Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e20333939373635.roa
File:                     3132382e3235342e3230352e302f32342d3234203d3e20333939373635.roa (raw, json)
Hash identifier:          kZuudNcni6kyTF/Uxk+bRaHhyTnnT3fOztxa2EwvVdo=
Subject key identifier:   63:1F:E8:4A:D1:ED:DB:D0:E7:E6:DA:33:2E:FF:5C:B0:CD:70:58:07
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       19CE9065FDC150224086C2605BEB5E83C8214485
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e20333939373635.roa
Signing time:             Tue 07 Apr 2026 17:32:06 +0000
ROA not before:           Tue 07 Apr 2026 17:27:06 +0000
ROA not after:            Tue 06 Apr 2027 17:32:06 +0000
asID:                     399765
IP address blocks:        128.254.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 09:06:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ce:90:65:fd:c1:50:22:40:86:c2:60:5b:eb:5e:83:c8:21:44:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Apr  7 17:27:06 2026 GMT
            Not After : Apr  6 17:32:06 2027 GMT
        Subject: CN=631FE84AD1EDDBD0E7E6DA332EFF5CB0CD705807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:84:d8:cc:38:0d:fa:7b:62:db:d9:3e:af:53:
                    6b:e3:e9:36:8c:d0:8a:ba:97:31:e8:c4:72:85:cb:
                    2a:b5:be:3c:91:1b:ff:62:4d:50:d8:c1:9b:94:22:
                    b1:79:dc:b2:78:0c:79:7c:d9:69:8f:5a:ec:20:0b:
                    92:ae:bb:19:7e:d1:10:8a:96:1e:7c:db:8a:e2:3c:
                    6a:45:e6:5e:1a:ec:27:9d:ea:c5:fe:33:77:d8:e4:
                    ef:ff:57:48:61:bd:ed:69:66:af:81:e0:36:e9:52:
                    2b:5a:77:3a:34:c1:82:77:c7:3c:d6:0c:ef:d8:e1:
                    b4:1f:d9:47:c8:47:89:36:e1:c7:e3:92:09:a0:0e:
                    98:9c:1b:f8:26:51:cf:67:62:21:7d:d8:48:1f:c0:
                    5a:de:29:26:99:d0:30:a8:f8:22:b9:6e:a4:6f:fb:
                    e5:87:d3:4a:10:92:3a:44:37:bc:41:6c:5e:01:11:
                    98:9b:cc:df:19:f3:b6:70:c5:99:f3:e3:f8:60:2c:
                    ae:41:72:b8:dc:59:38:75:64:04:a3:da:40:4b:58:
                    c1:78:b4:9c:54:06:dc:eb:83:c8:04:d0:db:28:06:
                    f4:7d:da:4c:bf:03:ec:a6:27:a0:60:d9:b7:07:46:
                    67:28:f7:37:61:bb:f5:fd:b6:f7:d8:68:89:6b:42:
                    4e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:1F:E8:4A:D1:ED:DB:D0:E7:E6:DA:33:2E:FF:5C:B0:CD:70:58:07
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3132382e3235342e3230352e302f32342d3234203d3e20333939373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.254.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:93:c3:5f:a7:b5:6b:af:55:dc:3b:38:15:44:1c:b4:58:ca:
         1b:94:05:b2:ea:f9:1a:44:2f:6d:c2:10:b7:81:4c:34:5a:f4:
         29:bb:b8:a3:11:ee:d9:55:18:07:d8:34:ee:98:0d:ee:96:1e:
         b6:74:77:7e:57:e4:85:3a:93:ff:b3:57:56:1c:24:a5:3b:24:
         2d:36:b2:b0:ec:40:f3:3e:9c:e0:b5:36:88:54:08:18:df:c9:
         2f:eb:c6:29:96:e4:2c:dd:c7:47:61:74:26:fc:74:35:9c:b4:
         4a:8f:ac:10:55:cd:60:c5:1f:9b:4d:f1:24:4f:ac:fa:56:7c:
         45:aa:44:ec:10:aa:2f:8b:9c:31:ab:88:dc:27:9c:83:a6:a2:
         78:55:e8:2f:b9:65:a8:63:28:e9:40:21:f7:86:f5:ef:f2:b3:
         f8:af:7b:29:78:b4:4d:63:57:ea:b3:fd:c7:a8:8f:e9:b3:2f:
         7f:dd:57:cc:2e:49:c3:29:b1:b8:10:1e:a8:dd:b3:06:47:ab:
         00:d0:1f:26:13:cf:4c:77:9b:48:1c:d6:d2:39:7a:5c:17:65:
         d5:d6:65:38:ce:23:b1:a5:15:cf:00:b9:4a:18:7a:f5:3a:1e:
         5c:56:30:35:a6:0a:34:f2:c4:da:78:4b:8d:92:de:9a:d3:b2:
         97:66:b2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:53:15 2026 by rpki-client