Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203439393831.roa
File:                     3230342e31342e37322e302f32342d3234203d3e203439393831.roa (raw, json)
Hash identifier:          mFyV1wfowgLxJ+IvrBYVny+Zq++eLuVsfLmdYjhaIwI=
Subject key identifier:   87:5A:6C:62:FA:17:C0:29:63:C6:E3:BB:DA:4E:18:B4:5A:86:B8:F3
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       13EB98F949B015F31A6046868A9C2B53789D1BD6
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203439393831.roa
Signing time:             Mon 24 Aug 2026 11:04:57 +0000
ROA not before:           Mon 24 Aug 2026 10:59:57 +0000
ROA not after:            Mon 23 Aug 2027 11:04:57 +0000
asID:                     49981
IP address blocks:        204.14.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:eb:98:f9:49:b0:15:f3:1a:60:46:86:8a:9c:2b:53:78:9d:1b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Aug 24 10:59:57 2026 GMT
            Not After : Aug 23 11:04:57 2027 GMT
        Subject: CN=875A6C62FA17C02963C6E3BBDA4E18B45A86B8F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:cf:07:c4:3d:26:22:13:86:b9:a6:46:5e:e3:
                    9f:59:e8:80:49:57:ad:55:b0:02:f8:f0:71:0f:a7:
                    31:4e:0d:d9:21:e9:e6:af:70:fa:d4:f9:5a:6d:f1:
                    b0:af:54:cb:79:b9:4a:2a:61:21:a4:3a:a4:14:6e:
                    b3:83:6e:b2:c9:c5:7f:6c:2d:ea:b0:15:75:b2:4e:
                    ad:bb:9a:27:94:ec:5c:1b:7c:be:34:89:b0:cb:12:
                    03:da:f5:50:41:25:12:5f:45:07:d3:ec:83:e4:58:
                    b1:5f:67:53:54:f6:73:26:55:84:ba:30:41:98:e3:
                    fc:2f:52:ef:07:a5:32:8e:59:01:30:2c:21:56:01:
                    0e:6d:31:d1:12:81:ec:41:0c:1e:90:7e:ce:38:f9:
                    0b:f3:aa:8d:c1:e4:cc:c8:a6:fe:9f:7a:06:4b:5f:
                    03:12:64:7b:73:db:61:08:8d:c5:fe:4b:b8:75:31:
                    36:2d:e9:de:95:7f:68:2a:79:f5:16:b9:d6:97:85:
                    ee:4b:08:2a:96:33:66:dd:dc:76:a3:f5:e3:bb:92:
                    ac:9c:22:75:bf:45:86:58:2f:4b:47:f7:6a:55:1c:
                    35:fd:9a:3a:ad:7b:56:be:18:ae:90:27:00:65:e2:
                    6f:fc:9d:d5:3c:72:67:4b:9e:80:0e:28:73:57:ff:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:5A:6C:62:FA:17:C0:29:63:C6:E3:BB:DA:4E:18:B4:5A:86:B8:F3
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37322e302f32342d3234203d3e203439393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:45:af:56:58:1e:f0:84:85:d7:c3:e9:2d:5c:59:9d:50:be:
         35:ec:50:ec:f0:f2:65:b9:41:76:c8:63:d3:85:ac:38:23:e3:
         ee:b5:01:ca:c0:b9:d5:a4:9d:76:0e:09:83:29:56:4a:38:0d:
         b2:1b:3f:bc:0d:d0:a2:b2:e9:ea:ba:c6:2d:39:45:07:73:e6:
         05:23:5f:d8:b3:db:9b:cf:ff:34:5a:7d:d6:e3:ea:c9:2a:8e:
         26:a9:e3:9e:8d:a4:e5:65:da:82:fc:55:c6:0c:2c:42:ac:cb:
         35:ef:1d:97:0c:40:cc:4a:91:8a:3f:57:f0:46:8d:61:63:7d:
         f8:84:61:70:ca:c6:7a:6b:58:8a:5e:4c:46:9a:72:c2:71:cc:
         b1:52:73:78:f9:cb:31:7b:79:5d:ea:4f:39:c5:13:ed:75:36:
         65:2b:b9:ea:14:cc:b7:b0:e2:36:d5:68:20:cf:53:d2:4f:bf:
         5b:7c:4b:e4:46:8a:c0:23:52:02:e6:cb:32:c7:4c:2b:82:2f:
         97:85:48:6f:7e:cc:9b:15:02:20:eb:99:29:77:a4:c4:67:ef:
         92:e6:12:01:d8:ca:f8:eb:ac:d5:24:74:9b:26:31:37:2d:ff:
         a6:4a:ef:2c:c3:c4:62:e8:56:b8:21:78:74:f7:b3:88:a7:7d:
         cf:5a:ce:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:48:24 2026 by rpki-client