Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3132382e302f32302d3234203d3e20383334.roa
File:                     3139382e312e3132382e302f32302d3234203d3e20383334.roa (raw, json)
Hash identifier:          Prou4SZ5vdj94YXNOzPaNsdZVVMdJSKRrGXAdpaEvH8=
Subject key identifier:   97:48:D0:82:96:43:45:35:14:56:77:8A:2C:C0:3C:D5:54:C6:C0:87
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       710E77C943C502EA6257C2498670FE3F69CCD56E
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3132382e302f32302d3234203d3e20383334.roa
Signing time:             Wed 03 Jun 2026 19:41:08 +0000
ROA not before:           Wed 03 Jun 2026 19:36:08 +0000
ROA not after:            Wed 02 Jun 2027 19:41:08 +0000
asID:                     834
IP address blocks:        198.1.128.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:0e:77:c9:43:c5:02:ea:62:57:c2:49:86:70:fe:3f:69:cc:d5:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun  3 19:36:08 2026 GMT
            Not After : Jun  2 19:41:08 2027 GMT
        Subject: CN=9748D082964345351456778A2CC03CD554C6C087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ce:fe:2e:f2:09:78:d3:6a:63:5f:39:a9:b7:
                    cd:6d:c0:30:ee:06:36:19:f2:06:f4:a1:30:44:7d:
                    4f:c4:cd:ee:eb:1d:dc:b7:4c:ac:2e:46:0c:a5:66:
                    20:1f:1a:f1:5e:11:fa:d1:80:f5:c7:12:d2:6d:67:
                    5e:03:f6:cd:db:58:58:d1:5b:4d:c2:14:ea:6d:cf:
                    f3:00:2f:e7:08:ee:f7:0c:69:41:51:db:ed:ab:5b:
                    61:85:71:b2:36:7d:a5:27:01:77:66:62:e1:cf:02:
                    1f:36:05:a0:59:fc:79:1d:97:4e:1c:c5:63:e7:4a:
                    94:7a:d0:61:12:2b:10:ee:3a:74:b1:d3:e5:c0:f9:
                    fe:3f:70:d3:77:a6:ae:f3:b5:b3:ca:95:05:08:a8:
                    d8:58:26:e5:84:42:50:12:fc:d7:e0:74:18:47:5d:
                    b1:66:4e:45:93:80:42:4c:1d:51:3d:5e:80:8c:50:
                    f5:77:99:13:76:e4:05:5b:a7:b6:d6:fe:86:d6:48:
                    44:6e:02:43:84:36:a2:f0:57:9b:93:d8:fa:03:7b:
                    bd:59:29:a9:f3:36:3c:4b:2b:18:6c:23:48:09:c2:
                    30:16:da:7a:ff:0d:e1:bc:c9:01:de:fd:e8:f0:5d:
                    d0:db:14:73:5b:78:fa:16:78:d9:3f:46:1a:9d:20:
                    5e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:48:D0:82:96:43:45:35:14:56:77:8A:2C:C0:3C:D5:54:C6:C0:87
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3132382e302f32302d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:0c:87:d0:af:f8:8f:e9:b6:19:93:4e:b0:72:59:69:53:7a:
         1a:6d:c0:49:dc:b1:0c:66:c4:33:36:6b:33:b6:53:84:f5:68:
         65:f5:22:c8:f7:58:37:47:da:08:55:0a:1b:c3:3e:cc:07:5b:
         01:76:6c:38:b9:f4:ca:ee:da:98:ac:90:74:77:07:8f:bc:54:
         93:3b:0e:fe:9b:78:8c:ac:c3:20:0c:ff:22:52:29:45:a2:c8:
         15:b0:2c:08:ec:29:36:37:72:6c:60:f5:11:93:af:35:7f:ce:
         ed:7e:dc:79:b0:4a:ad:33:96:f7:89:cf:68:6b:3c:93:ab:1f:
         ac:9c:85:92:9e:b1:8f:b1:3d:bd:fa:1b:a5:8b:70:66:32:8a:
         fc:7a:9f:bb:67:e4:db:2f:fe:0b:d3:d6:45:e4:a4:be:a2:ac:
         e7:c9:2e:20:92:e0:4b:4b:d9:ac:00:a5:77:8e:10:7d:ba:a2:
         ee:8f:3a:3e:ba:df:cf:8f:d5:4a:08:8a:74:84:79:88:e5:dd:
         66:9d:66:8a:b0:86:29:63:99:06:c0:3c:9f:c4:ef:17:dd:51:
         55:45:48:fa:53:1d:19:d8:9a:e5:bd:c3:29:ed:62:57:ec:80:
         2b:9f:7e:e3:82:ef:86:8d:3e:df:55:f9:23:69:35:0a:96:88:
         8f:a9:02:90
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUcQ53yUPFAupiV8JJhnD+P2nM1W4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYwNjAzMTkzNjA4WhcNMjcwNjAyMTk0MTA4
WjAzMTEwLwYDVQQDEyg5NzQ4RDA4Mjk2NDM0NTM1MTQ1Njc3OEEyQ0MwM0NENTU0
QzZDMDg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs7+LvIJeNNq
Y185qbfNbcAw7gY2GfIG9KEwRH1PxM3u6x3ct0ysLkYMpWYgHxrxXhH60YD1xxLS
bWdeA/bN21hY0VtNwhTqbc/zAC/nCO73DGlBUdvtq1thhXGyNn2lJwF3ZmLhzwIf
NgWgWfx5HZdOHMVj50qUetBhEisQ7jp0sdPlwPn+P3DTd6au87WzypUFCKjYWCbl
hEJQEvzX4HQYR12xZk5Fk4BCTB1RPV6AjFD1d5kTduQFW6e21v6G1khEbgJDhDai
8Febk9j6A3u9WSmp8zY8SysYbCNICcIwFtp6/w3hvMkB3v3o8F3Q2xRzW3j6FnjZ
P0YanSBelQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJdI0IKWQ0U1FFZ3iizAPNVU
xsCHMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy
OGVhOWI3MjY3LzAvMzEzOTM4MmUzMTJlMzEzMjM4MmUzMDJmMzIzMDJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExgGAMA0GCSqGSIb3DQEBCwUAA4IBAQCd
DIfQr/iP6bYZk06wcllpU3oabcBJ3LEMZsQzNmsztlOE9Whl9SLI91g3R9oIVQob
wz7MB1sBdmw4ufTK7tqYrJB0dwePvFSTOw7+m3iMrMMgDP8iUilFosgVsCwI7Ck2
N3JsYPURk681f87tftx5sEqtM5b3ic9oazyTqx+snIWSnrGPsT29+huli3BmMor8
ep+7Z+TbL/4L09ZF5KS+oqznyS4gkuBLS9msAKV3jhB9uqLujzo+ut/Pj9VKCIp0
hHmI5d1mnWaKsIYpY5kGwDyfxO8X3VFVRUj6Ux0Z2JrlvcMp7WJX7IArn37jgu+G
jT7fVfkjaTUKloiPqQKQ
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:21 2026 by rpki-client