Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e2033323830.roa
File:                     3137322e38322e38392e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier:          20KUCdR6L3K69Q8+3m3RRsWOzJKHDbzNYdmqoXQ6xNU=
Subject key identifier:   91:A4:49:ED:E7:6C:2F:A7:EF:2F:36:22:32:02:CE:A6:7E:D8:37:E2
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       0864261D5FE3A8DED9D5424CF9DD72D30C8FC329
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e2033323830.roa
Signing time:             Sun 31 May 2026 09:01:03 +0000
ROA not before:           Sun 31 May 2026 08:56:03 +0000
ROA not after:            Sun 30 May 2027 09:01:03 +0000
asID:                     3280
IP address blocks:        172.82.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:50:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:64:26:1d:5f:e3:a8:de:d9:d5:42:4c:f9:dd:72:d3:0c:8f:c3:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: May 31 08:56:03 2026 GMT
            Not After : May 30 09:01:03 2027 GMT
        Subject: CN=91A449EDE76C2FA7EF2F36223202CEA67ED837E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:82:25:b8:b9:26:77:83:cc:11:2b:bf:5c:2d:
                    30:d5:a5:43:46:0e:9f:6a:f9:4b:53:3a:d7:94:7e:
                    43:26:76:be:f4:67:17:8c:48:76:7b:78:9b:4a:6b:
                    33:5a:88:ff:99:9b:51:cf:ea:01:f7:7a:d8:3a:a8:
                    2e:e5:3f:07:aa:fa:4e:0c:62:18:74:27:dd:44:62:
                    2d:81:cd:4c:db:8e:5c:e2:dc:02:12:ae:84:77:24:
                    e9:7b:c4:6a:11:b8:fb:1c:75:3f:a7:ab:e0:86:42:
                    97:f7:47:d6:32:8e:33:16:6d:28:1a:e2:7c:17:c7:
                    61:c7:8c:e5:0b:fe:ad:31:6a:3e:26:a2:10:aa:44:
                    35:a7:7a:ed:d4:bf:c0:b7:69:38:57:51:33:cb:5d:
                    37:e7:70:26:40:65:34:92:cf:cf:53:9e:94:9f:e4:
                    3d:76:a9:03:50:7e:ad:83:d1:31:0d:de:8d:eb:bd:
                    a7:1a:7a:9d:8d:cd:7e:d3:84:2e:ff:6d:26:62:e6:
                    06:6b:d2:9b:e8:01:0e:39:38:30:a3:3f:32:da:ba:
                    6d:5b:ba:8f:ff:3a:04:67:14:d8:4a:14:61:08:62:
                    a3:2f:80:49:a0:63:75:fa:42:5b:db:47:ec:8d:3d:
                    2a:2e:c8:36:18:12:22:08:f0:d3:25:37:3e:fa:c7:
                    b7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A4:49:ED:E7:6C:2F:A7:EF:2F:36:22:32:02:CE:A6:7E:D8:37:E2
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ca:06:88:f4:cd:25:4c:a3:79:6b:86:aa:2e:7a:49:67:4b:fd:
         08:19:f5:f4:70:42:29:cb:ac:8e:da:f6:d6:b8:36:91:d9:a6:
         35:45:59:92:8e:27:f5:a8:1c:84:7c:f0:6d:47:9c:8a:c5:b4:
         47:e3:d5:f9:2c:8c:33:cf:98:2c:b5:c3:01:e9:e1:ff:e6:c5:
         52:1f:99:61:f8:63:8c:32:7a:ed:97:b2:bc:65:71:1f:e2:04:
         e6:8c:a0:74:ae:24:23:72:92:3c:ab:db:92:be:c4:b4:eb:84:
         3d:d2:58:cb:e4:a4:3e:97:83:e2:1b:7d:c5:f5:33:b5:23:38:
         45:db:d1:a7:fb:24:cc:16:0c:39:a1:40:05:f1:f6:56:6e:3b:
         2a:a5:08:58:18:29:34:07:19:c7:01:3f:e8:a0:e8:fc:98:82:
         ea:17:d8:c4:ac:78:c7:8a:4d:de:d0:8d:09:66:89:33:ef:0e:
         77:bd:b2:6b:96:7d:06:a2:e8:1d:90:cd:ad:8a:27:e6:d4:44:
         e9:f5:4d:f5:fe:4a:d2:cb:8c:90:ed:e5:3f:1e:f7:ec:ed:bb:
         e5:0a:a9:9d:e4:54:12:4e:46:ea:f0:21:b8:4f:3e:cf:d8:77:
         24:c3:9a:d8:7d:76:fd:ac:75:7d:aa:cd:0f:6f:e2:95:42:0b:
         c2:c2:ea:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:25:58 2026 by rpki-client