Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20383334.roa
File:                     3130342e3235342e3139342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          8L4aXO68DNrIrN/mI5BDaa+lr0w5YSHNl+uxoBsucf8=
Subject key identifier:   25:E7:99:71:9B:44:FD:1F:1C:43:A9:CD:3D:CD:99:CA:CA:95:68:A3
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       2EB18E9A1E017C128A13F85E01D2B9A913305426
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20383334.roa
Signing time:             Fri 17 Apr 2026 00:05:16 +0000
ROA not before:           Fri 17 Apr 2026 00:00:16 +0000
ROA not after:            Fri 16 Apr 2027 00:05:16 +0000
asID:                     834
IP address blocks:        104.254.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b1:8e:9a:1e:01:7c:12:8a:13:f8:5e:01:d2:b9:a9:13:30:54:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Apr 17 00:00:16 2026 GMT
            Not After : Apr 16 00:05:16 2027 GMT
        Subject: CN=25E799719B44FD1F1C43A9CD3DCD99CACA9568A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:27:df:7d:dc:45:66:93:c4:c7:16:e4:44:f6:
                    a5:f4:8a:2c:ac:0d:79:7a:7e:aa:c5:ff:74:23:ad:
                    8f:6d:5a:be:eb:ee:51:89:43:2f:35:0a:63:04:57:
                    d6:b0:51:bd:26:be:97:93:0a:4e:aa:bc:30:9d:91:
                    43:97:a4:53:e2:11:06:ae:4f:03:2b:62:ad:70:31:
                    d8:c5:1e:88:32:12:86:5f:6d:de:71:ce:66:13:7a:
                    cd:a4:a0:bc:a4:d5:8f:9b:80:e7:9e:72:00:15:ac:
                    f1:9e:ce:80:5f:89:b1:b7:79:16:ae:46:69:38:12:
                    b0:f1:c7:1d:b3:4c:9b:a8:34:e6:3c:40:8f:9a:46:
                    39:32:4a:0e:06:8c:36:ca:a8:61:c1:0a:4f:87:c9:
                    99:c3:98:74:dc:95:e7:16:f4:49:2a:cb:5f:15:22:
                    20:96:0c:58:bb:55:77:e9:f2:89:5d:20:86:d5:b9:
                    b8:fa:aa:62:5c:df:dc:3f:3b:17:bc:4e:0f:d8:8f:
                    18:38:5d:d4:13:77:eb:ad:07:c0:95:de:e6:2b:4e:
                    96:55:68:44:8c:53:9e:e3:52:67:e1:5a:f0:c5:f3:
                    81:83:ab:e9:e7:b1:c0:a9:8f:14:bb:da:c4:a8:ae:
                    44:f4:ab:a5:2b:d9:77:62:9d:f4:ef:37:86:eb:55:
                    9b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E7:99:71:9B:44:FD:1F:1C:43:A9:CD:3D:CD:99:CA:CA:95:68:A3
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:2e:a6:fb:06:eb:75:44:d0:e4:1a:ba:3d:f7:9b:b1:15:81:
         b9:fb:90:ad:b1:da:df:68:ee:6a:9e:68:7d:27:70:57:c6:a9:
         59:94:ab:21:e6:bf:9a:cc:1b:ff:24:49:04:d4:a6:8f:48:8c:
         93:64:f3:16:20:fa:50:fe:d8:c4:40:7c:ef:30:3e:56:20:2f:
         3f:11:be:b4:38:e0:83:93:12:e9:2d:01:20:d0:01:e5:09:0d:
         01:2e:8d:c6:e4:5d:7e:d6:06:8c:90:46:f7:9d:6e:0a:c1:69:
         43:36:84:4b:71:54:a7:35:5c:a8:09:8c:5d:c9:5f:4f:46:dc:
         72:33:38:85:9e:24:e7:09:14:51:27:ab:82:ab:d7:07:4c:86:
         e5:bf:78:26:c6:d5:4e:3a:f0:ca:78:f0:f0:f3:5b:21:8e:07:
         5e:4a:18:00:0e:56:73:68:50:24:af:aa:d4:68:07:24:c5:0d:
         e0:26:65:ce:8e:29:d5:43:d9:c9:1e:0e:37:6f:4d:92:0e:fd:
         a0:e9:bb:b2:7d:6e:4c:b5:6f:01:99:1f:84:e2:18:7f:c1:e8:
         0d:72:1a:f2:d9:ec:d3:9b:be:84:1f:b2:0e:84:4e:ac:3c:88:
         ed:53:03:bb:2d:5a:3b:3f:c6:e8:60:00:de:c3:bd:98:ce:85:
         7b:4d:7b:31
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIULrGOmh4BfBKKE/heAdK5qRMwVCYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZjgzMmIxMDczNTVkYTI3NjcxZDJiNTMyMmVkZDQxMjEy
ZmM2YjgyMmIwYjAxZGExZmQwHhcNMjYwNDE3MDAwMDE2WhcNMjcwNDE2MDAwNTE2
WjAzMTEwLwYDVQQDEygyNUU3OTk3MTlCNDRGRDFGMUM0M0E5Q0QzRENEOTlDQUNB
OTU2OEEzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSfffdxFZpPE
xxbkRPal9IosrA15en6qxf90I62PbVq+6+5RiUMvNQpjBFfWsFG9Jr6XkwpOqrww
nZFDl6RT4hEGrk8DK2KtcDHYxR6IMhKGX23ecc5mE3rNpKC8pNWPm4DnnnIAFazx
ns6AX4mxt3kWrkZpOBKw8ccds0ybqDTmPECPmkY5MkoOBow2yqhhwQpPh8mZw5h0
3JXnFvRJKstfFSIglgxYu1V36fKJXSCG1bm4+qpiXN/cPzsXvE4P2I8YOF3UE3fr
rQfAld7mK06WVWhEjFOe41Jn4VrwxfOBg6vp57HAqY8Uu9rEqK5E9KulK9l3Yp30
7zeG61Wb9wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCXnmXGbRP0fHEOpzT3NmcrK
lWijMB8GA1UdIwQYMBaAFLzeKwASGPzMBEZ0RQLsb6XJhfRrMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGNlOWRlZmUwMThlMzJkNzc3ZmIxYjYzLzAv
QkNERTJCMDAxMjE4RkNDQzA0NDY3NDQ1MDJFQzZGQTVDOTg1RjQ2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzUyYTI0YmZlLTc2OTUtNDU2Yy04YjNkLTM0OWIzN2IwNDdkMy9mODMy
YjEwNzM1NWRhMjc2NzFkMmI1MzIyZWRkNDEyMTJmYzZiODIyYjBiMDFkYTFmZC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThjZTlkZWZlMDE4ZTMy
ZDc3N2ZiMWI2My8wLzMxMzAzNDJlMzIzNTM0MmUzMTM5MzQyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABo/sIwDQYJKoZIhvcNAQELBQAD
ggEBABcupvsG63VE0OQauj33m7EVgbn7kK2x2t9o7mqeaH0ncFfGqVmUqyHmv5rM
G/8kSQTUpo9IjJNk8xYg+lD+2MRAfO8wPlYgLz8RvrQ44IOTEuktASDQAeUJDQEu
jcbkXX7WBoyQRvedbgrBaUM2hEtxVKc1XKgJjF3JX09G3HIzOIWeJOcJFFEnq4Kr
1wdMhuW/eCbG1U468Mp48PDzWyGOB15KGAAOVnNoUCSvqtRoByTFDeAmZc6OKdVD
2ckeDjdvTZIO/aDpu7J9bky1bwGZH4TiGH/B6A1yGvLZ7NObvoQfsg6ETqw8iO1T
A7stWjs/xuhgAN7DvZjOhXtNezE=
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:47 2026 by rpki-client