Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e20333938333238.roa
File:                     3139322e302e31362e302f32342d3234203d3e20333938333238.roa (raw, json)
Hash identifier:          E3vNrc6IstajL3NphPLDkwMRyhQSH0cif7KxnEHYezE=
Subject key identifier:   00:B3:DB:EC:31:A4:80:E3:73:80:E4:13:F3:74:AA:93:6F:74:CF:F6
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       589AFB44B361602E849A9FCC60D4DCC5A3A64E69
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e20333938333238.roa
Signing time:             Mon 18 May 2026 05:36:00 +0000
ROA not before:           Mon 18 May 2026 05:31:00 +0000
ROA not after:            Mon 17 May 2027 05:36:00 +0000
asID:                     398328
IP address blocks:        192.0.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:9a:fb:44:b3:61:60:2e:84:9a:9f:cc:60:d4:dc:c5:a3:a6:4e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: May 18 05:31:00 2026 GMT
            Not After : May 17 05:36:00 2027 GMT
        Subject: CN=00B3DBEC31A480E37380E413F374AA936F74CFF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a3:3e:a8:ba:a6:bc:88:15:de:45:fe:7e:fb:
                    cc:05:a6:55:90:76:14:fa:5a:98:2e:57:aa:cd:d5:
                    dd:6b:a2:b7:5b:3d:31:1c:50:a7:56:d1:6d:d8:ac:
                    50:84:90:43:fe:21:01:f9:24:a7:e0:68:c0:61:18:
                    37:98:14:b2:cd:98:d6:41:95:5e:78:ad:77:93:21:
                    14:4b:93:aa:4d:5c:5c:af:e7:a5:01:c7:2e:99:d0:
                    8b:23:e5:af:aa:45:87:15:4e:93:8a:1b:0b:1e:7d:
                    ee:54:58:ae:62:7f:d9:a5:a2:95:0a:7a:e2:9b:9a:
                    d0:69:2e:44:c0:27:d3:3d:df:8b:5f:e2:fb:72:71:
                    4a:a5:59:fc:62:34:67:94:49:5d:9e:f9:05:37:f9:
                    58:5c:ac:3a:ce:bc:53:42:8f:04:a2:4d:16:47:29:
                    2d:36:6a:2e:10:b2:21:04:6b:09:bc:24:d6:fd:68:
                    1d:85:b8:fc:fd:5b:51:75:82:04:ca:b4:23:6b:2f:
                    b9:14:2c:65:1b:ec:06:22:84:5c:53:44:9e:fb:2b:
                    59:a6:ae:e5:d3:2a:c0:88:35:c3:ea:d8:a8:0b:16:
                    49:c6:ef:da:81:2f:79:42:60:af:74:78:04:13:f6:
                    ee:d9:96:6c:dd:a8:40:88:a6:1d:0c:e0:e3:79:16:
                    be:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B3:DB:EC:31:A4:80:E3:73:80:E4:13:F3:74:AA:93:6F:74:CF:F6
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e20333938333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:c2:87:fc:db:7a:ee:76:ed:2c:d0:66:da:f6:aa:83:c1:c7:
         67:80:db:d5:62:e8:fe:91:9a:c7:de:7a:6d:d2:34:5f:36:9b:
         71:39:29:88:ca:3e:bd:6f:16:94:3a:11:e0:54:25:97:dc:f2:
         9d:a4:4e:d4:3c:68:00:96:1d:28:31:da:21:81:71:ff:b7:43:
         09:c9:27:22:c2:15:72:84:f3:96:c1:1c:92:0e:c8:31:e6:95:
         a4:56:73:96:ea:c2:b1:e0:0a:0d:7b:9d:ad:12:55:b5:4b:62:
         a0:4d:63:12:bb:2a:98:e4:5f:69:aa:fc:09:cd:d1:bc:ed:ba:
         a2:f7:ce:96:53:7a:a8:b4:25:ef:df:61:0f:25:67:ee:d1:71:
         ca:14:06:cb:20:59:e4:ef:9c:04:c2:a8:f3:8e:9a:f6:8a:90:
         09:83:a3:b8:b7:f2:cb:0d:4c:74:86:64:30:c6:9c:39:a4:19:
         d1:6b:06:5c:d8:ed:12:bb:ad:9c:aa:ab:b2:89:95:57:10:ea:
         98:2f:90:17:d4:d1:d1:fc:2e:8b:f9:99:6d:f2:6b:c8:36:04:
         4f:52:16:0e:42:19:ef:f3:0e:70:f0:bf:87:79:84:6a:49:00:
         66:f7:43:20:ea:23:f5:3c:c3:5f:ce:07:56:d1:36:7f:05:13:
         1d:54:80:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:11 2026 by rpki-client