Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS61138.roa
File:                     AS61138.roa (raw, json)
Hash identifier:          Fy4wEdmYrUtEd7NyiuPPDTu51TJG6GP9yE3Sje+U+FY=
Subject key identifier:   FA:2B:10:49:50:79:33:4B:B3:00:BB:D0:D7:FF:00:D5:D7:20:7E:22
Certificate issuer:       /CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
Certificate serial:       4E8E04778399DC5E48A0D655598B13EB2515A48A
Authority key identifier: A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS61138.roa
Signing time:             Sat 19 Sep 2026 06:36:20 +0000
ROA not before:           Sat 19 Sep 2026 06:31:20 +0000
ROA not after:            Sat 18 Sep 2027 06:36:20 +0000
asID:                     61138
IP address blocks:        216.246.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/26a5e08b-a8ed-4bab-8a32-52601ca93eca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:39:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:8e:04:77:83:99:dc:5e:48:a0:d6:55:59:8b:13:eb:25:15:a4:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4
        Validity
            Not Before: Sep 19 06:31:20 2026 GMT
            Not After : Sep 18 06:36:20 2027 GMT
        Subject: CN=FA2B10495079334BB300BBD0D7FF00D5D7207E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d5:bc:82:08:d0:cc:5b:3c:d1:f9:f3:21:f9:
                    3a:e8:fd:ef:82:b1:6f:f5:a5:20:4c:67:d4:6a:f6:
                    39:2b:1e:5b:bb:0a:9a:22:68:e3:87:f2:ae:46:7f:
                    8b:2c:b7:bd:95:58:fc:e5:19:0a:c5:ce:80:8a:3f:
                    07:de:9f:b2:b2:f2:b1:63:a1:3e:49:d7:eb:8e:b5:
                    3e:db:c1:77:6c:81:a7:2b:1c:70:64:90:ed:b6:36:
                    12:57:24:18:f7:fc:00:83:53:49:2b:6e:fa:f9:1b:
                    5b:60:84:1c:56:51:70:4d:02:15:ed:10:e6:e0:d3:
                    31:a2:b0:f4:90:9f:2d:2b:37:0a:52:43:18:b5:30:
                    5c:aa:5a:18:0b:92:97:00:e9:7c:6a:69:ff:17:18:
                    3e:dc:f1:a8:6b:18:9c:21:87:ae:90:5e:b3:ee:f0:
                    66:51:fa:07:c1:51:d4:24:63:ef:53:4d:b1:25:23:
                    a7:d7:da:06:0c:74:19:61:d1:41:08:22:b2:de:e0:
                    66:c0:dc:77:9f:08:bd:33:33:a7:bf:e0:84:62:e1:
                    b1:05:8a:f2:d1:49:29:7f:1a:19:e6:b0:be:5f:f2:
                    41:d7:fb:2f:fc:1e:79:4a:19:69:b4:8f:b2:95:f8:
                    1d:c1:a8:4a:df:a8:5d:25:1a:95:c7:a7:a6:76:88:
                    69:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:2B:10:49:50:79:33:4B:B3:00:BB:D0:D7:FF:00:D5:D7:20:7E:22
            X509v3 Authority Key Identifier:
                keyid:A7:74:82:0B:3F:E2:B7:39:59:6F:4A:6B:F3:1F:BF:D2:6E:23:F2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/A774820B3FE2B739596F4A6BF31FBFD26E23F2BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/26a5e08b-a8ed-4bab-8a32-52601ca93eca/b103c3826e000485de6b95865dc0b119da33508d7a9f4bf9e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193311ca8b3462a/0/AS61138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.246.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:9e:9d:f2:c5:78:4a:70:c9:20:6f:b1:69:99:17:c1:0d:1c:
         0d:6c:9a:4f:12:00:39:af:9d:83:9a:ae:62:44:c2:e6:76:20:
         b4:a7:de:15:15:ce:90:83:74:09:30:cb:38:25:04:8b:ff:da:
         7e:a6:3c:d7:e1:9c:5b:e8:ed:6e:02:2a:a7:a8:2c:48:ab:b1:
         c2:40:ee:1d:9d:34:c9:96:ff:82:16:c1:b9:28:12:33:59:5f:
         9a:07:5c:90:14:12:b1:cf:86:d4:e1:4e:ef:ed:3e:a4:ba:02:
         12:e2:fa:b5:a5:a7:80:42:86:52:4e:ba:67:fd:08:87:90:93:
         f3:d2:47:e8:35:3d:93:52:43:a6:03:44:a4:f4:67:00:35:c8:
         e0:14:43:04:a5:af:e9:88:a4:1b:b8:a9:3e:78:2c:ef:10:a9:
         3d:6d:36:22:1b:a8:9b:8f:6f:fc:ed:37:57:66:f7:80:3e:2e:
         fb:12:3f:6f:a7:22:60:59:77:74:1f:20:54:47:8e:08:05:dd:
         12:75:c6:cb:f0:14:8a:f0:33:32:c7:d4:2c:10:d7:eb:c3:a9:
         98:57:8a:01:de:60:ba:37:2c:a1:fb:20:00:ba:1c:28:e6:34:
         21:e5:1f:06:60:0c:0e:f0:d4:c6:6e:02:1a:7d:e5:2c:d9:72:
         be:6d:a0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:48:29 2026 by rpki-client