Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203632353533.roa
File:                     3137322e38322e38382e302f32342d3234203d3e203632353533.roa (raw, json)
Hash identifier:          +qPYAthE4squm67ieXCuN9ujemH3600XDcA7LDO4tuI=
Subject key identifier:   B4:6A:10:C5:33:F5:20:EE:9E:8B:A4:80:6C:85:69:31:50:2F:44:07
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       216147F02B4F4FCBE9577D3E3A82FBE94EDFB0E8
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203632353533.roa
Signing time:             Mon 27 Jul 2026 15:26:27 +0000
ROA not before:           Mon 27 Jul 2026 15:21:27 +0000
ROA not after:            Mon 26 Jul 2027 15:26:27 +0000
asID:                     62553
IP address blocks:        172.82.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:61:47:f0:2b:4f:4f:cb:e9:57:7d:3e:3a:82:fb:e9:4e:df:b0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jul 27 15:21:27 2026 GMT
            Not After : Jul 26 15:26:27 2027 GMT
        Subject: CN=B46A10C533F520EE9E8BA4806C856931502F4407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:7f:3b:19:a4:2c:fe:31:1d:2f:e2:a0:f7:
                    31:24:bd:8e:ea:2a:1a:9c:4b:da:0c:5a:0e:66:b4:
                    6c:b0:62:95:bc:b0:72:7e:d3:ea:ec:b3:47:78:71:
                    64:f4:19:d5:90:7b:6f:e2:3c:e5:33:51:8c:65:6a:
                    d8:8a:46:e5:3f:3f:5a:88:22:9f:cd:fd:79:54:d8:
                    31:b7:dc:85:c8:fe:ec:5b:f8:08:19:c3:21:ad:88:
                    be:a4:69:0e:e0:7e:c5:27:57:cd:3f:15:4a:a6:29:
                    26:3a:66:57:02:cf:e8:59:90:cc:a2:37:9a:46:9c:
                    cb:9a:34:03:68:e1:cc:dc:c6:87:1a:2e:62:40:d5:
                    85:be:cb:37:60:df:12:f8:cd:95:4f:2f:e8:bb:c1:
                    10:94:74:48:6e:84:b4:cf:a6:d9:17:08:56:b2:ed:
                    ea:ff:74:47:19:e3:26:8d:65:79:6a:63:42:ac:9e:
                    77:58:60:89:73:65:26:09:6d:91:f7:d0:74:76:8b:
                    79:c3:b5:57:ce:42:75:f3:8f:eb:ed:03:7d:36:94:
                    90:11:3e:c6:f0:23:74:c7:fb:4e:e0:ca:40:69:00:
                    7a:37:46:36:af:04:a0:b6:d6:c6:82:c7:19:aa:7a:
                    04:a0:68:0f:b2:65:1d:40:fe:80:28:66:9e:46:00:
                    8e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6A:10:C5:33:F5:20:EE:9E:8B:A4:80:6C:85:69:31:50:2F:44:07
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203632353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:4e:40:b5:1e:e0:1a:6b:71:00:f4:20:9c:6f:1b:a1:81:f7:
         e3:ba:c8:32:64:7b:f8:b9:a5:1a:20:f9:9e:c8:7f:95:78:85:
         46:44:f6:c0:f7:04:c3:f1:eb:62:d4:f4:1a:ec:29:96:03:4a:
         28:98:b5:a4:53:21:5e:78:4a:2b:4d:be:ba:42:15:ea:c1:7c:
         4b:47:5f:eb:45:b7:d0:c6:58:b0:21:d7:9d:93:a4:42:9d:b9:
         b5:b4:5b:17:34:cf:3d:d5:a4:97:fc:b0:6e:ba:8c:59:8e:a4:
         87:8f:bd:60:3e:78:d1:6c:10:b2:54:34:bf:b9:58:b6:65:b9:
         a9:ca:8e:e6:8a:81:a7:02:45:f1:0d:0c:44:55:e8:cf:27:94:
         ee:71:67:cf:cd:ae:1a:8d:73:51:16:fb:e9:f7:73:f3:a1:e1:
         a9:86:6e:c7:8a:2d:3b:85:1b:e5:53:8a:f9:dc:ee:13:cf:4e:
         b1:f2:6b:54:8e:f5:de:1d:04:00:f3:45:88:02:de:a9:34:35:
         ee:e3:0d:2f:cf:a5:17:e8:a0:a0:eb:d3:64:62:59:04:15:89:
         c3:fe:57:c7:1b:87:48:82:7d:13:be:6b:19:7a:ad:19:47:4c:
         6c:cc:cb:da:2f:2d:b2:bd:10:59:75:9c:4e:01:6a:6e:c3:f9:
         75:17:26:5f
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUIWFH8CtPT8vpV30+OoL76U7fsOgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjYwNzI3MTUyMTI3WhcNMjcwNzI2MTUyNjI3
WjAzMTEwLwYDVQQDEyhCNDZBMTBDNTMzRjUyMEVFOUU4QkE0ODA2Qzg1NjkzMTUw
MkY0NDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4x/OxmkLP4x
HS/ioPcxJL2O6ioanEvaDFoOZrRssGKVvLByftPq7LNHeHFk9BnVkHtv4jzlM1GM
ZWrYikblPz9aiCKfzf15VNgxt9yFyP7sW/gIGcMhrYi+pGkO4H7FJ1fNPxVKpikm
OmZXAs/oWZDMojeaRpzLmjQDaOHM3MaHGi5iQNWFvss3YN8S+M2VTy/ou8EQlHRI
boS0z6bZFwhWsu3q/3RHGeMmjWV5amNCrJ53WGCJc2UmCW2R99B0dot5w7VXzkJ1
84/r7QN9NpSQET7G8CN0x/tO4MpAaQB6N0Y2rwSgttbGgscZqnoEoGgPsmUdQP6A
KGaeRgCOPQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFLRqEMUz9SDunoukgGyFaTFQ
L0QHMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzMxMzczMjJlMzgzMjJlMzgzODJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM2MzIzNTM1MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACsUlgwDQYJKoZIhvcNAQELBQAD
ggEBAEROQLUe4BprcQD0IJxvG6GB9+O6yDJke/i5pRog+Z7If5V4hUZE9sD3BMPx
62LU9BrsKZYDSiiYtaRTIV54SitNvrpCFerBfEtHX+tFt9DGWLAh152TpEKdubW0
Wxc0zz3VpJf8sG66jFmOpIePvWA+eNFsELJUNL+5WLZluanKjuaKgacCRfENDERV
6M8nlO5xZ8/NrhqNc1EW++n3c/Oh4amGbseKLTuFG+VTivnc7hPPTrHya1SO9d4d
BADzRYgC3qk0Ne7jDS/PpRfooKDr02RiWQQVicP+V8cbh0iCfRO+axl6rRlHTGzM
y9ovLbK9EFl1nE4Bam7D+XUXJl8=
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:37:14 2026 by rpki-client