Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e2036303739.roa
File:                     3139322e3230382e342e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          d3UmYlRPtQhds8bH1Qn46waS5iV+nbbjVwhG6CqtAsA=
Subject key identifier:   30:42:F2:9C:01:A1:0C:1C:00:59:22:5D:37:84:87:5C:94:CE:F2:15
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       20BE3D123E3ABC48E3D213E7F611F20EDF7345EE
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e2036303739.roa
Signing time:             Fri 13 Feb 2026 02:59:24 +0000
ROA not before:           Fri 13 Feb 2026 02:54:24 +0000
ROA not after:            Fri 12 Feb 2027 02:59:24 +0000
asID:                     6079
IP address blocks:        192.208.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 06:59:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:be:3d:12:3e:3a:bc:48:e3:d2:13:e7:f6:11:f2:0e:df:73:45:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Feb 13 02:54:24 2026 GMT
            Not After : Feb 12 02:59:24 2027 GMT
        Subject: CN=3042F29C01A10C1C0059225D3784875C94CEF215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:72:58:17:95:d6:3b:9e:1e:fd:bc:28:63:2b:
                    23:d8:df:5c:dc:f7:e0:93:3f:be:2c:8d:bb:a6:6f:
                    69:3c:c5:ea:7b:44:df:2d:12:48:ee:0e:49:52:bb:
                    96:65:93:97:55:b0:f1:ac:b2:9f:f7:bd:f8:ad:00:
                    77:4e:3d:f5:5b:a3:b7:b4:ab:5a:d5:cd:de:29:54:
                    c2:f4:43:ce:a4:3e:47:cb:cd:b1:5a:99:d3:ce:f4:
                    18:9f:ae:80:57:25:f7:26:44:ac:ad:a2:c0:22:6f:
                    ea:17:a1:f4:8c:e0:cb:99:27:76:69:71:93:b6:2c:
                    fc:a1:ae:53:6f:34:7c:2a:a2:33:16:ca:7d:a0:48:
                    61:2c:5d:c4:30:32:6c:c4:0f:fe:08:fb:a6:bb:db:
                    ee:c8:fa:aa:fa:2b:5d:66:f2:67:4a:5f:ae:cc:4e:
                    32:53:f6:9b:14:45:03:2a:10:15:4d:06:ab:00:4a:
                    6b:4f:d8:37:ca:c4:05:7d:ec:cb:cb:c1:d2:47:60:
                    af:04:59:42:87:19:b7:8a:4a:30:f6:4e:fd:41:ac:
                    1e:c1:7e:55:03:55:b8:cc:96:e3:17:9b:9a:d5:9e:
                    9c:d6:e0:81:22:fb:eb:28:47:29:43:ee:08:2d:da:
                    37:ea:1b:f8:44:b2:ee:99:2f:fd:d2:34:74:1e:b0:
                    02:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:42:F2:9C:01:A1:0C:1C:00:59:22:5D:37:84:87:5C:94:CE:F2:15
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:ea:27:18:0b:b2:51:10:2f:40:29:9a:c5:7f:64:d8:f6:b6:
         7d:f8:a9:d0:e5:f6:0f:3f:72:d8:cc:d1:e0:26:5e:9e:69:f2:
         63:18:34:83:e5:fb:aa:11:9c:23:eb:2c:97:c9:65:6a:76:24:
         d9:08:6c:66:50:6e:4e:16:01:60:cf:81:a3:66:47:1e:5b:f4:
         07:f4:77:8d:d2:74:ca:69:40:96:47:e1:0b:cb:f6:4a:7d:af:
         e8:0c:18:98:aa:e5:43:f7:06:50:f4:ec:6c:a5:d1:18:17:f5:
         16:68:db:c5:0f:c6:ed:50:c0:cf:57:f6:73:2b:ed:37:78:5b:
         d8:9b:91:6b:ef:97:4c:75:61:4b:e1:e2:96:7e:60:2f:6b:a6:
         3b:57:b4:d5:a6:bd:5b:03:f2:16:c5:96:a6:9b:b3:50:f4:15:
         6c:6c:fc:03:df:28:a5:82:36:c6:2a:c9:f1:e5:d9:e8:c8:50:
         07:19:04:ed:90:db:2a:85:b3:8c:e3:9d:38:f8:b9:73:59:60:
         e3:58:3b:1c:de:74:45:26:07:92:de:a6:79:ef:57:ab:73:e2:
         20:bb:2b:bc:6b:4d:66:53:bd:b3:1e:5b:d6:d3:82:54:c4:e8:
         b8:bf:67:81:ff:d4:ed:ba:3d:1d:8d:42:47:45:07:b4:97:9c:
         e6:41:47:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:53:50 2026 by rpki-client