Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2031.roa
File:                     3137322e38322e39302e302f32342d3234203d3e2031.roa (raw, json)
Hash identifier:          hHnP+9LXjd+pK1dyymUFMSoCRxBkatILN+HhcOzpHAA=
Subject key identifier:   2D:37:6D:EA:7F:A6:1C:32:98:11:78:26:D8:CC:93:64:C5:72:6A:D3
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       6707A431988E5B2DE3767D4B9149C825E4571D79
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2031.roa
Signing time:             Mon 06 Apr 2026 05:28:16 +0000
ROA not before:           Mon 06 Apr 2026 05:23:16 +0000
ROA not after:            Mon 05 Apr 2027 05:28:16 +0000
asID:                     1
IP address blocks:        172.82.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:38:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:07:a4:31:98:8e:5b:2d:e3:76:7d:4b:91:49:c8:25:e4:57:1d:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Apr  6 05:23:16 2026 GMT
            Not After : Apr  5 05:28:16 2027 GMT
        Subject: CN=2D376DEA7FA61C3298117826D8CC9364C5726AD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:d5:8f:96:5d:cf:92:76:5b:36:3b:3e:b5:
                    6d:d6:6b:7f:ac:3e:48:3d:da:4f:b4:a3:f9:38:55:
                    64:0d:19:00:e9:76:d3:6b:31:a5:93:91:39:d5:f9:
                    02:95:63:87:59:54:fc:37:23:e8:14:c1:c2:b5:eb:
                    e6:77:0e:b6:61:35:39:7a:4c:d7:82:13:2e:bc:d4:
                    a1:a9:9d:4d:b2:e6:e9:16:5f:60:49:7a:9c:90:b2:
                    41:f1:f3:8f:0d:d6:80:b8:72:7e:f4:f6:87:6e:50:
                    17:b6:21:4d:b7:73:bf:92:75:4c:c0:78:ee:fa:c8:
                    c7:7c:68:1a:da:78:3d:06:cd:73:f8:55:0f:e4:f9:
                    5a:73:85:ab:3e:35:85:7b:5a:9a:fa:b2:8c:6e:12:
                    2c:bd:1e:30:1e:d4:bf:8f:89:90:f2:2b:b2:ea:6f:
                    c0:00:3f:8c:a4:3b:c6:f3:37:a5:7a:fe:b7:6c:22:
                    3b:35:d7:bf:f9:bb:0f:ad:33:e4:53:4c:bc:60:59:
                    52:0a:60:e3:94:25:39:f7:cc:3e:01:74:a3:a6:a9:
                    1d:1e:e6:60:be:29:23:33:16:2a:76:ee:ec:16:46:
                    c6:a2:a7:e0:9a:6f:c3:55:ca:14:2d:bd:87:c1:9e:
                    94:40:bd:c8:e6:98:2a:ae:57:bc:d5:ae:fe:dc:28:
                    12:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:37:6D:EA:7F:A6:1C:32:98:11:78:26:D8:CC:93:64:C5:72:6A:D3
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e2031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d2:14:ba:1a:af:62:d9:56:c6:b5:6e:ba:8f:18:c8:85:e2:78:
         94:93:43:6e:68:0b:7c:90:4c:96:4e:24:61:6c:04:d3:bd:c3:
         38:26:9d:1f:98:27:7b:36:03:b0:fb:4d:bd:e9:8b:c6:3c:92:
         c9:61:98:3e:66:de:e7:34:28:2b:a2:8c:c9:61:a4:87:ae:43:
         b2:fc:ad:60:05:90:19:b5:0b:c6:1d:2c:c0:24:38:f0:e1:6d:
         04:0f:60:6b:17:52:e5:d2:be:30:98:ce:2a:90:93:39:d9:79:
         98:1c:38:f4:9c:e8:b1:c9:f7:fc:95:26:33:a5:49:16:60:2c:
         77:60:47:00:f5:a0:1e:1b:38:95:eb:6e:c9:00:45:13:38:90:
         1e:d4:02:44:ce:e4:01:b1:d9:b6:2c:8c:c2:cb:45:da:08:f8:
         9e:11:66:f3:ec:39:db:1b:f9:82:6d:43:f3:70:fe:6b:98:e0:
         f2:09:4e:a6:ef:c0:17:28:50:36:09:b4:7e:13:d4:69:78:10:
         ce:03:32:32:62:da:77:8f:45:5b:0d:4a:81:ef:6c:0f:65:45:
         39:71:9d:97:7d:ac:6c:ea:db:73:34:e1:0f:cc:46:d0:e6:da:
         7b:0b:b8:12:3e:7a:fd:7b:75:23:f0:a4:c7:5e:5f:9c:3a:ee:
         83:e5:90:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:23:25 2026 by rpki-client