Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          PbanzRaUOFj6Kx1btfwRK6unM0cAc5Bn2DdHGvDGi+8=
Subject key identifier:   0E:8F:D6:A1:39:A9:DE:28:19:36:3F:E4:5A:D0:9E:4F:1B:67:3A:BE
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       305C24018DB294B349AEE563671A6A03D3EF429B
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 13 Jun 2026 06:36:07 +0000
ROA not before:           Sat 13 Jun 2026 06:31:07 +0000
ROA not after:            Sat 12 Jun 2027 06:36:07 +0000
asID:                     17139
IP address blocks:        173.247.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:5c:24:01:8d:b2:94:b3:49:ae:e5:63:67:1a:6a:03:d3:ef:42:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 13 06:31:07 2026 GMT
            Not After : Jun 12 06:36:07 2027 GMT
        Subject: CN=0E8FD6A139A9DE2819363FE45AD09E4F1B673ABE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:56:e0:03:b3:38:7f:77:c4:69:97:63:e7:0e:
                    fd:59:52:80:3b:6d:68:8a:62:47:7d:25:ca:16:03:
                    74:a4:83:5a:a0:96:db:51:fc:da:6f:00:97:fe:62:
                    e1:90:80:88:e9:8a:3a:63:cd:ed:8b:c8:74:70:7f:
                    b7:d4:8d:89:49:a3:ad:b3:7b:2e:89:8c:5c:a7:06:
                    cd:ed:3e:21:da:ff:a4:80:2e:d3:65:ed:ad:71:6a:
                    03:e0:41:db:bd:bb:a7:43:88:f7:d6:04:45:4e:25:
                    dd:94:41:c5:36:03:1a:da:4f:a0:4b:a0:80:1b:37:
                    eb:1c:88:e9:e0:09:13:d6:c6:41:63:1b:e2:d9:6e:
                    c8:0a:e1:16:19:ee:df:a6:66:c4:5c:d7:c1:75:74:
                    b7:6b:89:3a:8d:64:58:57:e7:84:0f:23:b2:55:fb:
                    2f:19:f4:64:37:1d:a8:07:99:ed:b3:22:48:a3:a6:
                    1a:6e:fc:3a:90:02:80:c2:fb:0c:85:ea:85:23:d4:
                    1e:0f:fd:1e:49:36:f7:e4:47:f6:26:d6:0a:68:3a:
                    01:b5:5b:d2:84:32:10:f7:e8:32:55:50:8e:a6:60:
                    1d:10:b9:ea:49:7f:b4:ed:36:4c:37:8f:31:71:d4:
                    70:d9:be:c8:db:8c:2a:b2:93:bb:d7:47:7d:53:19:
                    26:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8F:D6:A1:39:A9:DE:28:19:36:3F:E4:5A:D0:9E:4F:1B:67:3A:BE
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233362e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:aa:98:ef:02:a7:a8:97:28:19:3b:ae:31:45:09:37:ee:c8:
         de:fa:0b:d4:cb:c9:ab:5d:e2:38:22:23:15:9b:fc:65:e6:74:
         15:4a:6c:85:43:2d:c0:a6:a3:77:a2:be:10:2a:4a:78:6d:bf:
         fd:16:91:a3:f3:94:84:0c:99:ce:ca:8c:0e:1b:c4:0c:57:3f:
         78:ea:0c:e1:98:ef:6f:6b:e1:2e:0d:ae:c2:04:6a:29:e7:20:
         ac:40:6a:17:6c:d3:67:46:00:16:52:d3:00:9a:c9:e0:c0:59:
         e6:ba:7d:6b:d2:9e:9d:08:d6:41:03:9f:7f:27:2c:3c:c7:8c:
         da:be:81:83:61:87:d9:f9:a6:c2:e8:61:56:2d:df:7c:21:a9:
         68:d5:df:ed:20:e3:77:1f:50:dd:b4:ea:fa:ec:31:a4:57:9b:
         fd:32:55:ef:58:76:e8:d6:e8:2c:99:bf:dd:a6:d7:13:72:f8:
         52:47:96:a9:21:f1:57:79:92:b5:02:e8:0c:64:ea:77:f5:ab:
         97:4b:50:37:0b:52:e9:b9:42:fb:25:4c:cf:46:9f:01:9a:86:
         e8:c0:e9:40:8c:18:ce:70:95:c1:b9:b3:7d:a3:ba:e9:e1:01:
         e2:7e:79:f0:92:67:6b:15:35:e4:38:f5:4c:75:7d:5a:f3:26:
         68:ca:58:b6
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUMFwkAY2ylLNJruVjZxpqA9PvQpswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGVmMzM4YTcyZDU5MzUyYjEzN2JhMDA2
Y2M1NTkxMGIxNzMwYTUxODEwHhcNMjYwNjEzMDYzMTA3WhcNMjcwNjEyMDYzNjA3
WjAzMTEwLwYDVQQDEygwRThGRDZBMTM5QTlERTI4MTkzNjNGRTQ1QUQwOUU0RjFC
NjczQUJFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFbgA7M4f3fE
aZdj5w79WVKAO21oimJHfSXKFgN0pINaoJbbUfzabwCX/mLhkICI6Yo6Y83ti8h0
cH+31I2JSaOts3suiYxcpwbN7T4h2v+kgC7TZe2tcWoD4EHbvbunQ4j31gRFTiXd
lEHFNgMa2k+gS6CAGzfrHIjp4AkT1sZBYxvi2W7ICuEWGe7fpmbEXNfBdXS3a4k6
jWRYV+eEDyOyVfsvGfRkNx2oB5ntsyJIo6Yabvw6kAKAwvsMheqFI9QeD/0eSTb3
5Ef2JtYKaDoBtVvShDIQ9+gyVVCOpmAdELnqSX+07TZMN48xcdRw2b7I24wqspO7
10d9UxkmfQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFA6P1qE5qd4oGTY/5FrQnk8b
Zzq+MB8GA1UdIwQYMBaAFNoSx6AMCgAwgQhlHtVvIB0it77ZMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
REExMkM3QTAwQzBBMDAzMDgxMDg2NTFFRDU2RjIwMUQyMkI3QkVEOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZWYzMzhhNzJkNTkzNTJiMTM3YmEwMDZjYzU1OTEwYjE3MzBhNTE4MS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmMGI4MDZjMDE4ZmE1
MTM2ZTI5MTg0YS8wLzMxMzczMzJlMzIzNDM3MmUzMjMzMzYyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM3MzEzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArffsMA0GCSqGSIb3DQEB
CwUAA4IBAQB6qpjvAqeolygZO64xRQk37sje+gvUy8mrXeI4IiMVm/xl5nQVSmyF
Qy3ApqN3or4QKkp4bb/9FpGj85SEDJnOyowOG8QMVz946gzhmO9va+EuDa7CBGop
5yCsQGoXbNNnRgAWUtMAmsngwFnmun1r0p6dCNZBA59/Jyw8x4zavoGDYYfZ+abC
6GFWLd98Ialo1d/tION3H1DdtOr67DGkV5v9MlXvWHbo1ugsmb/dptcTcvhSR5ap
IfFXeZK1AugMZOp39auXS1A3C1LpuUL7JUzPRp8BmobowOlAjBjOcJXBubN9o7rp
4QHifnnwkmdrFTXkOPVMdX1a8yZoyli2
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:46:15 2026 by rpki-client