Route Origin Authorization

$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/3/3139382e3230322e3139352e302f32342d3234203d3e203631393631.roa
File:                     3139382e3230322e3139352e302f32342d3234203d3e203631393631.roa (raw, json)
Hash identifier:          gagiEWsp2Z5p/dVjbM/z1Jpnx2GW7F4HQLjP6oOEJu8=
Subject key identifier:   92:CD:61:3B:CA:8B:5C:FD:7A:32:69:29:E0:E1:CE:2D:25:5D:8B:1D
Certificate issuer:       /CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
Certificate serial:       31A7553D5A8B441326B9BB6B30A6F61B65EFD4DF
Authority key identifier: DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
Subject info access:      rsync://rpki.nellicus.net/repo/nellicus/3/3139382e3230322e3139352e302f32342d3234203d3e203631393631.roa
Signing time:             Thu 02 Jul 2026 23:06:03 +0000
ROA not before:           Thu 02 Jul 2026 23:01:03 +0000
ROA not after:            Thu 01 Jul 2027 23:06:03 +0000
asID:                     61961
IP address blocks:        198.202.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl
                          rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/f0e3e332-2e13-47b7-be3c-bd2f40db6864.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 19:46:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a7:55:3d:5a:8b:44:13:26:b9:bb:6b:30:a6:f6:1b:65:ef:d4:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f9c05420b55c3ede703521d14d813758898042260f078b24d
        Validity
            Not Before: Jul  2 23:01:03 2026 GMT
            Not After : Jul  1 23:06:03 2027 GMT
        Subject: CN=92CD613BCA8B5CFD7A326929E0E1CE2D255D8B1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:52:85:ee:90:53:74:ae:a4:a9:be:39:bb:
                    6b:88:ad:34:34:d1:ee:df:46:a6:c6:b0:61:ff:64:
                    74:bd:49:30:b0:fe:93:ff:d1:45:dc:24:d8:02:01:
                    1b:b5:8a:11:43:8d:00:63:5a:c4:ad:47:30:b2:c8:
                    8c:84:ae:0a:54:7e:6c:4d:d4:7f:0f:89:98:33:54:
                    e9:8c:8b:34:10:2e:23:93:65:94:b3:04:5a:14:86:
                    49:a2:8e:9a:f7:a4:32:86:7b:ff:7c:c2:6e:12:83:
                    39:15:79:0f:92:97:94:44:a5:d8:17:f2:f9:e0:20:
                    3c:6e:68:37:c3:ea:da:c5:b0:03:02:2a:ce:9f:4b:
                    3a:3a:98:21:ca:07:62:05:41:ff:19:65:7e:d3:75:
                    fc:04:ed:07:5a:4a:98:06:dd:c5:24:04:05:1d:64:
                    56:55:d2:37:a8:3a:2f:2e:cd:b4:19:6d:8c:60:fb:
                    35:fa:05:71:ec:c8:a4:b7:70:78:06:84:5f:26:8a:
                    1c:48:95:d5:e7:e5:6c:a9:93:78:18:99:4e:d1:3b:
                    08:fe:b2:61:47:c6:6a:24:02:b2:2b:56:dd:b5:62:
                    8e:97:91:86:39:44:a7:b4:86:fa:f8:32:4c:49:53:
                    68:52:2d:eb:ea:58:c2:87:b2:39:27:17:d6:05:38:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CD:61:3B:CA:8B:5C:FD:7A:32:69:29:E0:E1:CE:2D:25:5D:8B:1D
            X509v3 Authority Key Identifier:
                keyid:DD:17:5B:D4:FB:7F:1D:C2:36:DB:13:CD:2B:42:A6:45:90:AF:EC:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.nellicus.net/repo/nellicus/3/DD175BD4FB7F1DC236DB13CD2B42A64590AFEC5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/f0e3e332-2e13-47b7-be3c-bd2f40db6864/7f9c05420b55c3ede703521d14d813758898042260f078b24d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/3/3139382e3230322e3139352e302f32342d3234203d3e203631393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:24:be:d1:e0:b5:8e:86:b0:70:96:92:85:5c:0a:4f:22:87:
         73:db:6c:83:08:fc:56:1b:9c:b0:e9:94:70:fe:f6:74:75:bd:
         33:3d:37:b1:51:49:f7:e1:54:93:73:a4:82:21:f9:61:99:b2:
         15:a4:37:f1:44:26:f6:f2:58:72:fd:d2:ad:c2:ec:0b:1c:8a:
         c1:a7:7f:a1:56:3f:f6:d7:1b:40:0c:76:60:e7:13:54:01:cf:
         66:ea:e1:43:11:4f:64:f0:a4:12:58:30:d2:10:3c:e0:4e:c9:
         13:d9:88:d0:1a:f8:dd:5b:2d:24:57:f7:51:81:ba:e6:0d:bb:
         f4:b9:12:7d:20:61:3b:d4:c5:87:b6:63:5a:80:73:b7:1c:9a:
         93:f0:5b:50:0d:d6:ab:e5:13:58:1d:5f:4e:28:c8:fa:c8:cf:
         aa:3d:42:93:70:69:c3:74:08:b8:3f:dd:92:97:b6:8b:f8:14:
         b5:d2:74:f2:1b:b5:a0:2c:6d:d1:ff:0e:ac:ab:fc:23:89:f9:
         db:a9:e7:ef:71:55:1f:a6:0e:a9:af:3f:31:e8:c3:00:19:96:
         44:2e:77:59:e2:e3:30:3e:3e:01:fa:10:9d:80:bb:db:09:b1:
         39:e0:7e:13:97:ec:f7:97:f5:07:c2:1d:0c:a4:d1:a6:d0:77:
         0e:f0:e2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:43 2026 by rpki-client