Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2032393134.roa
File:                     3134372e3138392e3135322e302f32332d3234203d3e2032393134.roa (raw, json)
Hash identifier:          Ts5znQjksUt/v5tU4LCZTrZj41sfACxqxV9IuBybRRk=
Subject key identifier:   76:6B:09:C4:C2:6E:0B:46:94:CC:F4:CC:E3:8B:15:46:B3:DD:A9:11
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       31D63C19FA36C28C53678D6FFDA0ADF3CE2307C4
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2032393134.roa
Signing time:             Mon 10 Aug 2026 17:36:19 +0000
ROA not before:           Mon 10 Aug 2026 17:31:19 +0000
ROA not after:            Mon 09 Aug 2027 17:36:19 +0000
asID:                     2914
IP address blocks:        147.189.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 13:15:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d6:3c:19:fa:36:c2:8c:53:67:8d:6f:fd:a0:ad:f3:ce:23:07:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: Aug 10 17:31:19 2026 GMT
            Not After : Aug  9 17:36:19 2027 GMT
        Subject: CN=766B09C4C26E0B4694CCF4CCE38B1546B3DDA911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:84:de:e8:a0:cf:98:32:8c:fb:86:eb:1a:4a:
                    5f:b3:90:81:99:85:3f:58:ec:24:f7:c4:99:32:75:
                    ca:3f:11:8e:d3:d1:34:5a:8d:a4:75:a4:dd:56:64:
                    b2:ee:fa:e1:57:29:6f:cc:3a:82:dd:d5:46:8c:62:
                    18:c0:a2:a7:35:0b:b0:ba:3b:d9:e3:f7:08:24:0c:
                    56:d8:ba:2d:eb:c6:d0:6c:d0:de:d6:e9:13:f4:a6:
                    15:c7:df:bb:77:e8:0e:92:41:67:cc:ab:a4:05:27:
                    ed:9d:ca:f2:d0:ef:9b:8e:45:57:7f:be:fc:d7:4e:
                    0a:b1:59:fa:7f:c5:40:a2:88:f4:39:d1:95:fd:68:
                    13:61:50:14:2f:13:14:dd:72:1b:83:bc:16:53:96:
                    25:2f:54:45:aa:2a:0c:e0:80:27:85:57:f8:b5:2d:
                    16:92:02:5f:9e:c2:84:7c:4e:50:29:9a:6c:90:bb:
                    96:58:9f:d4:93:36:31:d4:64:41:24:5c:c1:cd:64:
                    70:d2:91:45:d1:11:55:a0:a0:05:d2:48:34:9d:5a:
                    cf:c4:cd:f8:c6:2b:fe:a1:1c:17:96:ab:7e:20:35:
                    b0:b2:55:a3:e4:09:b0:52:39:8a:63:f7:a4:da:59:
                    91:a0:84:78:df:e7:7d:88:69:0d:f5:42:55:16:55:
                    41:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6B:09:C4:C2:6E:0B:46:94:CC:F4:CC:E3:8B:15:46:B3:DD:A9:11
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3134372e3138392e3135322e302f32332d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.189.152.0/23

    Signature Algorithm: sha256WithRSAEncryption
         53:fb:19:d0:35:ba:5e:23:27:69:d9:0e:5a:bf:77:77:c6:86:
         c0:50:5f:55:fa:68:3e:05:f8:10:d6:03:de:61:de:7d:6e:44:
         8b:54:5f:95:a8:9f:39:e7:9f:41:d7:fa:dd:eb:03:5a:de:6a:
         96:57:08:8a:83:5f:97:b3:46:53:c5:54:00:c9:12:3a:10:b6:
         ee:03:1a:ad:fd:d5:a6:d5:19:b1:61:63:b1:26:9b:92:ec:72:
         8f:a6:21:6e:02:53:ff:9e:b5:a9:ca:21:91:98:e7:37:57:90:
         f8:01:9e:98:69:2d:82:d2:d1:6f:2c:86:57:56:89:66:84:73:
         ba:72:f6:f1:58:36:d6:dc:4e:04:f2:79:a9:39:35:56:80:31:
         ee:da:66:85:44:30:89:93:5f:b6:5e:5b:ac:26:83:77:27:22:
         67:80:2e:ab:b2:f5:3b:e8:69:fa:7c:e5:9f:1b:0c:8c:a9:40:
         ac:54:ec:79:cb:d4:ce:ee:f6:b7:25:b5:c3:92:c4:03:a5:25:
         e7:e2:15:30:67:3b:52:e1:87:bc:22:d3:f7:d5:92:98:65:e9:
         dc:86:56:09:e8:7e:c1:22:4a:d4:12:b5:3a:0a:34:7e:e2:d7:
         90:52:c9:75:51:01:a4:3a:bb:74:2c:46:fc:cd:1f:c1:05:00:
         c1:31:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:07:51 2026 by rpki-client