Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3136302e302f32302d3234203d3e203239383032.roa
File:                     3139382e3130352e3136302e302f32302d3234203d3e203239383032.roa (raw, json)
Hash identifier:          Vni7oVj/4T7cQlpi0k6tx34/QDpXqVfzjqKnVzx2SDM=
Subject key identifier:   20:25:A8:30:FB:91:26:6B:39:41:FF:C3:0E:A5:8F:54:52:CA:8C:E9
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       0D05FF10C8CBEDC5C39D863B91E5159BC722B204
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3136302e302f32302d3234203d3e203239383032.roa
Signing time:             Fri 27 Mar 2026 18:35:54 +0000
ROA not before:           Fri 27 Mar 2026 18:30:54 +0000
ROA not after:            Fri 26 Mar 2027 18:35:54 +0000
asID:                     29802
IP address blocks:        198.105.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:05:ff:10:c8:cb:ed:c5:c3:9d:86:3b:91:e5:15:9b:c7:22:b2:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Mar 27 18:30:54 2026 GMT
            Not After : Mar 26 18:35:54 2027 GMT
        Subject: CN=2025A830FB91266B3941FFC30EA58F5452CA8CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:9e:ec:79:40:83:4a:79:6c:5d:98:ed:78:
                    40:cf:fb:06:e6:7e:74:53:d4:ef:09:00:d9:66:0a:
                    6c:35:32:6d:bc:d0:38:38:a3:bc:41:dc:51:52:20:
                    84:5c:cc:93:0b:f8:0e:de:d0:8b:da:6c:f4:20:31:
                    3c:05:07:80:a6:65:d5:64:03:82:02:f8:87:2f:55:
                    c8:70:7e:e4:f1:53:bc:f7:fe:6d:1a:9e:a5:5b:e2:
                    43:c7:6b:55:f8:df:46:87:61:be:43:c4:24:70:47:
                    6c:dd:14:9f:8c:73:06:ca:c7:ba:e7:b1:75:19:97:
                    dc:b3:bf:f0:2d:1e:48:13:0a:18:21:14:64:26:d9:
                    a3:ad:cd:ba:b3:92:0e:61:6c:01:53:ef:8e:ef:45:
                    6e:20:a7:84:c4:d3:6f:97:dd:45:2b:97:f0:0a:17:
                    36:0c:61:cc:1c:bb:8e:21:68:fc:75:b1:78:38:2a:
                    22:ae:23:f9:62:b8:4d:74:d7:09:c0:df:43:cc:4e:
                    ea:12:44:ef:08:cc:6e:a2:db:f4:b7:1d:d8:79:8c:
                    1d:8d:9c:b4:22:74:90:45:ac:3b:7f:95:c7:85:dc:
                    7a:89:62:c1:6b:65:c9:b5:a1:8f:e5:2d:e1:6e:35:
                    e2:4a:29:5f:d7:bf:63:b5:16:f9:67:59:92:7e:02:
                    dc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:25:A8:30:FB:91:26:6B:39:41:FF:C3:0E:A5:8F:54:52:CA:8C:E9
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3136302e302f32302d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         34:36:f2:78:6e:dd:fb:c2:46:01:68:21:95:84:cc:e8:0c:46:
         b5:aa:d4:bb:c6:1e:2c:ea:c9:f8:2a:c3:21:d4:cb:19:66:fa:
         8c:84:e9:c7:ca:d3:5c:18:f7:3c:0a:61:91:b5:c6:09:12:77:
         85:d8:fd:36:d9:30:8a:29:8a:2c:c3:a2:01:e2:6a:65:69:13:
         77:6a:f1:de:8f:63:34:99:9f:3d:da:43:58:27:92:4d:98:a2:
         a8:76:21:76:62:4d:3e:a2:b6:d1:be:63:33:d2:22:31:08:72:
         db:cf:f1:5a:e2:90:20:d1:3b:d0:78:20:f9:39:a3:0b:df:05:
         3b:c5:40:47:0e:04:5c:c2:d1:24:86:c2:06:9f:29:92:3d:8a:
         3a:33:a1:0c:33:e4:68:fb:ad:fc:0e:27:71:e8:17:60:64:07:
         2f:dc:e2:ad:00:80:88:9a:c5:2f:f7:3d:f5:6e:c7:25:38:fc:
         72:aa:74:57:82:a6:be:d0:b0:c2:96:3b:22:65:e9:ce:7a:e3:
         1f:4c:08:67:05:9f:9d:3f:bd:57:fa:8b:7c:5e:ee:7a:61:7c:
         b1:b0:6b:80:f5:2b:bd:9d:bc:87:7c:d4:7a:f9:db:ae:73:5b:
         36:02:0b:f6:e7:0d:cf:25:f6:92:e9:ce:da:64:a8:18:ea:21:
         d9:ec:c0:2c
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUDQX/EMjL7cXDnYY7keUVm8cisgQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYwMzI3MTgzMDU0WhcNMjcwMzI2MTgzNTU0
WjAzMTEwLwYDVQQDEygyMDI1QTgzMEZCOTEyNjZCMzk0MUZGQzMwRUE1OEY1NDUy
Q0E4Q0U5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtWe7HlAg0p5
bF2Y7XhAz/sG5n50U9TvCQDZZgpsNTJtvNA4OKO8QdxRUiCEXMyTC/gO3tCL2mz0
IDE8BQeApmXVZAOCAviHL1XIcH7k8VO89/5tGp6lW+JDx2tV+N9Gh2G+Q8QkcEds
3RSfjHMGyse657F1GZfcs7/wLR5IEwoYIRRkJtmjrc26s5IOYWwBU++O70VuIKeE
xNNvl91FK5fwChc2DGHMHLuOIWj8dbF4OCoiriP5YrhNdNcJwN9DzE7qEkTvCMxu
otv0tx3YeYwdjZy0InSQRaw7f5XHhdx6iWLBa2XJtaGP5S3hbjXiSilf179jtRb5
Z1mSfgLcmwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCAlqDD7kSZrOUH/ww6lj1RS
yozpMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0
MjhlYTliNzI2Ny8wLzMxMzkzODJlMzEzMDM1MmUzMTM2MzAyZTMwMmYzMjMwMmQz
MjM0MjAzZDNlMjAzMjM5MzgzMDMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExmmgMA0GCSqGSIb3DQEB
CwUAA4IBAQA0NvJ4bt37wkYBaCGVhMzoDEa1qtS7xh4s6sn4KsMh1MsZZvqMhOnH
ytNcGPc8CmGRtcYJEneF2P022TCKKYosw6IB4mplaRN3avHej2M0mZ892kNYJ5JN
mKKodiF2Yk0+orbRvmMz0iIxCHLbz/Fa4pAg0TvQeCD5OaML3wU7xUBHDgRcwtEk
hsIGnymSPYo6M6EMM+Ro+638Didx6BdgZAcv3OKtAICImsUv9z31bsclOPxyqnRX
gqa+0LDCljsiZenOeuMfTAhnBZ+dP71X+ot8Xu56YXyxsGuA9Su9nbyHfNR6+duu
c1s2Agv25w3PJfaS6c7aZKgY6iHZ7MAs
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:39 2026 by rpki-client