Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa
File:                     3230342e31342e37382e302f32342d3234203d3e20343030303339.roa (raw, json)
Hash identifier:          XEG9XCspSFFWFbHVa0qg4L9TVh4dJciXz4gmF886tfU=
Subject key identifier:   B6:3F:10:94:4A:32:48:E0:8F:F0:C4:84:71:FA:80:6F:12:75:57:A9
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       43A84C24EA66D5E5CD15E9031E3EB1466B57FE09
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa
Signing time:             Thu 13 Aug 2026 08:36:20 +0000
ROA not before:           Thu 13 Aug 2026 08:31:20 +0000
ROA not after:            Thu 12 Aug 2027 08:36:20 +0000
asID:                     400039
IP address blocks:        204.14.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a8:4c:24:ea:66:d5:e5:cd:15:e9:03:1e:3e:b1:46:6b:57:fe:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Aug 13 08:31:20 2026 GMT
            Not After : Aug 12 08:36:20 2027 GMT
        Subject: CN=B63F10944A3248E08FF0C48471FA806F127557A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:ff:ee:37:09:59:c0:8f:75:87:c6:4a:3e:62:
                    22:6e:8e:29:3e:29:a5:e1:a7:26:ce:2f:21:65:18:
                    6b:fb:73:48:87:2c:05:61:3c:39:13:0c:d4:c2:d8:
                    70:5c:17:f5:54:01:06:1f:fe:ab:3c:13:bb:5a:8b:
                    b4:47:ae:34:de:58:40:0f:85:64:2b:4d:fe:72:8a:
                    de:29:96:41:9f:11:24:ba:0c:fa:7c:2b:75:50:63:
                    67:9b:25:0e:47:80:d4:88:f6:88:7c:10:57:44:da:
                    30:63:a1:42:45:33:03:c6:7a:d7:d2:b8:b0:01:27:
                    05:18:0f:2d:f7:42:b0:6c:56:8b:6e:b0:75:8e:8a:
                    54:16:b7:98:7b:b6:03:a4:4d:b3:fe:90:39:9a:f2:
                    d8:3a:bc:0d:3f:37:bc:b4:5e:4f:3c:2e:f0:bb:93:
                    ad:28:aa:fb:a0:df:8b:b1:11:07:5a:14:2d:b8:c5:
                    6d:eb:ba:31:44:bf:40:2e:aa:c5:b1:9b:65:95:07:
                    e7:ae:6d:66:e5:8d:c4:52:81:2d:bf:b1:89:9e:75:
                    e4:8c:6e:8b:05:c2:b1:8f:f4:d9:fb:c7:d9:e3:c3:
                    0f:fc:3e:f2:14:f8:de:fb:75:f3:29:22:09:60:3f:
                    49:02:b4:4b:c7:98:9e:7f:8a:73:0c:9c:e5:65:81:
                    be:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3F:10:94:4A:32:48:E0:8F:F0:C4:84:71:FA:80:6F:12:75:57:A9
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37382e302f32342d3234203d3e20343030303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:ad:85:c5:b6:42:70:42:6b:b8:5c:10:35:a4:e9:27:79:13:
         b2:c7:65:70:8c:1f:1a:f4:b4:34:e7:62:2c:96:2f:a7:98:cf:
         0b:2d:75:7a:74:72:f4:a0:30:0a:d0:08:45:da:8b:49:b6:d2:
         4d:b8:4c:7f:ef:e2:ea:1f:ea:12:52:dc:73:87:c3:64:4e:41:
         8c:db:5e:50:11:84:41:ce:9b:7d:57:d6:99:8f:ee:ec:48:bc:
         ee:b8:eb:44:9b:9b:af:1d:73:3c:05:12:2a:7f:e0:9b:07:68:
         44:96:a6:17:cd:d1:bb:9a:f9:50:78:52:8b:1b:c8:99:59:a1:
         da:4f:ee:76:d4:8f:5a:bd:4d:33:41:c8:88:bb:b8:e8:c2:09:
         20:85:4e:c4:2b:f2:36:af:6c:8d:e8:f3:9f:49:f8:b8:59:d5:
         69:5a:22:bd:ec:b7:a4:ab:5e:02:9e:5b:05:1c:3b:53:b8:de:
         6d:e1:03:f0:9d:63:13:93:bf:e1:ee:69:70:ae:61:da:9a:05:
         26:76:59:e4:49:d8:f1:b9:bb:85:b0:33:7c:8b:b2:1a:99:41:
         92:43:6f:7a:c6:a5:c8:af:53:cf:64:46:61:eb:81:39:64:65:
         0a:ed:d5:c3:74:f4:a7:a2:f8:39:04:6e:ca:48:68:ed:21:d2:
         2d:e1:b2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:48:46 2026 by rpki-client