Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32322d3234203d3e20383334.roa
File:                     3139382e3130352e3137362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          RfVxpRpylc9nSP0zXmBZtCQQ8VcXInFF7/QsvcSl3EE=
Subject key identifier:   FE:DB:27:51:15:5C:7D:D4:88:BC:AE:38:C0:EC:52:A8:12:A9:29:10
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       22F3A15FCA9430A63C625590975B43D7F3F05A5E
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32322d3234203d3e20383334.roa
Signing time:             Mon 13 Apr 2026 11:01:16 +0000
ROA not before:           Mon 13 Apr 2026 10:56:16 +0000
ROA not after:            Mon 12 Apr 2027 11:01:16 +0000
asID:                     834
IP address blocks:        198.105.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:31:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:f3:a1:5f:ca:94:30:a6:3c:62:55:90:97:5b:43:d7:f3:f0:5a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 13 10:56:16 2026 GMT
            Not After : Apr 12 11:01:16 2027 GMT
        Subject: CN=FEDB2751155C7DD488BCAE38C0EC52A812A92910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:23:74:25:2b:a3:54:1b:a7:f6:ed:1d:be:
                    50:76:33:81:7b:0a:be:02:4e:9f:fc:66:d0:77:0e:
                    a3:81:2b:99:55:41:85:34:d7:1f:64:81:b0:a4:f4:
                    5d:ea:fd:03:97:44:1e:a3:dc:0a:a7:1a:7c:59:f4:
                    60:24:78:22:1f:14:85:f5:7e:a1:ec:33:a3:9e:b8:
                    af:a5:70:88:8a:e5:63:ff:d2:a7:a4:27:0d:2d:c2:
                    76:61:c5:69:fb:c8:a7:83:4d:4e:40:d8:93:c4:e7:
                    c2:d5:5d:45:39:1c:4a:6a:48:48:77:fb:27:82:9e:
                    d7:6e:c5:c1:3e:92:6f:b0:fe:fb:72:3b:6f:14:76:
                    00:f9:d6:da:10:0a:91:7e:07:e3:70:a5:36:fb:e8:
                    f4:90:96:b9:8d:41:79:fb:d7:aa:b8:72:f9:c3:39:
                    d9:3e:d7:dc:c4:45:c3:5c:47:96:fb:dd:57:39:f9:
                    61:77:19:37:c9:45:c9:8f:55:54:d3:bb:2c:71:6e:
                    01:91:b9:9e:de:b7:41:9b:59:d5:f1:bf:81:e4:3e:
                    b9:79:0f:5b:c3:e2:ee:60:50:87:29:69:7a:85:6d:
                    59:30:3f:12:95:c1:f4:79:c6:8a:53:b4:78:10:23:
                    c3:50:31:59:b6:17:14:e2:f9:f0:55:5f:39:6e:a3:
                    c8:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DB:27:51:15:5C:7D:D4:88:BC:AE:38:C0:EC:52:A8:12:A9:29:10
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a3:d6:81:b6:99:05:0b:51:cc:f9:fa:34:e2:81:01:85:76:04:
         f6:70:d5:7a:40:26:c7:e1:17:d5:6a:55:09:23:1b:d7:4a:af:
         85:aa:b9:3c:d1:eb:ee:ef:c6:b2:f8:e4:e3:96:10:70:2c:4f:
         3f:0d:8c:a2:49:fd:e0:61:61:b4:5b:14:b2:3f:f3:87:12:01:
         09:b5:d2:31:e4:2d:c9:8d:d5:38:d6:39:4e:1b:57:82:cd:03:
         d7:c8:eb:f7:90:7e:70:96:34:17:76:c2:02:6f:9d:0d:98:65:
         e8:2e:09:a8:11:d8:a0:36:58:d0:e4:dd:63:c8:b1:6d:4a:bf:
         73:85:bc:6c:62:f6:c8:47:b5:61:97:16:51:cc:6a:3a:24:6d:
         2e:7f:2f:24:b2:2a:ac:ee:c2:57:5a:6a:2d:87:ae:a1:61:b6:
         9f:45:6a:25:06:a7:26:42:f8:a9:d9:f0:49:03:40:b5:79:6b:
         af:74:8c:24:e2:85:22:e9:70:a0:96:8b:88:68:b0:16:34:d5:
         6a:cf:9e:77:d3:83:21:74:d2:00:0b:50:87:ef:af:5a:4d:98:
         58:de:0a:22:a6:90:8a:79:48:1f:2d:3d:05:91:c9:06:dc:e9:
         cb:33:d6:70:ac:6f:d6:d4:38:4d:2d:54:cf:69:b3:6c:d7:32:
         f6:e8:5a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:21:50 2026 by rpki-client