Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32322d3234203d3e20383334.roa
File:                     3139382e3130352e3137362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          3IKnweqqMPbccyqnsmumVtA2ngT43qTmh1J6RnrkF7I=
Subject key identifier:   F6:63:30:B5:CC:C4:EC:25:7D:40:F0:02:48:4F:63:1D:72:F8:C0:5B
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       65F1452F0D861BC57AF25D811BA8E3F13D6C9780
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32322d3234203d3e20383334.roa
Signing time:             Sun 01 Mar 2026 02:28:06 +0000
ROA not before:           Sun 01 Mar 2026 02:23:06 +0000
ROA not after:            Sun 28 Feb 2027 02:28:06 +0000
asID:                     834
IP address blocks:        198.105.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:f1:45:2f:0d:86:1b:c5:7a:f2:5d:81:1b:a8:e3:f1:3d:6c:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Mar  1 02:23:06 2026 GMT
            Not After : Feb 28 02:28:06 2027 GMT
        Subject: CN=F66330B5CCC4EC257D40F002484F631D72F8C05B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:24:47:0a:ab:48:af:a0:06:4c:e8:c2:bf:c2:
                    2a:67:a4:6a:d7:e6:c7:45:ca:ad:96:b5:e6:1b:67:
                    6c:64:11:c6:26:88:8f:78:a5:e6:ef:cc:98:5e:d7:
                    26:7d:73:d2:eb:00:01:7c:de:77:2f:55:f7:9b:29:
                    b7:a1:d8:6c:47:91:8b:07:c7:bc:79:63:3d:fb:7f:
                    d5:59:e2:23:45:d4:53:29:ad:33:c8:32:2d:74:8e:
                    36:7f:20:1e:14:65:f8:c2:ae:c5:1e:cb:6f:5e:f4:
                    86:0c:3c:28:a5:55:fc:43:ae:d5:0f:56:f6:74:a0:
                    82:43:04:5f:03:38:19:90:c9:80:c9:49:33:fc:a7:
                    c4:d9:98:f9:aa:a9:8a:7f:a3:6f:04:f7:46:94:1a:
                    84:11:5f:dc:26:d5:54:d7:4a:ca:96:a7:99:cf:f8:
                    41:dd:14:9e:71:dc:a0:d4:ec:f5:7b:c6:19:97:7c:
                    26:93:6c:4b:00:84:eb:cb:76:1e:3f:e4:db:e7:41:
                    b4:e7:65:8a:d2:62:03:ec:ee:e9:af:6c:ca:65:35:
                    94:07:6e:2b:95:14:a1:0f:6d:79:f8:36:27:7b:6c:
                    47:85:5f:49:84:da:ea:fb:0e:d1:c3:c7:1e:1b:b4:
                    0c:ed:07:55:98:21:53:8c:0e:71:c0:12:46:93:2a:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:63:30:B5:CC:C4:EC:25:7D:40:F0:02:48:4F:63:1D:72:F8:C0:5B
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         70:7d:3f:89:eb:97:99:12:dc:86:62:44:c6:50:8c:0e:3c:f3:
         f6:b9:0f:75:81:0c:f9:20:41:d5:d6:4e:bd:7d:97:dd:94:23:
         a3:ca:8d:1f:c5:e3:11:92:e1:55:9c:97:de:56:55:f8:7b:6f:
         2f:d0:cd:52:9b:a8:f7:f5:50:21:f6:3f:12:ea:f8:f6:c5:08:
         7f:89:cc:9e:3b:2c:4f:ca:4c:d0:e5:68:8a:0c:d8:b8:0a:5d:
         77:e0:6e:b3:5b:85:25:d4:fc:20:f8:aa:f1:ff:70:60:d5:be:
         6a:96:f6:8b:4d:df:31:f4:bd:ff:73:7f:c4:e0:78:1d:6e:27:
         4f:31:5d:ef:da:e4:a9:c3:65:f3:70:52:ec:77:0c:0f:fd:88:
         ea:10:70:06:e7:ff:a9:9f:94:a9:3c:33:f7:4f:1f:5a:a5:9a:
         2b:21:01:a4:3a:83:38:76:ab:41:2a:79:79:58:09:f2:51:60:
         36:09:d5:42:84:c2:c3:04:c5:f1:7a:15:e4:4c:a1:15:3b:9b:
         5b:69:ec:af:15:4d:e8:9a:2f:aa:8c:06:27:11:b5:42:f5:98:
         bc:de:4e:08:f9:2e:0b:a2:45:0a:ca:3a:e1:5c:61:32:b7:fc:
         8f:11:7a:14:19:54:d6:fa:52:c8:4b:7d:ce:9f:5d:e0:dd:1d:
         77:19:7b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:08:03 2026 by rpki-client