Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e203136353039.roa
File:                     3139322e302e31362e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          xxFZVjaaDmmu0xTApOL2plSsVCheavSgTczRYTZHciA=
Subject key identifier:   A7:AB:F7:C5:51:07:DC:FF:75:61:43:77:A8:B3:C3:08:34:8F:32:67
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       08C564BD073DB99AF9A0886371B3FF0E2B60AD9A
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e203136353039.roa
Signing time:             Mon 18 May 2026 05:36:00 +0000
ROA not before:           Mon 18 May 2026 05:31:00 +0000
ROA not after:            Mon 17 May 2027 05:36:00 +0000
asID:                     16509
IP address blocks:        192.0.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c5:64:bd:07:3d:b9:9a:f9:a0:88:63:71:b3:ff:0e:2b:60:ad:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: May 18 05:31:00 2026 GMT
            Not After : May 17 05:36:00 2027 GMT
        Subject: CN=A7ABF7C55107DCFF75614377A8B3C308348F3267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fe:88:cf:b0:ba:51:13:b0:ce:fd:18:c9:52:
                    a9:37:d8:d0:a3:d9:87:e5:fc:98:10:0d:52:0f:60:
                    e7:ed:a9:3e:4e:37:db:78:5c:c6:e4:6a:9a:18:b7:
                    2f:bf:8a:a2:e9:1f:e0:10:8b:72:c8:ec:2d:4b:c8:
                    03:80:90:35:06:a2:18:80:0f:81:94:db:bd:d5:1b:
                    ee:67:9d:20:75:f4:8e:2e:14:24:23:c4:ae:0d:23:
                    87:58:4e:b0:28:e8:9d:2f:d2:16:02:ec:2c:4a:3c:
                    a4:2a:3c:26:2f:4e:d3:e3:3e:fa:ca:7a:64:6e:af:
                    74:ea:cf:60:97:7d:42:ea:69:b6:66:30:6e:27:e1:
                    35:58:af:ca:ed:d6:f0:ad:b3:20:cd:0d:0b:a6:73:
                    05:75:42:25:b1:9f:a9:b8:c0:d7:f8:45:6b:0d:5a:
                    a5:8c:81:8b:26:66:54:78:6e:ee:9c:10:1b:b8:9b:
                    66:96:5d:10:e4:d6:8a:c6:2a:72:f3:a9:48:15:1c:
                    0e:5c:8f:c2:5e:94:9d:4e:5c:99:1a:30:98:d2:4f:
                    0a:38:07:b1:a4:5e:b1:7e:30:fc:30:80:96:c1:29:
                    a7:75:61:e2:f6:23:cd:4c:54:6d:64:81:9c:93:af:
                    46:96:d9:ef:89:d3:14:1d:c2:8c:61:99:63:30:94:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:F7:C5:51:07:DC:FF:75:61:43:77:A8:B3:C3:08:34:8F:32:67
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:9d:74:22:2a:69:56:92:3e:62:4b:09:23:e6:64:8e:06:1d:
         0c:ac:4a:03:76:55:da:1b:29:c7:ef:d9:14:49:e7:a4:53:69:
         14:b1:f5:bf:83:44:69:67:75:51:fe:27:92:70:a8:38:92:f3:
         eb:9e:04:dd:00:cc:04:0a:80:df:33:de:80:8a:6d:95:ac:86:
         e0:78:5b:38:98:60:08:7e:d4:58:f2:0a:76:24:0c:d5:62:ab:
         60:c1:78:c5:9a:56:93:81:b8:44:65:24:58:cc:26:2e:fd:43:
         2c:cb:e8:35:8d:0c:aa:48:52:82:4e:8b:11:8c:c1:8f:46:56:
         a1:fe:e9:6a:51:59:fe:e9:9d:b3:66:98:a1:f0:d3:db:40:ae:
         e9:7f:1e:4c:ab:ee:19:eb:24:a8:dd:0d:fa:36:ae:82:b7:a5:
         14:f5:07:d8:ee:67:bc:de:48:a0:76:7c:7e:e5:27:fc:de:cd:
         9e:76:3e:a0:0b:9e:a5:05:25:b6:fd:7b:94:90:5b:4b:38:9e:
         a2:04:27:98:a9:13:98:46:f4:86:23:6f:3c:ce:51:6c:23:b1:
         0a:22:ea:0a:3f:05:1c:39:98:ff:88:2d:16:56:9b:29:21:bf:
         ea:dd:4d:f8:b1:6d:8b:90:9c:c4:c0:df:92:e8:0f:bd:3e:20:
         00:5a:a0:9b
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUCMVkvQc9uZr5oIhjcbP/DitgrZowDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYwNTE4MDUzMTAwWhcNMjcwNTE3MDUzNjAw
WjAzMTEwLwYDVQQDEyhBN0FCRjdDNTUxMDdEQ0ZGNzU2MTQzNzdBOEIzQzMwODM0
OEYzMjY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiP6Iz7C6UROw
zv0YyVKpN9jQo9mH5fyYEA1SD2Dn7ak+TjfbeFzG5GqaGLcvv4qi6R/gEItyyOwt
S8gDgJA1BqIYgA+BlNu91RvuZ50gdfSOLhQkI8SuDSOHWE6wKOidL9IWAuwsSjyk
KjwmL07T4z76ynpkbq906s9gl31C6mm2ZjBuJ+E1WK/K7dbwrbMgzQ0LpnMFdUIl
sZ+puMDX+EVrDVqljIGLJmZUeG7unBAbuJtmll0Q5NaKxipy86lIFRwOXI/CXpSd
TlyZGjCY0k8KOAexpF6xfjD8MICWwSmndWHi9iPNTFRtZIGck69GltnvidMUHcKM
YZljMJSCkQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFKer98VRB9z/dWFDd6izwwg0
jzJnMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy
OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzEzNjJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMxMzYzNTMwMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAABAwDQYJKoZIhvcNAQELBQADggEB
AKeddCIqaVaSPmJLCSPmZI4GHQysSgN2VdobKcfv2RRJ56RTaRSx9b+DRGlndVH+
J5JwqDiS8+ueBN0AzAQKgN8z3oCKbZWshuB4WziYYAh+1FjyCnYkDNViq2DBeMWa
VpOBuERlJFjMJi79QyzL6DWNDKpIUoJOixGMwY9GVqH+6WpRWf7pnbNmmKHw09tA
rul/Hkyr7hnrJKjdDfo2roK3pRT1B9juZ7zeSKB2fH7lJ/zezZ52PqALnqUFJbb9
e5SQW0s4nqIEJ5ipE5hG9IYjbzzOUWwjsQoi6go/BRw5mP+ILRZWmykhv+rdTfix
bYuQnMTA35LoD70+IABaoJs=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:51:10 2026 by rpki-client