Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31362d3136203d3e2035363530.roa
File:                     3137322e3130392e302e302f31362d3136203d3e2035363530.roa (raw, json)
Hash identifier:          PkE19i0lqAqTw44D7eQ8bjepstxfSZK+Bi27hXbRIIU=
Subject key identifier:   F5:76:9D:C8:97:F2:12:B9:CA:15:1E:9C:5E:48:9D:3C:3C:37:C1:64
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       7A14B9BFCBCE03E921BB3B918E00E68F79B14911
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31362d3136203d3e2035363530.roa
Signing time:             Tue 27 Jan 2026 06:03:19 +0000
ROA not before:           Tue 27 Jan 2026 05:58:19 +0000
ROA not after:            Tue 26 Jan 2027 06:03:19 +0000
asID:                     5650
IP address blocks:        172.109.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 12:16:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:14:b9:bf:cb:ce:03:e9:21:bb:3b:91:8e:00:e6:8f:79:b1:49:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Jan 27 05:58:19 2026 GMT
            Not After : Jan 26 06:03:19 2027 GMT
        Subject: CN=F5769DC897F212B9CA151E9C5E489D3C3C37C164
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:fd:ce:c1:20:db:cf:ce:0e:37:bb:04:71:0e:
                    26:3c:c1:d5:71:05:cb:af:f8:66:76:b9:40:e9:5b:
                    2c:d3:10:f9:ef:c4:c4:aa:4e:64:b7:90:c0:70:44:
                    6f:94:4f:bf:78:e6:8e:81:41:f4:07:22:49:88:e3:
                    43:a1:7d:b1:6d:e9:87:e5:04:7f:dd:41:74:26:85:
                    25:77:b5:77:eb:9c:60:63:1d:f1:c6:8c:74:57:36:
                    f3:ca:cb:19:6b:3f:27:66:0c:98:1d:34:47:d6:9a:
                    01:a0:3a:b2:ab:14:e5:4f:21:1a:3a:bb:42:4d:09:
                    da:9c:88:b4:ab:4f:c4:88:37:50:bb:94:2b:e1:d5:
                    8d:94:c0:4f:2d:63:26:47:eb:18:0b:82:9e:a5:d9:
                    21:82:2e:b4:72:18:55:d9:d6:51:ee:4b:14:66:3f:
                    61:d9:07:d2:13:ee:f5:e8:20:b8:80:93:b0:cf:54:
                    24:7f:c9:c5:8a:bb:e4:c8:5d:e3:90:5b:87:7c:aa:
                    08:d1:ae:f1:9c:05:0f:3c:51:2a:7e:54:4f:02:13:
                    07:a0:ac:a5:60:39:6a:9d:8f:f6:ff:b7:64:f8:f6:
                    04:a5:07:8d:c8:79:09:70:56:1c:96:e4:de:dc:55:
                    75:eb:60:52:9d:4f:a4:3c:fe:ef:34:e3:25:1a:1c:
                    07:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:76:9D:C8:97:F2:12:B9:CA:15:1E:9C:5E:48:9D:3C:3C:37:C1:64
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e302e302f31362d3136203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         4f:5c:ea:fb:18:6d:a7:c3:a6:30:19:ab:db:07:4a:0a:81:b5:
         85:aa:67:38:5f:81:58:6c:30:0d:82:57:c3:3c:e3:95:af:81:
         ef:ff:14:aa:c2:53:39:9f:51:8d:7f:eb:42:a8:58:27:5d:c7:
         ae:a7:e3:c4:7b:a3:6e:4b:1a:fb:6e:23:f4:3d:56:c0:67:d2:
         06:38:6b:4c:75:55:bd:7a:f0:45:a6:49:14:9b:7a:02:62:1e:
         40:88:3b:92:48:0a:ee:55:ff:93:d1:a9:59:40:44:6b:c0:4e:
         bc:ff:19:ca:9a:21:cd:c7:58:83:e5:cb:a4:3d:83:ae:c3:18:
         32:58:93:a9:37:27:4a:7d:1f:ea:43:76:7f:86:94:7d:74:20:
         65:f5:af:9f:ef:fa:e9:b3:a0:80:cf:a9:a6:14:61:5b:08:c3:
         5e:3c:ae:7b:69:d9:0c:1f:79:92:02:aa:37:46:a9:65:a2:5a:
         f5:9e:a8:c5:e0:02:27:47:fc:3c:65:cd:6a:6a:59:18:3d:64:
         30:70:dd:3f:b5:0c:42:f0:e1:f2:08:0d:19:8d:55:70:6f:e3:
         64:aa:06:59:14:92:16:67:d4:83:f1:c9:59:c3:db:6f:76:0f:
         2c:b3:9a:c5:47:fc:18:1e:86:3d:82:da:a0:f7:7d:11:6d:8f:
         9e:07:b8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:30:01 2026 by rpki-client