Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          XydcNqJFgLropmbE/tIUNj3Qk2POi60m7v44lwE1xSo=
Subject key identifier:   5D:2F:4E:FA:07:22:E1:1D:F0:B4:A4:1F:07:62:64:72:B6:54:7E:3D
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       6B935906FED535B4B2228013CFB3E89E0C349759
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 13 Jun 2026 06:36:06 +0000
ROA not before:           Sat 13 Jun 2026 06:31:06 +0000
ROA not after:            Sat 12 Jun 2027 06:36:06 +0000
asID:                     17139
IP address blocks:        205.134.228.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:93:59:06:fe:d5:35:b4:b2:22:80:13:cf:b3:e8:9e:0c:34:97:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 13 06:31:06 2026 GMT
            Not After : Jun 12 06:36:06 2027 GMT
        Subject: CN=5D2F4EFA0722E11DF0B4A41F07626472B6547E3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:37:f8:11:a2:ee:a6:fe:a7:2c:24:fd:d8:04:
                    bc:74:ee:ca:61:28:8f:5b:01:9a:03:33:f3:52:59:
                    44:76:87:73:75:58:7f:c9:cd:b3:d8:dd:d2:78:85:
                    db:48:ca:3c:fd:df:3d:5b:a4:91:44:9b:7c:88:0e:
                    b1:ee:e8:cb:e3:2c:00:3c:f2:f1:c3:95:75:3c:61:
                    82:d2:12:eb:1f:fa:aa:a6:7b:a3:c1:ae:5a:bb:43:
                    3c:11:3f:8b:b4:74:d4:4b:a1:a7:1b:c7:d7:ae:65:
                    b8:e6:e8:5f:01:51:7e:ca:ad:71:8f:4f:7c:7f:91:
                    49:05:27:cf:8b:d8:01:9f:7e:23:12:4c:a6:be:08:
                    e0:c0:b5:f9:8f:ce:e4:35:2c:6b:19:2b:fa:fe:b5:
                    5c:47:a1:52:53:ba:02:01:9f:24:5f:1f:db:3a:8c:
                    d0:5f:18:2e:01:56:05:fe:91:78:5f:3e:25:87:0e:
                    eb:b6:2b:ca:65:bc:04:6a:99:98:e0:3f:90:ec:03:
                    ea:c9:ba:6a:55:aa:97:1b:fb:b7:66:d4:3e:29:50:
                    29:b7:28:bb:28:95:30:d4:c7:29:14:03:d9:a6:70:
                    6b:af:6b:19:3e:da:c1:10:6f:70:bd:60:8f:d2:fa:
                    f9:54:97:16:00:53:aa:3d:24:72:fe:db:7a:21:2c:
                    e6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2F:4E:FA:07:22:E1:1D:F0:B4:A4:1F:07:62:64:72:B6:54:7E:3D
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232382e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:e0:9f:1e:fd:ce:3e:e2:29:fc:e1:28:01:c8:9d:5b:67:f5:
         65:fd:6e:54:9c:31:e9:c2:74:a8:0c:68:b8:1d:e8:27:7d:17:
         a0:a8:a0:08:a4:52:43:2f:64:68:a5:3c:28:78:07:7c:90:ba:
         10:14:bf:32:bd:7f:79:c3:ac:fc:d2:5e:37:92:ff:18:d9:42:
         25:f2:e4:94:0e:69:17:bd:00:60:b0:2a:fb:e2:c3:96:6b:11:
         81:54:ce:bb:be:73:78:5c:f2:33:1d:5f:a1:ec:d8:35:96:d8:
         90:cf:bc:27:90:82:f3:04:25:f7:f4:27:3c:66:9d:23:a6:1c:
         c6:24:d4:a6:bb:55:4e:00:a6:9c:a3:79:45:59:3a:b7:c4:97:
         23:b6:79:9b:85:1a:ef:87:15:b0:ea:68:bc:5c:c1:35:67:76:
         9d:ef:a3:23:0c:1c:16:db:9b:22:3a:cc:45:03:ce:4b:32:55:
         d1:b8:ba:cd:2c:80:d3:87:41:ec:7b:bd:ff:fc:e7:0e:4f:ae:
         43:20:07:b5:62:64:c1:c9:eb:9a:d1:58:db:05:db:e5:78:a3:
         5b:37:44:12:39:13:1a:e0:41:eb:4a:b6:74:ff:b3:e2:6a:7a:
         6c:59:03:cf:a8:43:e2:e7:0e:22:0c:8a:18:85:89:6b:04:ad:
         64:ab:4a:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:02 2026 by rpki-client