Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20333939343836.roa
File:                     3139322e3230382e31322e302f32342d3234203d3e20333939343836.roa (raw, json)
Hash identifier:          SQfa7E8xHWEvjRk0oXyBLOeZLbS7zk3D8wa/4XqEalk=
Subject key identifier:   CF:B7:25:3B:AB:B1:7C:AF:91:65:FE:9B:6A:1C:5C:3B:05:23:DE:54
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       1D3E6D2898F0D74F3D6BB643EB950117D9FC4FBC
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20333939343836.roa
Signing time:             Sat 21 Feb 2026 20:48:03 +0000
ROA not before:           Sat 21 Feb 2026 20:43:03 +0000
ROA not after:            Sat 20 Feb 2027 20:48:03 +0000
asID:                     399486
IP address blocks:        192.208.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3e:6d:28:98:f0:d7:4f:3d:6b:b6:43:eb:95:01:17:d9:fc:4f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Feb 21 20:43:03 2026 GMT
            Not After : Feb 20 20:48:03 2027 GMT
        Subject: CN=CFB7253BABB17CAF9165FE9B6A1C5C3B0523DE54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:a7:54:1d:88:c5:50:2f:c3:0c:c0:cb:74:2c:
                    b9:f6:d8:b2:57:f8:f1:48:37:d5:f5:98:ff:44:76:
                    f1:3b:b1:5b:fd:3e:92:af:fe:6b:2c:77:fb:da:fd:
                    1f:7d:23:1c:b9:b7:0d:12:d8:e9:47:63:b4:eb:88:
                    4b:c2:35:a0:5b:99:18:f9:b2:f8:30:ec:dd:37:8c:
                    49:61:0c:e0:92:48:e1:8a:b8:5c:15:5f:98:36:52:
                    11:91:6e:48:ee:39:4f:09:b3:51:9d:88:c5:2e:bd:
                    89:3c:d2:26:2f:15:c6:97:46:3e:be:2b:79:c0:8c:
                    80:f3:47:7f:bd:a6:d2:1c:e4:e4:28:d7:07:1d:ed:
                    5b:4f:44:ab:3f:e5:01:a2:1a:b2:99:08:a2:b6:70:
                    5e:2d:5d:02:9b:37:71:a7:1d:63:51:0e:36:ad:f3:
                    98:a0:17:28:e2:ed:19:ed:65:9f:db:90:50:47:82:
                    a7:3b:eb:ed:a1:22:32:68:ff:8a:c6:6a:9b:ef:c0:
                    98:d6:ea:54:60:e1:57:9d:4e:48:5c:eb:11:d6:00:
                    e6:36:42:0d:bb:d3:2f:7e:3b:b8:09:c3:15:dd:7e:
                    95:bd:58:b1:52:f3:bd:46:a8:47:04:35:7e:d2:05:
                    83:a4:30:e8:32:21:72:98:ef:2f:1f:ae:bd:0e:c0:
                    ef:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B7:25:3B:AB:B1:7C:AF:91:65:FE:9B:6A:1C:5C:3B:05:23:DE:54
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20333939343836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:1c:e2:e3:9f:8c:73:4c:ac:8f:00:86:37:74:0b:50:d9:f0:
         eb:b1:c4:10:76:1a:01:d4:50:14:9f:bd:f3:97:22:78:df:4e:
         bf:07:82:c2:b4:0d:21:9e:1e:5a:ab:63:51:7c:b9:4c:e8:53:
         b6:e5:d3:07:5f:ec:46:3d:98:f1:a6:78:ab:27:1b:66:52:ef:
         ae:5c:63:e8:ce:80:33:25:17:f9:0a:7f:c6:61:50:59:3d:c5:
         c9:cd:02:5b:8a:11:2b:5a:93:15:24:d7:a5:25:8c:87:26:7e:
         ef:0e:83:28:90:51:95:2d:8d:2f:96:0f:a7:78:a7:c3:f9:c5:
         b6:25:26:ca:b9:a3:18:73:1d:74:5d:4f:26:b5:cb:ae:bb:1e:
         36:9d:f3:49:65:ba:ea:8b:e2:d5:45:47:35:bd:ca:f6:32:93:
         01:e6:e1:0d:f3:e4:3c:2c:47:3f:c3:52:d4:3e:a3:3b:e2:9b:
         97:69:56:9b:5a:da:f3:19:e2:b5:f3:e6:2b:a7:0c:16:83:2c:
         76:fe:b8:e4:58:6e:54:c1:ca:35:12:02:20:14:fa:63:9a:ab:
         85:9f:77:7a:76:45:b3:f2:81:b2:32:cf:f3:ce:96:34:7b:09:
         d1:6b:69:46:28:12:08:fc:34:5a:bd:de:de:cd:06:bb:5d:00:
         4d:b5:a6:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:29:23 2026 by rpki-client