Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3230352e3231312e3133362e302f32342d3234203d3e203230343733.roa
File:                     3230352e3231312e3133362e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          BYcCUgcAVT4jUw3/YReC+MhZlQUis2klZJFN2ceXzR4=
Subject key identifier:   1F:2F:AB:A2:F1:C7:1D:3A:CD:AD:32:62:A7:8C:42:C7:F2:E6:9A:3C
Certificate issuer:       /CN=b1f31765fb6a8bff0a6631a170ea4413641304f671ecc2fb47
Certificate serial:       6E530D35F62A97AD23C801BDEB65DABB504D5890
Authority key identifier: 36:17:F1:8F:4B:13:5F:0E:16:4A:15:A8:B6:65:D6:20:51:58:86:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/b1f31765fb6a8bff0a6631a170ea4413641304f671ecc2fb47.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3230352e3231312e3133362e302f32342d3234203d3e203230343733.roa
Signing time:             Sat 23 May 2026 19:18:07 +0000
ROA not before:           Sat 23 May 2026 19:13:07 +0000
ROA not after:            Sat 22 May 2027 19:18:07 +0000
asID:                     20473
IP address blocks:        205.211.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3617F18F4B135F0E164A15A8B665D62051588648.crl
                          rsync://rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3617F18F4B135F0E164A15A8B665D62051588648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/b1f31765fb6a8bff0a6631a170ea4413641304f671ecc2fb47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/31eb74aa-03c1-4d0b-ad59-8e6af8a10878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/31eb74aa-03c1-4d0b-ad59-8e6af8a10878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 02:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:53:0d:35:f6:2a:97:ad:23:c8:01:bd:eb:65:da:bb:50:4d:58:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f31765fb6a8bff0a6631a170ea4413641304f671ecc2fb47
        Validity
            Not Before: May 23 19:13:07 2026 GMT
            Not After : May 22 19:18:07 2027 GMT
        Subject: CN=1F2FABA2F1C71D3ACDAD3262A78C42C7F2E69A3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3c:c2:97:ae:6c:4d:54:b3:65:b3:35:8d:78:
                    f4:33:66:e6:c2:47:52:b1:fc:a8:7c:06:92:61:e6:
                    14:f9:d8:dd:db:7c:44:b9:7d:29:73:95:12:88:23:
                    f4:c9:c4:54:f8:3f:01:af:37:00:98:35:c4:de:de:
                    0d:38:5d:3f:4b:94:61:a0:49:c9:ec:92:f0:a8:0b:
                    b0:fe:fb:c9:8e:ee:96:a7:78:4a:47:4e:d9:1d:87:
                    61:4e:89:7b:c2:83:37:5b:3f:18:b5:fd:4e:1c:63:
                    25:af:3b:4a:b1:1f:71:3e:91:58:59:bb:fe:9c:c7:
                    8f:88:1c:39:a2:d8:97:05:a6:d6:5e:5e:0a:30:bf:
                    75:8d:9c:25:8f:a7:31:2b:fa:00:c1:78:d6:7e:91:
                    43:b3:5b:6a:e4:4f:55:f2:3f:3b:f5:68:ca:e9:48:
                    da:32:63:d0:0f:4d:ea:37:84:16:ab:d9:12:b2:df:
                    d1:74:7a:53:6d:76:ca:ee:43:4b:86:b7:82:17:18:
                    c1:31:ef:d2:7c:57:15:0b:0d:a0:86:75:a8:52:15:
                    eb:f7:43:06:a2:25:85:67:c3:7e:54:d3:b8:69:fb:
                    b9:91:be:30:12:b6:83:21:4a:1d:49:d3:85:18:cf:
                    88:f6:58:76:06:74:1e:45:07:a6:2e:9a:60:1b:86:
                    ad:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2F:AB:A2:F1:C7:1D:3A:CD:AD:32:62:A7:8C:42:C7:F2:E6:9A:3C
            X509v3 Authority Key Identifier:
                keyid:36:17:F1:8F:4B:13:5F:0E:16:4A:15:A8:B6:65:D6:20:51:58:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3617F18F4B135F0E164A15A8B665D62051588648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/b1f31765fb6a8bff0a6631a170ea4413641304f671ecc2fb47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3230352e3231312e3133362e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:8d:88:31:81:a2:b1:5f:de:29:ce:a6:69:22:a5:a7:d3:ae:
         9f:e2:8e:d8:38:e5:83:51:cd:c3:f3:73:19:6f:d0:b3:d2:df:
         ad:e8:85:34:55:e5:4a:7b:50:1d:60:b9:af:5b:59:24:be:06:
         6f:c1:06:ab:d6:50:f8:17:39:e6:75:71:83:b0:3d:40:03:9b:
         94:ab:81:ee:a9:ec:47:2d:fe:c2:da:fa:d4:ef:eb:38:d1:bc:
         ad:cb:be:90:5b:c6:71:28:20:7a:bc:19:ea:4c:8c:4e:15:e6:
         4e:d4:e8:27:85:64:f7:af:b8:9f:00:42:e1:03:5c:69:16:40:
         5a:7d:48:4e:f2:48:3f:a6:d0:c9:be:50:f4:8e:f9:68:2d:c8:
         84:69:37:83:33:99:fb:b7:e0:3b:63:d3:04:93:9d:4e:f4:c3:
         7d:de:25:3b:14:e8:04:95:c1:eb:1a:1d:78:9f:17:f2:5b:87:
         ae:da:a4:eb:4e:fd:36:b2:0e:19:5c:36:23:06:12:a7:0c:2d:
         92:f9:a0:5d:e5:9a:ce:bd:b6:e1:00:a8:00:a1:46:af:6a:39:
         2b:05:ac:63:06:07:c7:28:ce:90:ea:24:7d:5e:3c:3b:d3:be:
         3a:28:2f:89:45:d4:16:79:58:a9:29:30:da:fb:bf:7d:4b:45:
         f4:8f:d4:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:16:58 2026 by rpki-client