Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37372e302f32342d3234203d3e203135383330.roa
File:                     3230342e31342e37372e302f32342d3234203d3e203135383330.roa (raw, json)
Hash identifier:          RO9/cgxzGTXac2v4l02LlJ+RSk7D6tUADEVN3tSjv8s=
Subject key identifier:   F3:51:7C:DA:D9:BD:CC:33:4E:A0:25:6A:E2:BB:3B:51:40:5F:E5:60
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       18D90879BD6AEEDED97025E7BEA6D7093B9CCC18
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37372e302f32342d3234203d3e203135383330.roa
Signing time:             Thu 13 Aug 2026 08:36:20 +0000
ROA not before:           Thu 13 Aug 2026 08:31:20 +0000
ROA not after:            Thu 12 Aug 2027 08:36:20 +0000
asID:                     15830
IP address blocks:        204.14.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 04:29:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:d9:08:79:bd:6a:ee:de:d9:70:25:e7:be:a6:d7:09:3b:9c:cc:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Aug 13 08:31:20 2026 GMT
            Not After : Aug 12 08:36:20 2027 GMT
        Subject: CN=F3517CDAD9BDCC334EA0256AE2BB3B51405FE560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:76:9d:fa:d6:f2:c3:45:35:a0:b2:f2:82:f5:
                    15:62:d0:0c:e7:8a:5c:6e:af:cc:47:eb:96:e9:d3:
                    9a:6e:c2:ba:02:d7:b5:85:70:f9:99:a5:23:be:46:
                    4f:5f:3c:de:a2:a2:01:70:56:05:25:2a:77:ba:ca:
                    4b:d6:9a:2a:63:a5:09:bf:a0:7c:36:d9:23:58:8c:
                    35:cd:d4:fc:bd:63:e9:0d:88:7b:8b:02:b5:50:9f:
                    09:8c:46:d8:8f:e9:ae:c7:8a:4a:cb:a2:a1:22:43:
                    d7:4f:a2:55:2b:25:76:ba:6c:21:7c:6e:f7:49:04:
                    ac:7c:f6:55:eb:ce:a4:9a:b0:65:25:5e:4a:b1:02:
                    2f:10:e2:e3:ab:28:6f:54:e7:1a:93:50:9c:c2:f4:
                    76:5c:48:bb:cc:30:bc:83:95:f9:4c:90:58:82:11:
                    dc:8d:a2:27:db:d1:95:00:77:d1:0e:98:87:ff:2f:
                    d0:28:12:52:66:31:44:a4:e2:6c:72:97:91:0a:3a:
                    4a:f7:5f:aa:e1:42:e3:d7:2e:2c:b7:dd:c5:c2:34:
                    71:e3:7d:4e:af:4a:57:8b:48:77:3c:3e:ff:41:6f:
                    98:27:8e:83:4e:8c:6c:5d:d8:43:c4:d8:2f:f8:e7:
                    19:24:cf:6c:b0:ad:17:0a:13:fd:33:e9:b8:d8:a2:
                    93:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:51:7C:DA:D9:BD:CC:33:4E:A0:25:6A:E2:BB:3B:51:40:5F:E5:60
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37372e302f32342d3234203d3e203135383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:6c:c9:38:18:c2:69:ce:a7:3d:e2:a7:56:b5:87:81:96:b5:
         07:b2:fb:b1:fb:1d:19:c7:c6:d3:5f:42:c7:50:31:f8:d8:88:
         a8:95:98:a7:79:4f:d7:4f:0a:a8:0c:52:51:41:4e:54:d3:30:
         ba:9b:cd:c2:0c:a1:b2:fa:d4:ab:2c:f3:ed:f8:21:45:9e:d7:
         8e:a9:1d:29:91:84:92:89:98:79:7b:43:cc:22:e0:b5:e0:07:
         b6:f1:de:8d:3e:46:7b:bc:1d:8c:ef:04:bd:79:95:66:d4:fb:
         f2:90:1e:98:a3:c1:95:64:3f:31:a2:71:c8:c1:6d:1d:ea:dc:
         51:9c:a5:6b:86:9f:d6:e6:ad:c4:58:2d:fe:b3:52:f9:1a:ca:
         d7:91:15:1a:79:58:18:09:48:32:cc:d3:23:94:50:30:e3:47:
         e4:71:1d:22:29:56:0f:a7:e5:a0:01:88:43:07:24:68:3a:6a:
         8b:01:81:ba:ad:18:ab:21:f3:c3:c3:e9:eb:3b:0c:58:33:a9:
         d9:2b:33:cf:87:19:16:9c:e3:dc:1f:ac:7c:fb:fb:f3:fd:50:
         ef:ba:b5:d1:5b:bb:5c:97:c6:ea:04:8e:0d:b7:5a:f3:80:38:
         c8:ce:c0:61:c6:6c:42:89:33:c3:14:8c:9b:e2:63:8e:89:8a:
         d5:ba:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:34:14 2026 by rpki-client