Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31382e302f32342d3234203d3e203239383032.roa
File:                     3139322e302e31382e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          amy5v2mtu6OqL+05o74B6K2pGz4EmF9/BMUkdegSMUs=
Subject key identifier:   8D:FD:D7:C7:2E:AF:52:F4:7F:74:9E:19:3B:FC:22:B6:9B:B8:C4:3E
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       6BAD6C2CB7CFA1D810AB36451D89D173A47BD7D4
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31382e302f32342d3234203d3e203239383032.roa
Signing time:             Mon 12 Oct 2026 09:36:20 +0000
ROA not before:           Mon 12 Oct 2026 09:31:20 +0000
ROA not after:            Mon 11 Oct 2027 09:36:20 +0000
asID:                     29802
IP address blocks:        192.0.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ad:6c:2c:b7:cf:a1:d8:10:ab:36:45:1d:89:d1:73:a4:7b:d7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Oct 12 09:31:20 2026 GMT
            Not After : Oct 11 09:36:20 2027 GMT
        Subject: CN=8DFDD7C72EAF52F47F749E193BFC22B69BB8C43E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:04:e8:79:b5:f7:7a:83:40:61:92:6f:1f:cb:
                    28:0c:7e:23:33:4b:77:d1:cf:d0:9d:77:62:16:62:
                    76:69:66:b1:b4:5c:35:bb:69:b4:05:7a:48:44:6a:
                    39:53:bb:27:9a:9a:cb:98:61:79:93:21:c9:0b:ec:
                    31:4c:95:cb:6a:e5:da:a3:83:fa:96:51:41:49:8a:
                    86:19:b8:5f:b4:c5:1b:20:9b:4b:f5:a4:af:83:38:
                    ad:93:82:bf:04:82:0a:10:63:34:e6:26:97:79:12:
                    33:ac:3a:a3:5b:54:40:d1:cb:fe:9c:5c:1b:c9:0c:
                    11:d5:bd:cf:e1:da:1d:7b:5f:03:f8:fa:69:dc:76:
                    6c:da:aa:02:af:06:98:84:f2:54:fc:85:f8:99:85:
                    c5:a9:61:38:6d:e7:ee:2a:9b:76:37:b4:d8:f8:25:
                    8f:a9:ec:a5:41:83:e5:7d:cb:48:6c:26:c6:47:71:
                    cc:24:e2:55:08:27:4e:4a:49:8b:f5:c3:b7:c4:b5:
                    29:64:83:f4:38:4b:ca:8f:84:2f:f0:a7:06:49:52:
                    46:7b:99:75:d3:0c:95:68:70:2d:f7:3e:01:71:3b:
                    c6:59:66:92:fa:58:9a:d8:70:d5:78:58:e9:a6:67:
                    49:54:9d:ef:39:ea:19:2e:ea:54:a3:10:f7:0d:07:
                    61:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:FD:D7:C7:2E:AF:52:F4:7F:74:9E:19:3B:FC:22:B6:9B:B8:C4:3E
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31382e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:00:4f:42:d2:47:1f:b1:c5:94:8c:0a:80:8b:3a:70:ca:c6:
         14:82:b6:b8:10:32:90:5e:18:16:02:6c:0f:cd:12:ef:b7:b1:
         c6:aa:b2:b4:af:d5:e2:d1:4b:43:9a:f4:c9:04:d7:c6:35:2a:
         54:1e:6f:9f:03:2f:5d:9f:91:1d:8e:97:ec:97:17:cb:96:5b:
         6a:50:2d:ad:8e:70:b7:a6:e7:b9:65:c6:b0:e9:93:ef:64:8f:
         6a:7a:07:96:aa:1b:4c:11:5c:c6:a2:de:9e:ab:67:6c:db:d9:
         64:93:50:4c:1a:5f:5b:55:bf:8c:a8:00:f9:78:cf:ef:b3:47:
         a6:64:eb:4d:70:9c:61:7a:aa:8b:de:ae:e6:d0:1f:07:8e:0e:
         32:a3:0e:c6:9e:4e:eb:ed:90:3a:2b:78:0a:36:d5:9b:f4:7d:
         d1:80:60:89:62:07:2a:f7:75:03:d7:97:b0:a9:67:df:74:43:
         e6:d7:95:6f:72:eb:ff:8b:54:84:4e:38:52:4d:1b:47:c0:e3:
         be:61:6e:5a:59:70:b7:0c:9b:20:3a:59:0b:e0:46:1c:4e:b6:
         52:42:fb:8a:50:d6:1b:32:1a:da:a8:af:02:a9:4d:4a:d7:0e:
         08:39:7f:9f:0b:23:cd:40:71:42:af:b3:cb:75:30:e1:15:69:
         35:8b:ea:34
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUa61sLLfPodgQqzZFHYnRc6R719QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYxMDEyMDkzMTIwWhcNMjcxMDExMDkzNjIw
WjAzMTEwLwYDVQQDEyg4REZERDdDNzJFQUY1MkY0N0Y3NDlFMTkzQkZDMjJCNjlC
QjhDNDNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugToebX3eoNA
YZJvH8soDH4jM0t30c/QnXdiFmJ2aWaxtFw1u2m0BXpIRGo5U7snmprLmGF5kyHJ
C+wxTJXLauXao4P6llFBSYqGGbhftMUbIJtL9aSvgzitk4K/BIIKEGM05iaXeRIz
rDqjW1RA0cv+nFwbyQwR1b3P4dode18D+Ppp3HZs2qoCrwaYhPJU/IX4mYXFqWE4
befuKpt2N7TY+CWPqeylQYPlfctIbCbGR3HMJOJVCCdOSkmL9cO3xLUpZIP0OEvK
j4Qv8KcGSVJGe5l10wyVaHAt9z4BcTvGWWaS+lia2HDVeFjppmdJVJ3vOeoZLupU
oxD3DQdhTwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFI3918cur1L0f3SeGTv8Irab
uMQ+MB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy
OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzEzODJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMyMzkzODMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAABIwDQYJKoZIhvcNAQELBQADggEB
ABkAT0LSRx+xxZSMCoCLOnDKxhSCtrgQMpBeGBYCbA/NEu+3scaqsrSv1eLRS0Oa
9MkE18Y1KlQeb58DL12fkR2Ol+yXF8uWW2pQLa2OcLem57llxrDpk+9kj2p6B5aq
G0wRXMai3p6rZ2zb2WSTUEwaX1tVv4yoAPl4z++zR6Zk601wnGF6qoverubQHweO
DjKjDsaeTuvtkDoreAo21Zv0fdGAYIliByr3dQPXl7CpZ990Q+bXlW9y6/+LVIRO
OFJNG0fA475hblpZcLcMmyA6WQvgRhxOtlJC+4pQ1hsyGtqorwKpTUrXDgg5f58L
I81AcUKvs8t1MOEVaTWL6jQ=
-----END CERTIFICATE-----
Generated at Sun Nov 15 04:33:45 2026 by rpki-client