Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130352e302f32342d3234203d3e203531383532.roa
File:                     3137332e302e3130352e302f32342d3234203d3e203531383532.roa (raw, json)
Hash identifier:          e3sfOkCoDz1WaLed0W6qk6JPOqtZ96s7ADu+TDMTr/g=
Subject key identifier:   8F:4D:61:C8:AD:32:B9:65:A2:6B:E2:EB:8F:8B:D3:D1:A7:11:1B:54
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       256575618FD3DD0C58524606118200C30278615F
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130352e302f32342d3234203d3e203531383532.roa
Signing time:             Wed 30 Sep 2026 09:14:20 +0000
ROA not before:           Wed 30 Sep 2026 09:09:20 +0000
ROA not after:            Wed 29 Sep 2027 09:14:20 +0000
asID:                     51852
IP address blocks:        173.0.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:65:75:61:8f:d3:dd:0c:58:52:46:06:11:82:00:c3:02:78:61:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:09:20 2026 GMT
            Not After : Sep 29 09:14:20 2027 GMT
        Subject: CN=8F4D61C8AD32B965A26BE2EB8F8BD3D1A7111B54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:64:02:df:c6:9e:c3:58:0f:eb:49:c8:33:41:
                    be:e5:ba:46:24:c8:eb:05:fa:1e:0c:5e:49:d5:08:
                    b2:13:8f:8c:6a:e4:00:ab:de:4d:c9:69:99:b8:42:
                    4b:68:89:03:03:42:5f:7c:60:01:58:09:56:31:e3:
                    e7:b7:88:a1:6b:41:d5:82:2b:de:f1:2a:7a:f0:b6:
                    0e:04:ae:9a:c3:3c:19:78:24:83:6c:ea:b6:6a:f6:
                    b1:fb:7e:92:03:6d:84:45:9a:5b:4b:7c:f8:b2:fb:
                    2f:51:fc:35:9c:2f:7a:d2:56:cc:75:8a:b4:61:2d:
                    cf:74:ec:33:01:0e:c5:dd:f5:9d:b3:5e:22:86:29:
                    ce:cc:b4:b6:bd:dd:9a:09:79:5d:ec:ca:16:47:a1:
                    94:d7:f9:d8:41:4c:d8:1c:eb:43:dd:21:df:25:1d:
                    05:68:20:c6:23:1e:e8:97:a8:1b:da:c9:67:a9:7a:
                    2f:30:2a:b1:f9:2e:6f:6b:73:23:d8:83:f5:e6:3c:
                    6c:6c:23:54:83:cb:a1:76:c3:69:69:94:73:eb:1a:
                    35:a4:1e:9f:24:f1:65:2e:d4:87:1c:2f:4b:20:37:
                    aa:c6:ad:ed:16:21:dd:9f:14:43:68:e1:8d:53:90:
                    f8:6e:da:11:20:ee:d1:02:31:49:e6:26:93:eb:35:
                    37:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4D:61:C8:AD:32:B9:65:A2:6B:E2:EB:8F:8B:D3:D1:A7:11:1B:54
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130352e302f32342d3234203d3e203531383532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:99:02:6f:fe:64:bf:8b:ad:18:2c:3e:bc:4c:22:44:d2:a5:
         da:1d:c1:9d:33:30:d7:1a:8b:6f:12:3a:52:fa:89:6a:76:ea:
         75:fe:18:67:a6:73:c3:70:8b:f3:4c:1a:6f:7a:2a:99:8e:62:
         3e:a0:f6:fa:af:62:1a:51:87:ce:7f:29:ec:18:63:c9:65:b2:
         c3:f3:95:2a:db:e4:b0:26:64:30:41:43:eb:0e:11:71:f6:18:
         34:03:0d:03:44:72:be:e3:c1:86:84:12:8f:a6:2f:f3:f1:e5:
         5c:05:af:d4:10:2e:62:10:cb:1a:75:34:c7:02:df:3b:40:a1:
         8a:ff:61:32:03:8e:d9:d9:9f:9d:8a:3d:0b:f1:d2:0b:c6:0e:
         11:b9:32:5a:37:e3:54:42:d3:34:ff:ee:90:c9:4e:02:b7:43:
         94:ca:44:31:f6:b1:43:2f:30:bc:b4:5b:5c:22:42:5f:6f:55:
         59:37:12:5e:d9:34:7f:7d:57:99:73:99:10:2a:09:54:2b:7f:
         cc:eb:f5:58:66:3b:80:bf:99:97:82:c4:79:c5:15:c2:14:c6:
         c0:13:ab:fd:d1:4e:0d:9f:0e:e4:98:13:b2:9b:42:cb:44:bb:
         0e:21:ec:fc:47:ce:be:1a:c0:9d:00:1e:93:b3:6d:e7:41:93:
         10:85:4f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:23 2026 by rpki-client