Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3138302e302f32322d3234203d3e20383334.roa
File:                     3139382e3130352e3138302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          nTgW7SnhD+Yzwwg+GcSPJ92FUJv1VdPbcnuK7o99xoY=
Subject key identifier:   F5:21:EA:14:02:45:AC:E4:CB:9B:4F:36:26:3F:AB:0F:95:3F:CD:3A
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       03C70D8D35B47CFB62B58B4358C5A276A7FFF57D
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3138302e302f32322d3234203d3e20383334.roa
Signing time:             Sat 07 Nov 2026 00:02:59 +0000
ROA not before:           Fri 06 Nov 2026 23:57:59 +0000
ROA not after:            Sat 06 Nov 2027 00:02:59 +0000
asID:                     834
IP address blocks:        198.105.180.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:25:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:c7:0d:8d:35:b4:7c:fb:62:b5:8b:43:58:c5:a2:76:a7:ff:f5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Nov  6 23:57:59 2026 GMT
            Not After : Nov  6 00:02:59 2027 GMT
        Subject: CN=F521EA140245ACE4CB9B4F36263FAB0F953FCD3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ff:e5:8d:7e:d3:11:79:f4:6f:db:a8:f8:f0:
                    fa:ba:8c:9e:47:be:64:3f:86:0f:da:c8:a5:f6:70:
                    50:cd:4d:b0:b8:0e:33:39:66:27:a7:82:6a:94:38:
                    04:f9:ff:1d:55:a5:60:89:cb:ff:4e:a2:4d:fa:52:
                    3b:a5:dd:5a:46:29:36:0b:99:60:0d:00:f7:b0:49:
                    9f:46:53:ac:54:38:a9:23:8d:a6:e2:e9:6a:88:3a:
                    29:cc:d7:c2:72:02:e3:49:5b:e4:60:c1:6e:c6:c7:
                    74:85:fb:d8:a0:15:ba:72:b5:3a:42:1b:90:bd:c8:
                    d7:3f:fd:41:13:03:ec:56:5b:8e:c9:3f:42:7e:97:
                    2d:d8:73:93:51:dd:42:67:1a:db:54:de:aa:b1:78:
                    7b:8f:26:03:ce:ef:67:ea:b7:a7:97:a5:ee:82:ff:
                    5d:0a:a5:45:b7:2b:f5:f1:31:0f:f1:d4:71:16:02:
                    08:07:b0:c7:20:0f:fd:9d:b1:e5:e4:12:54:d9:94:
                    28:6a:75:72:2b:e0:16:91:26:03:c0:fe:e5:e4:3d:
                    51:9f:1d:2e:d7:42:b0:7c:21:e2:e1:5e:bc:94:61:
                    15:4a:02:56:aa:c9:31:1a:0a:95:f4:bb:37:46:df:
                    ce:fd:1e:30:07:3f:49:30:a1:11:9d:8b:5a:48:d6:
                    f5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:21:EA:14:02:45:AC:E4:CB:9B:4F:36:26:3F:AB:0F:95:3F:CD:3A
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3138302e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:91:fa:3d:0f:05:94:6f:62:35:0a:d7:74:bb:2f:64:df:5d:
         ef:4d:49:14:f1:55:29:33:05:b6:5c:eb:84:0f:d9:9b:a6:d8:
         f3:62:7d:28:bd:e4:c0:cb:62:63:1d:7b:00:0b:8f:c2:7b:a2:
         9b:e6:c9:5d:cb:67:c3:2e:fd:1a:fe:ca:e0:38:ee:cd:46:7a:
         e3:00:7d:a0:68:d0:a9:50:29:8a:f4:ea:af:00:ca:27:59:df:
         12:cf:32:e2:a0:fe:0b:71:be:33:22:e8:7d:d0:18:b8:89:45:
         73:3e:ab:97:3d:2a:9f:c9:2d:2b:d3:51:7e:bd:ab:82:48:37:
         82:ee:e2:6b:0f:e3:d9:0f:aa:aa:72:1a:16:1a:d1:25:19:06:
         06:fc:88:cd:24:f1:0d:46:53:d4:3e:0e:93:a2:2e:37:e2:76:
         6e:29:6a:78:3d:2e:8c:2a:96:cb:86:52:de:3a:f8:c2:9d:83:
         7f:d6:cc:30:20:20:2b:b8:99:04:ac:e4:c6:2b:99:7b:76:e5:
         44:8d:b4:96:f7:64:6e:6a:5a:d7:73:4f:7d:f5:47:1d:4c:1d:
         c1:67:7a:76:7d:ef:ce:fa:ab:30:b6:e0:b2:f2:01:50:3d:85:
         3e:b5:27:8e:17:af:13:33:ce:29:52:ef:b8:bf:ed:6a:f0:f8:
         43:6a:c1:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 04:24:06 2026 by rpki-client