Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32342d3234203d3e20383334.roa
File:                     3139382e3130352e3137362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          0lDYCuL9asCtG6TeLuc3uupYTOi/JI0hhia5cvqvhQQ=
Subject key identifier:   00:F8:E7:33:08:1C:9D:04:18:54:E9:F5:20:3A:48:30:F1:01:A1:69
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       78873F98A6ADE9DD1DC6E0413F89A77033599A7B
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32342d3234203d3e20383334.roa
Signing time:             Mon 17 Aug 2026 13:56:10 +0000
ROA not before:           Mon 17 Aug 2026 13:51:10 +0000
ROA not after:            Mon 16 Aug 2027 13:56:10 +0000
asID:                     834
IP address blocks:        198.105.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:87:3f:98:a6:ad:e9:dd:1d:c6:e0:41:3f:89:a7:70:33:59:9a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Aug 17 13:51:10 2026 GMT
            Not After : Aug 16 13:56:10 2027 GMT
        Subject: CN=00F8E733081C9D041854E9F5203A4830F101A169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:eb:65:95:e0:f3:40:87:a6:0a:34:4e:e5:70:
                    b8:9d:84:8f:9c:09:d7:f5:52:73:af:ad:7d:66:c6:
                    ee:40:69:e3:3e:81:55:8b:2e:7b:6e:9c:8e:dc:19:
                    94:01:f0:6e:04:e5:8d:c8:77:96:6d:a3:cb:82:39:
                    74:bb:c7:ba:fc:12:ea:03:fd:da:66:1e:10:1d:ab:
                    48:9d:39:f8:69:a7:13:26:53:16:cc:b5:79:a4:81:
                    6d:8c:33:a5:de:8e:43:da:05:42:fc:22:60:ae:5b:
                    5f:40:67:7c:73:fd:ae:25:b7:f0:89:22:88:6f:67:
                    5c:2b:94:fa:72:3f:3c:47:b5:58:1a:fb:45:0b:26:
                    33:13:27:8c:ec:04:4d:7e:93:58:b0:2f:5d:fc:22:
                    0a:25:e2:29:ee:24:e4:ff:cf:d3:5d:bc:ba:46:8d:
                    e0:e3:16:70:55:b1:44:e0:28:cc:52:40:6e:f7:b5:
                    3f:42:d6:64:b7:a4:c1:63:50:e1:73:00:5d:10:22:
                    81:8a:71:33:61:5e:d8:79:f0:5d:3a:63:32:9a:47:
                    23:b6:f6:e2:7f:24:b2:cd:df:42:37:1c:5b:78:3b:
                    c6:b4:98:af:b7:bb:c2:69:53:f0:54:35:f7:7d:36:
                    ea:87:03:78:e5:9f:50:94:15:a3:7a:95:4a:52:72:
                    57:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F8:E7:33:08:1C:9D:04:18:54:E9:F5:20:3A:48:30:F1:01:A1:69
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:91:48:50:b1:cb:ef:a2:ab:21:cf:e2:ae:56:aa:82:26:47:
         ff:ee:81:77:12:4c:65:32:3a:24:e6:7c:74:9b:18:1b:be:54:
         db:f9:66:38:76:84:1b:74:34:c8:70:85:09:e9:2b:16:dc:d7:
         c6:8c:61:55:aa:97:de:26:1d:27:a6:92:b6:10:1c:c3:0c:4c:
         c0:d4:97:45:ed:d8:40:aa:28:86:d4:6d:ab:35:8f:7b:c1:2b:
         28:e4:73:40:42:18:28:cd:06:bb:c6:32:22:1b:54:85:59:ac:
         ec:f3:65:87:f7:70:85:a5:bb:ae:14:d6:37:03:0c:68:fc:1b:
         fd:03:f5:6f:69:fb:ed:07:8b:47:8c:7c:83:11:21:f3:30:cb:
         a4:93:aa:6a:62:f3:6f:ba:79:2c:be:09:12:64:8c:03:c9:b3:
         a6:a0:86:d6:da:ee:3c:5a:df:4b:d0:ef:2b:c0:21:ca:c9:54:
         a2:1e:d9:bb:47:0a:d4:59:0a:e1:ce:8a:b2:63:63:4b:c7:62:
         ef:f0:54:e2:92:3c:2c:27:97:70:0f:a0:e3:0a:5c:12:3d:94:
         fc:ae:6b:35:a3:6d:ab:8d:bb:23:9b:37:9b:92:a2:35:80:a9:
         7a:3c:ce:8b:db:54:53:29:2c:23:a2:95:74:f3:c1:58:1c:a5:
         a5:fd:7c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:25:50 2026 by rpki-client