Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34302e302f32342d3234203d3e203534313438.roa
File:                     3231362e3233382e34302e302f32342d3234203d3e203534313438.roa (raw, json)
Hash identifier:          7gwi6KyJjYXLiojiN1/LlrHCRHmaG2A3L+JMyCa5wag=
Subject key identifier:   07:81:ED:CC:1F:AD:55:96:E3:85:51:05:BB:8A:77:9E:C7:51:DE:89
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       0A953575BE7F682B2057E4C8CA9E354D0A948C0B
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34302e302f32342d3234203d3e203534313438.roa
Signing time:             Tue 02 Jun 2026 20:45:30 +0000
ROA not before:           Tue 02 Jun 2026 20:40:30 +0000
ROA not after:            Tue 01 Jun 2027 20:45:30 +0000
asID:                     54148
IP address blocks:        216.238.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 09:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:95:35:75:be:7f:68:2b:20:57:e4:c8:ca:9e:35:4d:0a:94:8c:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Jun  2 20:40:30 2026 GMT
            Not After : Jun  1 20:45:30 2027 GMT
        Subject: CN=0781EDCC1FAD5596E3855105BB8A779EC751DE89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:5e:a7:01:4c:c7:3a:79:7f:57:04:9d:39:8d:
                    06:30:c9:c4:8e:62:ad:1b:bd:d3:20:c4:ad:81:78:
                    e5:fe:7a:64:2d:c2:b7:79:3a:c0:54:1e:7d:82:ac:
                    85:cd:93:39:14:10:21:a1:d7:87:7c:34:7c:51:be:
                    63:26:98:a6:b9:2a:81:1f:ac:eb:1b:e1:41:b2:d0:
                    ab:e1:6a:c4:25:d1:b7:4e:18:90:b9:dd:27:7b:76:
                    39:75:a9:09:05:4d:18:5b:48:1f:74:24:fa:02:c6:
                    14:46:5e:53:e8:c0:3c:7c:d9:06:23:ba:d9:64:8e:
                    46:b0:32:1d:ba:13:72:03:c1:e9:8c:a6:ac:6a:b7:
                    bc:d2:8b:37:4f:21:8d:2d:37:27:46:17:a1:b2:bc:
                    37:e6:1a:8b:6b:25:28:ec:a2:b7:6a:c5:e9:e6:35:
                    67:0c:05:39:30:56:c0:39:8e:75:ab:63:34:cb:60:
                    97:dc:5d:71:0d:d8:6c:dc:e5:94:90:82:27:5b:dd:
                    b3:23:0a:c5:5e:26:a1:8f:3a:75:49:57:1c:43:6d:
                    68:a8:08:41:b7:13:78:61:69:b1:ea:2f:b0:0a:9a:
                    cf:6e:f4:20:50:cf:5c:75:48:1c:42:d6:f9:51:60:
                    11:c3:69:9d:bf:8b:fb:67:4c:32:29:1e:a5:b3:59:
                    1d:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:81:ED:CC:1F:AD:55:96:E3:85:51:05:BB:8A:77:9E:C7:51:DE:89
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34302e302f32342d3234203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:9c:50:94:c5:fb:41:57:bc:55:63:e5:78:b0:76:c7:d5:da:
         96:ce:07:03:23:48:30:9a:16:53:57:c1:dd:ca:fc:97:ef:42:
         ab:4c:e8:3b:dd:6b:98:57:be:26:0d:83:d1:05:d1:50:56:8b:
         9a:df:3c:79:50:a3:a2:f4:c7:fc:6b:e0:8d:66:de:fd:79:3d:
         6d:d1:bd:fe:b7:84:dc:c6:e6:3b:09:e5:af:81:97:78:9f:ee:
         8e:5d:05:5d:73:a3:e8:69:d5:5d:48:46:63:c2:31:eb:68:4f:
         9a:ed:5a:6a:44:bf:b5:93:d5:1c:9d:b8:e1:a5:e4:c0:9a:02:
         95:ca:57:37:61:6b:e6:97:87:b7:2d:26:e5:23:3b:4b:b7:8a:
         fe:a2:9c:be:82:bc:b2:27:1d:e4:b1:3f:88:28:47:82:ce:64:
         7e:59:e4:b5:21:f7:c9:b7:76:bc:a2:3f:1f:fd:14:e4:5d:9a:
         90:7b:cf:bb:12:26:7a:e6:17:fd:37:7c:6e:be:01:96:98:1d:
         b9:f0:2c:bb:4a:1a:7d:59:06:7b:3c:7b:54:63:95:78:fe:f9:
         ee:68:4e:5e:0f:0f:de:9e:4e:5c:14:a1:3c:ab:7a:84:f4:2d:
         be:c8:3f:c8:78:9c:dc:b8:9a:ac:03:c8:f2:99:c1:5e:31:88:
         72:55:73:b3
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUCpU1db5/aCsgV+TIyp41TQqUjAswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2VjYWUzMjA0OTUyZGE3NGViMWI5MzcxNGI2N2NjNjFi
YzRmN2IxNTk1YTIxMzI3ODgwHhcNMjYwNjAyMjA0MDMwWhcNMjcwNjAxMjA0NTMw
WjAzMTEwLwYDVQQDEygwNzgxRURDQzFGQUQ1NTk2RTM4NTUxMDVCQjhBNzc5RUM3
NTFERTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAml6nAUzHOnl/
VwSdOY0GMMnEjmKtG73TIMStgXjl/npkLcK3eTrAVB59gqyFzZM5FBAhodeHfDR8
Ub5jJpimuSqBH6zrG+FBstCr4WrEJdG3ThiQud0ne3Y5dakJBU0YW0gfdCT6AsYU
Rl5T6MA8fNkGI7rZZI5GsDIduhNyA8HpjKasare80os3TyGNLTcnRhehsrw35hqL
ayUo7KK3asXp5jVnDAU5MFbAOY51q2M0y2CX3F1xDdhs3OWUkIInW92zIwrFXiah
jzp1SVccQ21oqAhBtxN4YWmx6i+wCprPbvQgUM9cdUgcQtb5UWARw2mdv4v7Z0wy
KR6ls1kd8QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFAeB7cwfrVWW44VRBbuKd57H
Ud6JMB8GA1UdIwQYMBaAFARA7JGuBOgEkb9mFzYJfzVpx9sbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOTFmYjQzYjQwMTkyYmFjYjdhYmI3YTI4LzMv
MDQ0MEVDOTFBRTA0RTgwNDkxQkY2NjE3MzYwOTdGMzU2OUM3REIxQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2VlMWJkZmY4LWRiYjUtNGYwZi05OGU2LWM4ZTEzMjZiYTc5Yi83ZWNh
ZTMyMDQ5NTJkYTc0ZWIxYjkzNzE0YjY3Y2M2MWJjNGY3YjE1OTVhMjEzMjc4OC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh
Y2I3YWJiN2EyOC8zLzMyMzEzNjJlMzIzMzM4MmUzNDMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzUzNDMxMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANjuKDANBgkqhkiG9w0BAQsF
AAOCAQEAM5xQlMX7QVe8VWPleLB2x9Xals4HAyNIMJoWU1fB3cr8l+9Cq0zoO91r
mFe+Jg2D0QXRUFaLmt88eVCjovTH/GvgjWbe/Xk9bdG9/reE3MbmOwnlr4GXeJ/u
jl0FXXOj6GnVXUhGY8Ix62hPmu1aakS/tZPVHJ244aXkwJoClcpXN2Fr5peHty0m
5SM7S7eK/qKcvoK8sicd5LE/iChHgs5kflnktSH3ybd2vKI/H/0U5F2akHvPuxIm
euYX/Td8br4BlpgdufAsu0oafVkGezx7VGOVeP757mhOXg8P3p5OXBShPKt6hPQt
vsg/yHic3LiarAPI8pnBXjGIclVzsw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:10:06 2026 by rpki-client