Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3138332e302f32342d3234203d3e20323138383239.roa
File:                     3139382e3130352e3138332e302f32342d3234203d3e20323138383239.roa (raw, json)
Hash identifier:          SCvSs5Ngvyvzsd2Y+9LfkGXpkyA1w3kfF50pPuT77JI=
Subject key identifier:   1B:A3:21:EA:98:09:92:5C:5D:4D:B8:60:CB:B8:C1:6E:A9:51:E8:BA
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       2E36C83E86706AFC3E5CE157AFDBE9194B990421
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3138332e302f32342d3234203d3e20323138383239.roa
Signing time:             Mon 07 Sep 2026 05:57:41 +0000
ROA not before:           Mon 07 Sep 2026 05:52:41 +0000
ROA not after:            Mon 06 Sep 2027 05:57:41 +0000
asID:                     218829
IP address blocks:        198.105.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:36:c8:3e:86:70:6a:fc:3e:5c:e1:57:af:db:e9:19:4b:99:04:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Sep  7 05:52:41 2026 GMT
            Not After : Sep  6 05:57:41 2027 GMT
        Subject: CN=1BA321EA9809925C5D4DB860CBB8C16EA951E8BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:da:0d:14:31:4e:8f:76:57:f7:29:c3:e6:9c:
                    3d:19:53:c6:63:40:77:18:51:fd:cf:55:01:0c:4c:
                    52:6d:c0:e3:3a:8c:5d:53:c6:25:f0:a1:84:b1:96:
                    6b:26:ba:18:63:13:55:57:93:f5:3f:48:7f:5f:79:
                    f9:be:2b:e4:c0:af:f3:62:ad:0a:a6:95:50:27:2f:
                    66:98:96:d2:d4:9c:90:8e:a9:94:fc:e0:83:8f:89:
                    23:dc:95:76:d3:7a:0f:36:94:71:28:5d:c9:ef:c4:
                    83:19:53:ba:ed:04:0f:cd:91:86:61:df:bc:89:16:
                    96:d8:64:bf:ff:09:0f:f6:1f:ff:46:ad:7f:11:d9:
                    f3:7c:45:8a:2f:f7:78:fc:7d:18:f2:73:7b:5a:97:
                    de:3c:97:d4:d0:86:39:d7:99:96:6a:54:b3:58:8c:
                    6d:d4:ac:66:14:9a:09:81:1c:f4:58:06:ea:d7:47:
                    d1:da:1e:a0:69:7d:70:c1:15:b8:9b:19:f9:21:6c:
                    f3:84:d5:b0:20:cc:c2:be:50:45:a3:02:db:23:b0:
                    dd:00:b4:4a:11:69:40:fc:cd:c0:3e:08:98:2c:14:
                    bc:8c:dd:8f:29:ba:5f:77:4c:7d:62:4e:79:24:5f:
                    16:73:af:ce:ca:3c:f5:5a:a2:8d:c2:93:4d:f9:67:
                    8f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A3:21:EA:98:09:92:5C:5D:4D:B8:60:CB:B8:C1:6E:A9:51:E8:BA
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3138332e302f32342d3234203d3e20323138383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:1c:d5:f4:e9:6d:4e:10:1d:49:23:fe:e7:81:36:92:fe:c0:
         fb:e5:60:d0:ff:8c:a6:a0:ae:43:ac:ee:51:c8:25:8a:cc:8e:
         47:e1:dc:94:36:5e:fe:df:49:0a:c9:0b:57:9d:fd:8b:f8:4d:
         80:63:3a:0e:1e:17:8a:78:11:78:16:33:e9:71:8e:76:f7:de:
         b7:28:bc:31:83:37:36:f1:1e:28:c8:6a:db:8e:98:7a:c3:ea:
         39:ea:a7:a2:73:38:b5:ac:e6:fa:74:b5:13:c4:f9:f7:cd:3d:
         dd:db:87:f7:6c:5e:43:fa:be:5d:6a:d9:6f:88:51:63:f2:5c:
         55:e2:95:29:a9:a4:c3:18:d2:cd:11:e5:de:02:b1:ef:2a:cc:
         f7:c3:74:b0:21:06:7e:5f:99:a7:64:8c:ce:74:3e:43:19:4a:
         f9:0e:9d:41:d5:1a:ca:26:5b:53:2a:d7:07:ba:61:7f:40:c3:
         94:0f:65:f1:cf:6d:42:ef:04:a8:da:35:c3:cb:09:83:3e:b9:
         77:f6:ef:b7:7d:8d:a0:d3:7a:7d:73:ed:ca:3d:c9:aa:d1:8f:
         e6:73:64:26:d4:10:85:3f:fa:f4:87:23:0b:30:a2:9c:1f:1b:
         6e:e9:09:78:99:ed:95:b6:16:81:30:cb:24:08:ca:a6:90:e7:
         dc:7f:46:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:52:57 2026 by rpki-client