Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e203535323835.roa
File:                     3137322e38322e38392e302f32342d3234203d3e203535323835.roa (raw, json)
Hash identifier:          P70ueAw0qsBupZEQrn/KjiGnw47mECfOioH3ino7sY4=
Subject key identifier:   9C:86:6A:66:03:95:17:19:E2:6E:D2:ED:5C:D1:EF:CB:60:2D:C5:CF
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       361ED26F719A92DF39182005D0E8BF9D671A91AD
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e203535323835.roa
Signing time:             Fri 10 Apr 2026 19:09:56 +0000
ROA not before:           Fri 10 Apr 2026 19:04:56 +0000
ROA not after:            Fri 09 Apr 2027 19:09:56 +0000
asID:                     55285
IP address blocks:        172.82.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1e:d2:6f:71:9a:92:df:39:18:20:05:d0:e8:bf:9d:67:1a:91:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Apr 10 19:04:56 2026 GMT
            Not After : Apr  9 19:09:56 2027 GMT
        Subject: CN=9C866A6603951719E26ED2ED5CD1EFCB602DC5CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4e:eb:20:3d:6d:b7:d0:f1:bc:d0:5f:35:f1:
                    35:18:29:b0:77:b4:42:54:3d:44:7d:bd:94:75:02:
                    e9:d9:c5:ed:31:2c:42:a1:aa:08:08:1a:5a:9a:ac:
                    7c:3a:f8:28:bb:f5:b5:f0:3b:4d:87:70:b2:fc:5f:
                    2e:82:7e:25:2f:85:a7:b5:d4:06:6e:76:30:16:02:
                    02:a7:c8:bc:77:a0:0f:3a:65:a7:26:52:3a:b9:e8:
                    e5:3b:5d:c3:ff:93:72:1d:f2:49:ae:e2:60:d4:0e:
                    e1:1c:71:67:d2:32:38:e4:c1:e8:5d:39:d2:6b:e6:
                    09:8e:3e:e4:58:e8:6b:23:b5:c0:08:75:56:84:29:
                    e3:04:45:d9:8a:f8:91:34:57:f1:c9:06:c4:3d:42:
                    a6:4e:77:fe:11:c3:f3:3d:30:ce:17:04:d7:1f:c8:
                    5f:23:20:37:e4:3f:12:67:fd:18:8d:b0:78:38:6e:
                    b6:dd:aa:64:87:5c:24:43:10:51:43:0d:7c:5a:85:
                    6f:ac:7c:02:5f:c6:3b:1d:9f:b8:3a:12:52:c8:8a:
                    3d:f8:20:78:11:ef:c6:9c:3d:b5:3b:e5:7f:0b:4d:
                    07:b7:ae:3a:2d:87:0e:b4:0d:ab:bf:6e:e0:d3:72:
                    ec:04:28:f5:56:03:6b:54:3a:da:59:ce:d4:10:ba:
                    04:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:86:6A:66:03:95:17:19:E2:6E:D2:ED:5C:D1:EF:CB:60:2D:C5:CF
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e203535323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:b7:38:97:94:ac:44:f6:f7:23:8f:f6:79:52:d1:c1:09:43:
         d2:a9:f5:db:43:47:81:93:35:51:ca:27:d5:9c:da:f0:38:a7:
         67:45:7d:1f:2b:2e:8f:24:c2:ea:fd:2e:5b:a3:50:62:8b:19:
         86:74:fb:be:23:06:5c:43:8b:41:76:f9:af:56:d0:3c:71:55:
         af:82:ae:e8:9c:08:d1:87:82:b6:c7:1a:09:e9:1e:e5:00:c5:
         39:fa:ec:97:b2:3a:3f:72:40:87:a0:bf:3d:b2:e7:fe:9b:fe:
         fa:01:81:20:b3:9d:e1:d3:fe:61:c4:3f:84:a6:5d:9e:84:a1:
         7d:10:5e:ee:3c:20:ac:3e:f5:45:41:e5:85:59:e4:b2:5f:f7:
         55:98:27:25:98:7e:e8:54:1d:a5:0c:2b:4d:f0:e5:08:bf:e2:
         76:54:8f:13:42:df:e7:b8:89:e1:33:82:2a:c2:84:68:09:f0:
         f2:4b:61:a5:4a:5b:e4:89:7e:01:e1:40:06:95:24:ff:b0:0f:
         a3:b3:83:2f:d7:99:4a:10:23:71:3a:3b:fa:41:65:a0:db:8b:
         a4:ef:57:5a:42:68:8c:42:10:ba:46:b0:af:51:38:2a:39:dd:
         11:90:9e:40:6c:3f:ed:8b:a6:9e:6c:84:a5:37:75:34:2c:22:
         f9:19:0c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:46:03 2026 by rpki-client