Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa
File:                     3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa (raw, json)
Hash identifier:          jAMiDNZSalPALNGcpcZkRgEt8hslrjXwsLCTZ7uvCxY=
Subject key identifier:   D6:FC:40:5F:32:EF:28:99:5B:61:FD:30:35:84:A1:3D:F2:EE:51:03
Certificate issuer:       /CN=98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808
Certificate serial:       6CB07995619DBC08DED6C6D951763736E49276C3
Authority key identifier: FE:09:09:84:0E:0B:9E:54:6B:93:59:35:21:2C:E4:FA:64:85:E0:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa
Signing time:             Wed 09 Sep 2026 10:26:59 +0000
ROA not before:           Wed 09 Sep 2026 10:21:59 +0000
ROA not after:            Wed 08 Sep 2027 10:26:59 +0000
asID:                     63313
IP address blocks:        104.245.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/FE0909840E0B9E546B935935212CE4FA6485E0F7.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/FE0909840E0B9E546B935935212CE4FA6485E0F7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/317008f4-3048-4330-a34b-2a36dfe0f036.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/317008f4-3048-4330-a34b-2a36dfe0f036.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 02:16:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:b0:79:95:61:9d:bc:08:de:d6:c6:d9:51:76:37:36:e4:92:76:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808
        Validity
            Not Before: Sep  9 10:21:59 2026 GMT
            Not After : Sep  8 10:26:59 2027 GMT
        Subject: CN=D6FC405F32EF28995B61FD303584A13DF2EE5103
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:6b:41:b0:04:e6:51:de:90:38:23:64:cf:
                    d0:de:1e:6f:fc:de:3f:3b:d8:f2:84:13:1e:93:06:
                    f7:f8:60:d1:62:6e:ba:76:dc:93:c1:90:25:89:02:
                    6c:27:1a:95:0f:8b:1e:78:19:22:28:da:1c:d0:62:
                    e5:e8:22:30:22:a4:31:44:53:f4:42:86:77:8e:6e:
                    1e:3d:d9:be:24:32:12:e6:59:27:87:23:bb:d8:26:
                    55:b4:ff:e2:27:71:59:7e:73:cd:fd:a0:a6:36:9c:
                    32:b0:bc:41:11:5f:66:b3:09:76:28:be:e6:42:16:
                    79:da:c7:77:cc:95:e0:92:93:08:fa:6e:91:97:ca:
                    e0:1d:6d:fc:78:39:c6:27:93:f6:92:1a:78:cf:43:
                    7e:69:bc:e6:12:78:d6:0f:55:5a:39:a2:20:c8:74:
                    91:cf:84:64:78:62:bb:2a:f7:65:5c:5f:a0:c1:31:
                    0f:89:c6:27:5f:c9:40:52:da:9b:ca:a8:91:d5:fc:
                    1c:b2:69:4b:e2:e9:3b:75:69:fc:1f:4f:d3:60:43:
                    a7:a2:e3:3c:70:fe:e1:16:8c:d7:6b:18:ac:5a:80:
                    1a:55:aa:c8:43:7e:55:2a:04:af:d1:a8:bf:43:f6:
                    13:50:c9:98:51:fd:c9:6d:82:3f:b3:16:eb:cf:59:
                    b5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FC:40:5F:32:EF:28:99:5B:61:FD:30:35:84:A1:3D:F2:EE:51:03
            X509v3 Authority Key Identifier:
                keyid:FE:09:09:84:0E:0B:9E:54:6B:93:59:35:21:2C:E4:FA:64:85:E0:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/FE0909840E0B9E546B935935212CE4FA6485E0F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/317008f4-3048-4330-a34b-2a36dfe0f036/98eab7485ad707cd27e7a50e79cff2d6a62a5e30af4760c808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf7fb722e9017ffead9f534ac5/0/3130342e3234352e3132302e302f32322d3232203d3e203633333133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.245.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         94:c2:10:cf:77:ff:5b:3e:f5:da:4a:d4:82:e9:61:7d:d5:1a:
         7d:c3:ed:bd:ca:f8:16:89:48:1a:3f:33:34:c9:10:d0:fc:b3:
         d6:4c:b6:6d:51:14:09:8a:89:4e:6c:3d:d1:12:7a:52:d9:93:
         9e:07:73:e4:bf:b8:cb:02:f0:85:42:3b:de:1e:8e:45:f8:8a:
         0e:2e:09:b5:ce:c7:0d:c5:94:83:be:1b:b5:14:7f:43:4e:d8:
         cd:4d:c2:0f:12:4e:b6:fa:e1:6f:88:c2:91:32:e2:7c:35:71:
         0e:22:fb:64:29:0b:21:84:8b:4c:77:aa:05:49:4e:d4:b4:54:
         46:5d:d7:df:33:b1:dc:1d:54:8c:30:4d:c0:50:e8:18:1e:81:
         a7:0a:51:36:23:8f:bb:fe:78:af:2b:d0:c4:e2:b2:f0:ff:86:
         d4:64:47:d7:b6:a7:bd:11:ee:09:89:8d:87:31:00:db:66:02:
         04:7b:5e:74:4f:21:04:e2:f1:14:c1:98:20:31:dd:4d:3a:bc:
         2c:d4:f1:a9:37:a1:ed:18:ef:6a:6a:bb:f7:9d:af:8e:fa:b2:
         49:2b:61:61:2d:20:44:c9:5c:6d:92:39:48:2d:80:25:d0:e9:
         4a:0c:28:10:2d:ba:38:b2:24:97:1f:5b:03:eb:7f:c8:c1:e1:
         5b:4c:7f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:31:44 2026 by rpki-client