Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3234203d3e20383334.roa
File:                     3231362e3132322e3132342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          zOERjLSyr1p/40WEWlJGHYYmwAeqlQlghhTApvYkbv4=
Subject key identifier:   77:36:CC:6B:4C:B9:30:76:05:35:58:ED:78:C7:0E:9F:17:74:C5:EB
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       08EA61B08E07C925D6DBCEE92C20567C619A93EA
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3234203d3e20383334.roa
Signing time:             Sat 25 Jul 2026 03:29:55 +0000
ROA not before:           Sat 25 Jul 2026 03:24:55 +0000
ROA not after:            Sat 24 Jul 2027 03:29:55 +0000
asID:                     834
IP address blocks:        216.122.124.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:34:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ea:61:b0:8e:07:c9:25:d6:db:ce:e9:2c:20:56:7c:61:9a:93:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jul 25 03:24:55 2026 GMT
            Not After : Jul 24 03:29:55 2027 GMT
        Subject: CN=7736CC6B4CB93076053558ED78C70E9F1774C5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b4:d5:55:5b:0e:b5:3f:7f:a8:4f:9c:94:93:
                    c8:e1:49:7a:c5:39:41:77:72:0a:ed:7b:88:47:44:
                    62:40:e3:64:19:10:2f:20:cb:fd:d4:7b:7f:75:3b:
                    a8:6f:33:51:fd:02:43:fd:21:41:f6:79:7c:71:3e:
                    5e:eb:d2:92:04:37:30:35:35:a0:96:42:82:5e:9c:
                    5f:47:39:69:e6:ab:6b:7d:ed:87:b5:47:7c:83:73:
                    21:e3:7a:5d:22:6d:4f:69:2e:26:a6:c1:f9:c4:59:
                    e3:38:13:9c:df:08:2b:e0:a7:56:cd:e9:4e:7f:cb:
                    3b:53:4b:a2:e1:59:e6:65:11:30:f7:71:c5:21:bc:
                    a8:24:3b:de:aa:33:50:9e:15:30:20:72:8a:d0:0a:
                    0d:d6:95:3b:f1:05:a4:fc:e3:ed:ed:e8:fa:34:12:
                    ac:85:23:a3:9e:b3:57:08:1b:02:b3:a6:60:0a:48:
                    14:3f:b6:6e:c1:ed:4f:87:78:3b:47:7f:7e:e1:08:
                    07:e8:cc:4c:66:ea:3d:ef:9d:45:cb:77:a6:e9:60:
                    89:00:e2:6b:fe:82:04:7a:29:63:bf:6f:41:bf:63:
                    8d:c6:31:32:fd:84:da:5e:67:84:79:9a:36:dd:99:
                    5f:ab:64:16:d6:9d:99:4f:a4:8e:86:c3:a2:62:20:
                    69:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:36:CC:6B:4C:B9:30:76:05:35:58:ED:78:C7:0E:9F:17:74:C5:EB
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:e4:e4:80:5a:f0:24:9d:ef:98:f5:8f:9f:a1:23:21:29:a1:
         70:39:32:ba:b9:0c:d9:9b:62:21:92:82:59:62:04:2f:ba:66:
         90:05:60:91:6e:39:58:10:80:34:a7:d0:79:90:ed:9e:0c:e0:
         d6:d4:fc:b7:04:f6:d4:0b:24:32:36:f1:07:c0:fe:4a:ee:0e:
         96:8a:99:b2:82:e4:6d:06:62:4c:3b:e3:97:46:04:4f:4c:f6:
         82:ac:ca:a2:a4:b3:40:60:14:16:fe:81:21:f3:c8:5f:71:1b:
         dc:d0:b7:d1:72:c5:66:18:8f:55:1f:7f:64:d8:26:20:0f:3f:
         40:6f:75:d9:6d:42:cc:36:42:c8:76:34:34:01:fd:10:c3:c0:
         f6:34:89:ba:fd:22:83:72:8d:3a:3c:82:4a:0b:ad:25:8c:78:
         c4:ae:a0:38:55:65:f1:97:a6:6d:64:72:2c:6b:c2:36:18:7c:
         81:74:f3:f3:41:2a:ba:7d:70:5a:f3:7e:9f:80:d8:d1:5d:7c:
         d4:5a:e2:58:a2:08:7c:28:a8:fa:1f:47:78:40:86:b6:63:a3:
         cb:70:9d:ee:09:21:7c:b4:94:d5:c3:99:93:79:c8:ae:34:ea:
         dc:17:f1:c2:26:0c:4d:25:f1:8c:40:b9:5a:b6:8d:b2:f4:30:
         20:e9:fc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:22:34 2026 by rpki-client