Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20333935343730.roa
File:                     3139322e3230382e352e302f32342d3234203d3e20333935343730.roa (raw, json)
Hash identifier:          LjzaQJurRbECDQIjX260uavR3GTrMda1dXa9KW1H4hw=
Subject key identifier:   37:D7:FF:77:9A:84:A3:C0:73:FF:99:5F:DB:21:AF:65:65:8C:96:D5
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       05BEDFF8DEAA0DA9944A83D827E2C6342C5DA134
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20333935343730.roa
Signing time:             Tue 21 Apr 2026 08:25:35 +0000
ROA not before:           Tue 21 Apr 2026 08:20:35 +0000
ROA not after:            Tue 20 Apr 2027 08:25:35 +0000
asID:                     395470
IP address blocks:        192.208.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 01:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:be:df:f8:de:aa:0d:a9:94:4a:83:d8:27:e2:c6:34:2c:5d:a1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Apr 21 08:20:35 2026 GMT
            Not After : Apr 20 08:25:35 2027 GMT
        Subject: CN=37D7FF779A84A3C073FF995FDB21AF65658C96D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d0:ec:26:98:8c:5e:e3:d1:c3:a2:f5:8f:51:
                    02:e8:57:e4:91:6f:ec:1a:1a:65:64:06:d6:fa:bb:
                    e2:22:38:e0:c2:b2:e7:7a:69:18:9c:dc:25:ba:30:
                    d1:cc:bd:79:b5:22:03:d3:ca:7c:d4:78:70:4a:01:
                    6e:fc:c0:2a:8f:77:c5:bf:3e:12:05:98:a7:41:a7:
                    48:da:a4:e6:07:81:71:cd:4f:53:3b:b7:97:ad:36:
                    ff:32:44:b4:da:24:32:ea:19:07:0a:1b:3b:cd:6e:
                    9c:c4:e1:0e:59:5d:65:e1:09:81:00:b8:7b:e3:5a:
                    aa:d1:0f:ad:62:a7:c8:c8:27:1d:52:bf:a7:d3:0c:
                    6b:91:ab:4b:ca:24:8d:ba:93:94:dd:59:0b:91:58:
                    66:a1:54:0f:04:c0:2b:2c:d0:f1:29:d8:aa:f2:53:
                    67:1b:cc:8f:ef:a5:27:16:fa:ff:e2:9b:e2:c0:8b:
                    76:1d:58:c5:95:88:77:81:8c:86:56:9f:73:2f:97:
                    76:10:0c:2c:9b:0a:cb:91:3b:64:1d:19:86:db:a0:
                    7b:b7:6b:59:db:2d:f5:f5:16:b1:8b:79:ca:bc:dd:
                    44:cc:64:9a:06:3b:3d:7c:18:87:64:91:37:6a:9b:
                    9e:d4:89:54:ee:5a:05:ff:a3:8a:91:09:09:14:fe:
                    77:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:D7:FF:77:9A:84:A3:C0:73:FF:99:5F:DB:21:AF:65:65:8C:96:D5
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20333935343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:7a:e4:56:f3:35:4f:01:5d:12:f9:3e:d2:27:63:6d:4c:
         a8:8c:cd:95:de:34:dd:2b:2d:5b:40:27:d7:ef:14:7d:21:6a:
         e0:50:2e:6e:fb:6f:0b:62:9a:e9:36:49:85:d8:a7:46:6a:df:
         27:45:11:ca:e6:4f:f0:99:b8:4b:66:24:13:c6:e0:a3:1f:a5:
         b8:4e:1f:a5:5f:f0:fa:45:d8:85:30:87:41:4a:33:87:26:54:
         37:87:5f:33:33:e4:85:16:e1:8b:6b:45:79:7f:ba:3f:09:35:
         94:62:ab:2c:fe:11:27:30:fb:b8:b2:0a:ee:3e:c8:57:97:5a:
         92:a1:89:42:85:d4:2f:42:ef:c0:38:dd:14:70:16:ea:63:5f:
         77:78:4e:1c:33:d1:c6:51:0a:3f:d2:d4:bd:45:52:e3:a7:15:
         02:16:c3:fa:2b:ed:7b:37:c3:51:c3:a6:ac:b4:a1:6e:90:70:
         54:5d:8f:92:ff:3b:1c:85:10:02:de:55:fa:27:e8:e7:b1:1f:
         f3:0c:cb:06:89:03:1a:bd:dc:57:d8:d0:cd:f0:bf:03:b6:e4:
         5b:29:dc:ec:8b:c5:b6:19:66:40:2d:f9:64:b6:d8:bd:5a:f9:
         1c:ad:2e:8c:d0:ce:af:b5:e0:11:b7:75:ce:cd:a4:2a:a8:2c:
         2d:5d:24:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:58:29 2026 by rpki-client