                    c0:e6:0d:8a:ab:b2:a6:dc:eb:09:60:0c:89:a9:43:
                    48:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:0A:F9:7F:BB:D2:A1:7F:E5:C5:59:7C:EB:47:F2:85:83:47:FD:D0
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313531343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:18:de:76:b9:ca:d2:c5:25:2e:eb:32:be:b9:93:78:aa:24:
         1c:21:45:85:d2:d6:06:3d:22:95:04:3a:6e:95:bf:87:b9:18:
         7c:74:38:7d:ed:b0:2a:43:b0:10:e6:16:83:69:ac:73:34:10:
         2c:4a:97:e4:91:b9:ce:89:5d:53:ba:df:85:63:7f:16:0b:75:
         a3:5c:f2:b2:9b:1e:bb:2b:41:1d:06:ad:8f:2e:db:df:49:54:
         fa:ce:fe:2a:da:0a:0a:84:25:7c:27:70:b3:50:d2:6e:eb:62:
         2f:af:13:5b:8f:9a:9b:df:e5:9e:86:5f:c5:e2:34:46:81:de:
         93:c8:92:21:5d:36:29:4f:54:55:ec:a7:f0:89:66:4b:d9:c0:
         73:d4:44:8a:55:60:2d:9a:a5:02:59:3f:06:f7:39:e1:26:6c:
         d9:6e:95:c0:4d:48:74:16:9c:92:36:c3:60:97:f9:67:dd:5c:
         3d:c3:e8:b5:d3:bf:c2:69:52:ab:24:00:67:c1:6d:e4:ee:19:
         7a:4d:8a:02:05:43:65:06:09:7e:df:38:5e:fa:2a:2f:d8:89:
         4b:88:8e:79:02:d6:66:c4:23:25:19:f3:9f:e6:ea:ad:e9:b0:
         e0:c5:1e:07:e0:3c:a7:d1:8e:ba:c5:dc:de:93:37:fa:5a:f5:
         f9:94:e6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:46:11 2026 by rpki-client