Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32382e302f32342d3234203d3e2036303739.roa
File:                     3136322e3231372e32382e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          L6zUBrWzc4JFqwWTbknN+j+jNPURR90tgFJXeONNZLE=
Subject key identifier:   29:7A:41:77:51:3B:97:26:63:92:F0:56:48:9E:8B:BC:C0:5E:39:EF
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       7BA73BE131A096F22FE648773D12EAC9071C3D1F
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32382e302f32342d3234203d3e2036303739.roa
Signing time:             Thu 11 Jun 2026 14:53:36 +0000
ROA not before:           Thu 11 Jun 2026 14:48:36 +0000
ROA not after:            Thu 10 Jun 2027 14:53:36 +0000
asID:                     6079
IP address blocks:        162.217.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 20:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a7:3b:e1:31:a0:96:f2:2f:e6:48:77:3d:12:ea:c9:07:1c:3d:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Jun 11 14:48:36 2026 GMT
            Not After : Jun 10 14:53:36 2027 GMT
        Subject: CN=297A4177513B97266392F056489E8BBCC05E39EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ec:49:13:25:12:6d:ea:cf:81:7c:96:3d:da:
                    a7:b7:c1:82:96:99:6b:56:cf:2b:03:0e:61:6a:75:
                    cf:87:0f:f3:4a:42:a5:8a:11:db:14:d6:26:b0:18:
                    14:09:c5:b9:f5:db:d6:fa:97:e4:6f:93:f0:43:d4:
                    bc:cb:cf:22:2d:61:5f:8d:3f:5c:00:8d:ab:c6:0b:
                    be:73:c3:90:13:89:f4:90:69:e8:a4:f0:21:70:9d:
                    02:f8:8c:d4:29:60:82:76:2c:c3:57:ea:41:0c:7b:
                    24:1c:50:1f:95:31:2e:f4:d0:49:ef:64:b0:95:ab:
                    06:84:5a:1d:6e:83:5e:84:74:e1:56:c7:3f:e9:e6:
                    98:30:09:3a:d4:a4:f6:08:37:82:fb:7c:ab:30:1d:
                    19:1d:80:91:85:e3:6a:0d:d8:81:50:12:05:92:c7:
                    a1:67:cf:62:65:b3:01:cd:c2:b3:35:2c:19:51:1f:
                    2c:05:ea:8b:17:ee:15:d8:58:a2:41:34:bd:5b:2f:
                    5e:37:e8:b8:46:6c:be:e3:b6:57:d1:51:0e:37:1e:
                    24:d7:40:63:62:4f:67:05:51:79:45:3f:9f:09:c0:
                    b0:db:20:df:6a:90:ee:8a:bb:b7:e6:c0:c7:47:d4:
                    e1:46:70:b1:7e:94:18:6c:1e:1f:28:68:b2:87:1c:
                    9a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:7A:41:77:51:3B:97:26:63:92:F0:56:48:9E:8B:BC:C0:5E:39:EF
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32382e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:ba:3e:98:8b:2f:fb:bd:aa:73:8d:11:4d:17:59:43:db:e5:
         2f:db:08:5c:e5:60:a2:b4:e4:ff:43:c7:cc:24:de:b0:2a:69:
         28:5d:b2:26:07:a4:3f:df:9b:68:f6:2c:8d:b5:bf:32:47:73:
         51:ed:1f:a3:0f:c6:4d:91:83:14:d5:0c:cc:3c:d7:4e:31:84:
         fc:b8:53:dc:4e:15:c5:c2:33:c3:bb:ae:b6:27:a4:6c:db:90:
         d0:3f:ed:a7:40:85:9a:56:38:92:db:42:c1:72:77:d2:a6:de:
         44:cd:04:3b:67:2a:eb:d1:86:a9:5c:2f:63:a9:8b:e4:b0:ec:
         6d:b2:0b:99:b4:15:d4:6f:d9:c6:f5:02:52:15:14:fd:f1:0b:
         57:56:5f:4a:4d:8d:6d:3f:95:5e:f0:92:2d:f8:80:72:09:ce:
         fa:57:13:04:07:30:73:6a:86:c0:e4:04:c0:c1:54:b5:2e:85:
         42:36:ec:23:7b:99:88:99:3b:62:b1:26:a6:96:1e:36:f8:5c:
         7d:cb:41:c3:c1:1b:f3:87:fa:41:54:85:8c:fb:92:93:fd:9a:
         3b:6b:c4:1b:8b:2a:6a:40:8c:99:9b:61:77:dc:fc:cc:ff:a4:
         3a:f7:c7:cb:72:13:be:37:38:96:43:04:7a:6f:08:2b:47:70:
         69:89:ae:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:27:32 2026 by rpki-client