Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137342e302f32332d3234203d3e20323730313837.roa
File:                     3230392e38372e3137342e302f32332d3234203d3e20323730313837.roa (raw, json)
Hash identifier:          /ukZf5PTzIlGfvCOgWtd4XnV48SfZLnpj1XlN0iLNyU=
Subject key identifier:   D3:65:A6:23:BC:0D:28:70:0E:49:40:D5:7B:07:B8:51:43:31:7A:87
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       1FA8994718E5C83EF0411F37237E879D36D89487
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137342e302f32332d3234203d3e20323730313837.roa
Signing time:             Tue 14 Apr 2026 17:35:57 +0000
ROA not before:           Tue 14 Apr 2026 17:30:57 +0000
ROA not after:            Tue 13 Apr 2027 17:35:57 +0000
asID:                     270187
IP address blocks:        209.87.174.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a8:99:47:18:e5:c8:3e:f0:41:1f:37:23:7e:87:9d:36:d8:94:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Apr 14 17:30:57 2026 GMT
            Not After : Apr 13 17:35:57 2027 GMT
        Subject: CN=D365A623BC0D28700E4940D57B07B85143317A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:98:77:b2:84:74:99:16:f5:b6:83:7d:9f:0d:
                    47:0a:0b:72:ec:47:67:9b:78:d4:ea:b8:72:5f:ef:
                    8b:86:f4:26:0f:06:9d:2f:ab:22:75:1f:7f:53:1a:
                    73:fb:ae:a2:48:a0:d6:69:d8:44:fc:95:80:46:e7:
                    25:8e:f2:06:26:7d:1f:75:52:dd:81:4b:6a:d3:38:
                    d5:d7:d0:ca:5b:86:21:ba:91:7a:9a:3f:a8:1a:4f:
                    54:44:6a:af:4b:d9:23:f6:3f:a9:f7:43:45:e6:0a:
                    08:2d:77:9b:c3:1e:c6:ba:9d:25:c3:fe:1b:67:21:
                    76:c3:5e:72:c0:8a:bb:17:10:34:b5:0c:06:79:9d:
                    a1:10:28:5e:80:d2:43:9f:8a:c6:e6:4a:7c:fd:5c:
                    98:8e:87:1c:90:ef:1a:18:a1:c2:03:de:7b:4d:01:
                    e5:5c:2e:1f:eb:7b:f6:d6:ab:53:85:f0:99:3b:da:
                    b7:1c:e7:69:65:e6:8a:d0:9f:50:fb:da:a2:4d:fb:
                    2f:4f:40:44:b2:bc:d5:6b:63:2e:92:34:00:3d:83:
                    81:5e:50:e2:1c:68:ab:9e:f1:fa:74:76:21:3a:83:
                    64:23:79:c4:e3:b3:42:d2:bf:69:64:79:8d:4f:90:
                    42:4e:24:6b:1d:b4:ef:f8:a1:6f:6c:8c:ee:93:4f:
                    45:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:65:A6:23:BC:0D:28:70:0E:49:40:D5:7B:07:B8:51:43:31:7A:87
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137342e302f32332d3234203d3e20323730313837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:7a:cd:b5:43:5b:7d:da:a0:e3:0c:74:ff:66:74:75:9c:3d:
         de:6e:6a:4a:73:fc:8d:be:5f:42:4b:9c:51:b0:fe:c5:21:b2:
         aa:50:62:7b:7b:fd:b2:dc:8b:cc:0a:12:12:00:09:12:a1:34:
         41:e3:0e:af:1f:10:9c:c9:f1:2f:1b:55:27:c2:c9:3d:99:46:
         ba:92:16:c5:0c:38:27:aa:b5:2f:95:b9:55:41:56:3f:0c:bf:
         96:cb:81:09:3a:0f:68:db:d7:18:4d:6b:d5:8b:f8:3a:3c:8e:
         90:57:55:e6:07:e2:ef:13:27:74:ce:36:42:64:4c:81:e7:4d:
         c1:ab:60:d0:a1:c7:35:a0:88:ee:9e:e0:42:7f:dc:55:2a:e4:
         30:98:22:be:08:0a:5f:86:58:42:a2:b1:e9:2e:3d:db:63:17:
         ba:66:03:9e:e8:cb:ca:88:de:12:18:f9:3a:fa:a0:f0:86:53:
         ae:6a:5c:76:c7:5a:fe:63:cb:04:fc:22:53:22:e1:83:a7:29:
         5e:e1:e0:9f:20:8d:c9:ce:92:01:f9:70:54:dd:dd:c0:0c:fa:
         49:ae:d8:25:21:e7:c9:97:2c:bc:cb:49:05:68:06:97:d2:9b:
         ef:0f:79:da:6e:07:e2:d2:4d:7b:75:59:1c:4c:f6:81:8a:68:
         ab:cb:b0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:00:26 2026 by rpki-client