Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa
File:                     3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa (raw, json)
Hash identifier:          cWApV5RRwIEkCqob9DwjjdVBwPC31c+7p8cFS5DC/iI=
Subject key identifier:   F3:91:16:55:4C:F4:D5:A7:AF:C5:59:70:C7:2C:09:07:98:3C:27:DF
Certificate issuer:       /CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
Certificate serial:       3171518BC9D586EB3441574A3D6081FDE51C601A
Authority key identifier: E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa
Signing time:             Wed 15 Apr 2026 15:07:23 +0000
ROA not before:           Wed 15 Apr 2026 15:02:23 +0000
ROA not after:            Wed 14 Apr 2027 15:07:23 +0000
asID:                     26127
IP address blocks:        107.191.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/87fd9355-ffdc-4986-9329-4d1909e01a2f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 19 Apr 2026 23:40:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:71:51:8b:c9:d5:86:eb:34:41:57:4a:3d:60:81:fd:e5:1c:60:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8
        Validity
            Not Before: Apr 15 15:02:23 2026 GMT
            Not After : Apr 14 15:07:23 2027 GMT
        Subject: CN=F39116554CF4D5A7AFC55970C72C0907983C27DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c2:9a:0f:cb:4b:af:77:6f:4d:37:a3:5c:f3:
                    a7:ca:ed:e8:84:72:04:67:c8:53:10:75:02:d3:c2:
                    80:3a:c4:88:81:e5:4b:35:fa:15:78:80:4f:57:83:
                    91:ea:ba:e2:12:8c:88:b8:e1:83:2f:26:13:79:f2:
                    6c:3b:b6:16:65:0d:b4:0b:cf:09:1b:db:e8:07:ad:
                    d9:a1:13:03:d9:cc:98:a4:b9:46:4e:81:b2:24:72:
                    e8:65:b6:0c:f2:9d:db:a4:df:7e:2e:a7:fa:06:ef:
                    da:dd:26:f9:6d:71:56:2a:51:47:e8:9d:cb:14:dd:
                    2e:80:7d:b3:43:98:19:6c:33:ee:6b:51:5f:d4:0f:
                    47:db:2d:99:5c:ae:1a:bc:bd:b2:63:6d:7c:a6:3c:
                    46:8f:f5:cc:45:54:46:d7:de:24:74:04:b0:e1:38:
                    6b:86:76:bb:5d:09:01:b4:61:f0:de:c8:81:f7:39:
                    7d:2e:60:92:7f:53:4a:29:b8:25:ae:83:9f:5c:76:
                    52:5b:2d:9e:27:70:be:26:6f:04:ff:90:38:7b:b2:
                    48:c5:af:1d:aa:db:0d:6a:28:19:eb:2a:39:f6:aa:
                    bc:f2:e9:48:36:c6:6e:66:20:fa:a4:9c:69:aa:ea:
                    f3:51:30:8d:1e:45:11:7c:0a:2a:35:8b:fe:e4:2a:
                    49:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:91:16:55:4C:F4:D5:A7:AF:C5:59:70:C7:2C:09:07:98:3C:27:DF
            X509v3 Authority Key Identifier:
                keyid:E2:0C:23:2F:52:49:CB:6D:81:8D:89:F7:B2:BD:9A:E3:A3:69:75:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/E20C232F5249CB6D818D89F7B2BD9AE3A369757C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/87fd9355-ffdc-4986-9329-4d1909e01a2f/1bf739f63c6943535cfe4ed2813f838ed560b7076f3a452eb8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/1/3130372e3139312e3132382e302f32332d3233203d3e203236313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.191.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:33:16:73:bf:90:98:d7:e7:4a:9e:f0:db:e4:31:ef:23:e6:
         01:eb:cb:64:9b:72:90:49:66:8b:09:71:1d:f6:e6:0e:d8:4b:
         37:e3:66:c7:33:e5:05:40:aa:f4:90:7c:79:d0:d2:c1:2f:ed:
         cc:24:c0:a7:44:f4:c7:ef:60:8a:e0:1c:0c:0b:67:c4:15:55:
         88:e7:e8:97:51:bd:3d:97:94:e1:d8:21:d9:f7:86:89:36:28:
         8c:fb:56:04:2b:8c:9a:ca:5c:6d:ff:41:e4:8d:ba:28:95:8e:
         50:3a:ad:ba:8a:25:ac:48:a1:d3:1d:ef:63:2c:25:b3:49:9a:
         dd:d2:87:b9:ab:fd:c8:49:cf:23:25:db:5b:7a:97:33:6b:c3:
         d5:c1:aa:1f:d4:a3:d1:af:43:8f:f3:63:6f:8b:e4:1a:97:94:
         29:ae:70:26:11:97:b5:62:f3:9e:d8:94:f7:06:69:06:b7:37:
         0e:21:d2:1f:d7:2a:ba:a1:90:b5:aa:ab:61:38:96:0d:ee:d5:
         9b:b5:33:96:f1:f2:29:1e:0e:cb:c2:b6:73:60:84:2a:c7:04:
         02:22:26:e8:60:14:1d:4d:bf:c8:23:fa:78:80:47:b9:79:8c:
         68:d0:ac:96:fa:14:e0:27:9d:24:58:f4:e4:5b:7f:b3:72:06:
         72:ab:64:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:22:59 2026 by rpki-client