Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e20343032323336.roa
File:                     3139322e3230382e372e302f32342d3234203d3e20343032323336.roa (raw, json)
Hash identifier:          4gHLvbIgF5z9pfoyDas2aN29x9L6vpU7lm7m9fzeZNw=
Subject key identifier:   BF:D4:BC:30:05:E6:FE:04:3F:68:93:AB:7C:F3:AE:4C:89:54:75:8E
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       4FB0A27E2CCEDE471B2677C6AD52B5CA1760E909
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e20343032323336.roa
Signing time:             Mon 06 Jul 2026 18:22:46 +0000
ROA not before:           Mon 06 Jul 2026 18:17:46 +0000
ROA not after:            Mon 05 Jul 2027 18:22:46 +0000
asID:                     402236
IP address blocks:        192.208.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:b0:a2:7e:2c:ce:de:47:1b:26:77:c6:ad:52:b5:ca:17:60:e9:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jul  6 18:17:46 2026 GMT
            Not After : Jul  5 18:22:46 2027 GMT
        Subject: CN=BFD4BC3005E6FE043F6893AB7CF3AE4C8954758E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:94:4f:94:59:bc:cc:77:67:92:af:69:90:b6:
                    a8:61:c1:fd:2c:dd:2e:60:5a:ab:90:9a:40:d0:0c:
                    10:b2:8f:89:a7:14:a8:9b:21:d6:34:7c:11:51:e4:
                    e3:d3:e1:93:0b:1b:98:e0:72:d1:ef:70:40:f0:e7:
                    29:ba:00:39:ef:d0:6a:f3:d2:88:a7:13:8b:7b:27:
                    cd:3e:95:31:8f:b0:f3:6a:c8:5f:07:e4:54:cb:06:
                    fd:a9:ba:d3:e3:97:d8:05:a4:8a:82:c9:ed:db:e3:
                    b3:f5:cc:c8:42:9a:89:63:97:d9:5e:c6:ab:9c:0d:
                    55:a8:0c:c5:36:4f:ad:c4:43:26:7e:d6:27:bb:d1:
                    e9:25:b4:64:42:3c:fe:72:c5:74:44:33:a5:c5:de:
                    aa:40:ee:68:79:63:37:95:78:51:50:1a:c7:35:29:
                    e8:0a:9a:7d:b3:09:75:57:87:1d:0e:50:8b:01:b1:
                    c9:e0:d6:d0:91:56:61:49:09:78:ad:cc:c3:2d:1b:
                    da:e4:16:d0:3d:55:45:e5:07:b0:ab:8f:56:83:74:
                    0b:28:ff:85:9f:d6:dc:b5:a8:12:6d:3f:1f:72:82:
                    3b:f0:ac:41:de:dc:5f:65:0a:fc:5e:9b:8b:34:d2:
                    0d:53:ed:91:ba:86:f7:fd:80:2e:d8:05:25:d8:fb:
                    61:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:D4:BC:30:05:E6:FE:04:3F:68:93:AB:7C:F3:AE:4C:89:54:75:8E
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e20343032323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:31:7b:c4:be:47:78:ff:12:e1:02:6e:eb:4f:4d:33:bd:d1:
         e2:e6:a4:80:45:40:78:1f:6a:50:36:7c:63:ba:0c:90:f1:db:
         78:cd:4c:f0:d2:6d:78:e6:44:e3:9c:a8:d2:ee:7b:15:c1:84:
         e9:c0:d0:f3:e3:90:fb:ad:d1:93:b9:f4:e2:ed:27:61:ec:e0:
         56:bc:57:b0:e7:73:63:1e:bf:d2:53:9c:2d:bb:1b:39:16:9f:
         f6:2b:3d:4e:4a:1d:37:04:8b:83:cb:74:19:5a:e7:d5:6f:22:
         88:4a:92:23:34:a0:78:12:48:8b:a4:32:c3:52:70:65:eb:a2:
         da:b6:6c:6d:55:7a:a5:21:95:93:39:96:4b:e3:7b:b8:59:c8:
         5c:68:ed:63:46:d5:97:27:18:22:ee:f9:43:60:26:7b:ea:9a:
         18:57:41:18:02:39:49:71:63:b0:b2:28:19:d6:95:50:90:7d:
         2f:d9:31:8a:82:9f:83:4e:d4:bc:9f:be:db:ec:c7:d0:de:06:
         d6:bb:f1:45:64:dd:09:c7:a7:df:49:62:73:26:21:58:8b:bb:
         57:fa:13:cf:e1:16:68:2b:4a:4b:9b:ac:34:2b:54:8a:d4:c4:
         5a:e0:ea:86:a7:57:a0:fb:29:a6:8a:ac:e8:fd:b9:05:61:86:
         86:69:69:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:21:26 2026 by rpki-client