Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/3230362e3232302e34382e302f32322d3234203d3e203136393039.roa
File:                     3230362e3232302e34382e302f32322d3234203d3e203136393039.roa (raw, json)
Hash identifier:          22+huMCmCpaBuLjkQMJ5WLsYHgr48JaX+Qp1G9WcOFU=
Subject key identifier:   32:17:31:6D:53:29:97:98:65:03:A5:5F:29:60:7C:06:17:1D:EC:D9
Certificate issuer:       /CN=506be15e199605e756028137092036298a746bcdfe24227e72
Certificate serial:       13423992F7342C85DD2F4413958A3EA48402C632
Authority key identifier: 15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/3230362e3232302e34382e302f32322d3234203d3e203136393039.roa
Signing time:             Thu 01 Oct 2026 22:02:47 +0000
ROA not before:           Thu 01 Oct 2026 21:57:47 +0000
ROA not after:            Thu 30 Sep 2027 22:02:47 +0000
asID:                     16909
IP address blocks:        206.220.48.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/f914ac1a-b017-4cf4-9c3d-349dd19000d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 19 Oct 2026 22:28:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:42:39:92:f7:34:2c:85:dd:2f:44:13:95:8a:3e:a4:84:02:c6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=506be15e199605e756028137092036298a746bcdfe24227e72
        Validity
            Not Before: Oct  1 21:57:47 2026 GMT
            Not After : Sep 30 22:02:47 2027 GMT
        Subject: CN=3217316D532997986503A55F29607C06171DECD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:1f:4b:77:a9:20:a9:80:3c:17:31:37:54:
                    0d:30:eb:43:33:f5:93:a9:8d:df:86:15:8f:24:a4:
                    05:45:11:86:27:e2:02:1a:8a:10:79:7a:2b:a2:04:
                    c7:21:bf:26:f5:54:49:56:4b:65:46:31:2c:b0:56:
                    29:19:cb:cb:7a:50:90:8b:7c:f5:22:0e:94:98:9e:
                    ea:67:d9:19:7f:0b:b4:b0:ef:cf:d6:a5:a0:b6:c7:
                    a1:d4:a0:51:b6:f9:b5:58:08:85:e2:44:7b:87:a8:
                    44:66:9c:c0:b5:f4:da:ec:e7:ce:5d:82:5d:21:84:
                    f8:e4:91:ac:6b:ce:d7:b3:76:a0:9a:21:4e:1e:59:
                    e9:de:04:64:11:a3:1f:4e:34:36:3b:db:ee:81:1d:
                    92:b4:39:e9:a6:82:0e:d3:e7:b4:ab:c7:14:99:5e:
                    8a:ec:94:15:82:65:dc:a9:74:e6:37:37:06:5d:cc:
                    9e:db:41:ae:7c:4b:28:91:10:b4:28:ff:5a:79:cf:
                    25:05:8d:f6:48:df:1e:06:1f:a8:ce:d1:1c:0c:aa:
                    3f:1c:48:f2:cc:a5:fb:e3:a8:3a:31:ce:51:f6:19:
                    48:a8:ef:ad:82:d8:dd:6d:be:56:3d:d9:d8:24:46:
                    37:47:c5:50:bb:ea:84:9f:4c:43:1c:03:63:a1:f1:
                    a3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:17:31:6D:53:29:97:98:65:03:A5:5F:29:60:7C:06:17:1D:EC:D9
            X509v3 Authority Key Identifier:
                keyid:15:E0:24:37:1A:83:5B:B0:0E:AB:BA:FB:44:F6:8F:0F:8A:EB:F8:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/15E024371A835BB00EABBAFB44F68F0F8AEBF8F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f914ac1a-b017-4cf4-9c3d-349dd19000d3/506be15e199605e756028137092036298a746bcdfe24227e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193df45a0ea6687/0/3230362e3232302e34382e302f32322d3234203d3e203136393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:04:2b:00:e2:35:1c:70:95:51:5d:44:a5:3b:56:29:5d:68:
         97:b7:26:74:1d:53:9a:b8:52:50:2a:94:d3:12:de:96:75:27:
         2d:97:13:d1:ab:f9:f8:06:f8:c5:df:38:74:23:cd:46:00:7d:
         30:be:d0:46:48:85:d0:60:f0:2f:3c:4d:7a:13:51:39:ab:24:
         32:d7:83:39:51:a2:5d:4e:cb:35:f2:51:e9:90:71:79:1a:f0:
         41:9c:f9:96:db:b4:2d:ae:ce:d4:7b:d9:d5:ab:62:83:70:e5:
         eb:65:c3:1c:b3:f8:8d:c9:93:6f:86:3b:1e:a8:37:40:b9:84:
         b1:6e:10:ba:29:d7:e7:6b:7b:b4:ba:be:56:b9:b3:df:69:93:
         f9:3a:58:bf:c9:a3:49:53:c0:52:18:0b:06:25:f5:4d:a8:d8:
         e1:df:52:1f:49:db:55:b4:83:bd:55:25:07:ba:ce:2f:67:6e:
         f1:c6:c5:d6:71:ec:8d:b2:64:00:ff:0e:49:59:37:62:6f:0b:
         6f:8c:f5:9a:39:06:4d:d1:76:97:71:ff:c6:f4:46:04:8d:cd:
         4c:c9:37:9d:6b:c2:06:dc:62:d6:0e:3d:11:8b:a8:4a:55:5c:
         82:d0:5c:2e:26:d5:6b:15:81:70:cb:0d:15:cd:16:8c:da:9b:
         e1:ca:e8:47
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUE0I5kvc0LIXdL0QTlYo+pIQCxjIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNTA2YmUxNWUxOTk2MDVlNzU2MDI4MTM3MDkyMDM2Mjk4
YTc0NmJjZGZlMjQyMjdlNzIwHhcNMjYxMDAxMjE1NzQ3WhcNMjcwOTMwMjIwMjQ3
WjAzMTEwLwYDVQQDEygzMjE3MzE2RDUzMjk5Nzk4NjUwM0E1NUYyOTYwN0MwNjE3
MURFQ0Q5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgUfS3epIKmA
PBcxN1QNMOtDM/WTqY3fhhWPJKQFRRGGJ+ICGooQeXorogTHIb8m9VRJVktlRjEs
sFYpGcvLelCQi3z1Ig6UmJ7qZ9kZfwu0sO/P1qWgtseh1KBRtvm1WAiF4kR7h6hE
ZpzAtfTa7OfOXYJdIYT45JGsa87Xs3agmiFOHlnp3gRkEaMfTjQ2O9vugR2StDnp
poIO0+e0q8cUmV6K7JQVgmXcqXTmNzcGXcye20GufEsokRC0KP9aec8lBY32SN8e
Bh+oztEcDKo/HEjyzKX746g6Mc5R9hlIqO+tgtjdbb5WPdnYJEY3R8VQu+qEn0xD
HANjofGjAwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFDIXMW1TKZeYZQOlXylgfAYX
HezZMB8GA1UdIwQYMBaAFBXgJDcag1uwDqu6+0T2jw+K6/j3MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZGY0NWEwZWE2Njg3LzAv
MTVFMDI0MzcxQTgzNUJCMDBFQUJCQUZCNDRGNjhGMEY4QUVCRjhGNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1L2Y5MTRhYzFhLWIwMTctNGNmNC05YzNkLTM0OWRkMTkwMDBkMy81MDZi
ZTE1ZTE5OTYwNWU3NTYwMjgxMzcwOTIwMzYyOThhNzQ2YmNkZmUyNDIyN2U3Mi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Rm
NDVhMGVhNjY4Ny8wLzMyMzAzNjJlMzIzMjMwMmUzNDM4MmUzMDJmMzIzMjJkMzIz
NDIwM2QzZTIwMzEzNjM5MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAs7cMDANBgkqhkiG9w0BAQsF
AAOCAQEAkQQrAOI1HHCVUV1EpTtWKV1ol7cmdB1TmrhSUCqU0xLelnUnLZcT0av5
+Ab4xd84dCPNRgB9ML7QRkiF0GDwLzxNehNROaskMteDOVGiXU7LNfJR6ZBxeRrw
QZz5ltu0La7O1HvZ1atig3Dl62XDHLP4jcmTb4Y7Hqg3QLmEsW4QuinX52t7tLq+
Vrmz32mT+TpYv8mjSVPAUhgLBiX1TajY4d9SH0nbVbSDvVUlB7rOL2du8cbF1nHs
jbJkAP8OSVk3Ym8Lb4z1mjkGTdF2l3H/xvRGBI3NTMk3nWvCBtxi1g49EYuoSlVc
gtBcLibVaxWBcMsNFc0WjNqb4croRw==
-----END CERTIFICATE-----
Generated at Mon Oct 19 15:11:14 2026 by rpki-client