Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32322d3234203d3e20383334.roa
File:                     3139382e3137372e36302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          pfMH0YsqdlvLuqZubjIdkw1wErYbR8xjW+8FqbWKIrU=
Subject key identifier:   5B:E3:B6:BB:FD:E7:2D:86:EE:2F:67:2B:AD:CD:60:07:4A:9D:27:8F
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       4B64BA6F0F103263E058DABA1EC88169A33DA02A
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32322d3234203d3e20383334.roa
Signing time:             Wed 07 Oct 2026 06:50:14 +0000
ROA not before:           Wed 07 Oct 2026 06:45:14 +0000
ROA not after:            Wed 06 Oct 2027 06:50:14 +0000
asID:                     834
IP address blocks:        198.177.60.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 10:27:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:64:ba:6f:0f:10:32:63:e0:58:da:ba:1e:c8:81:69:a3:3d:a0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Oct  7 06:45:14 2026 GMT
            Not After : Oct  6 06:50:14 2027 GMT
        Subject: CN=5BE3B6BBFDE72D86EE2F672BADCD60074A9D278F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:85:a4:3c:49:4a:fb:11:00:f0:7a:15:88:3e:
                    0e:47:b4:ce:b5:3f:31:94:22:db:ae:71:71:94:3b:
                    27:ec:09:c5:e1:c8:8a:43:f8:d6:26:e3:27:b5:b3:
                    3a:2c:57:f3:cb:26:75:b5:e1:8a:f5:52:b0:6b:94:
                    a0:00:bd:b0:c2:55:fe:0e:00:f4:20:71:92:d1:5d:
                    ac:b8:88:2c:22:3d:a1:3f:43:d0:4a:d5:b9:d1:70:
                    28:1d:e4:d6:a8:6b:50:e6:6d:68:76:4b:e9:63:c2:
                    5a:ef:e8:7e:61:55:cf:09:78:10:55:9c:81:a4:ab:
                    8e:ae:4c:6d:6e:1a:63:a2:1a:7a:8c:c1:a8:e8:1e:
                    c2:ed:5f:09:c0:d7:bf:66:6e:8f:a8:b2:a0:84:b0:
                    fd:a6:66:77:b5:c6:7f:48:87:83:69:f4:5a:b1:5d:
                    1f:89:75:8f:29:a7:f9:85:f5:cd:0d:2b:29:0d:27:
                    53:83:39:49:b7:fb:45:9d:90:ee:46:4c:5b:48:61:
                    ad:22:cf:fc:88:6a:32:18:37:d6:6a:7e:fa:3a:a3:
                    a3:7e:2f:c3:a4:3e:a2:de:13:de:90:0c:9e:c1:94:
                    0a:a1:a0:1c:b6:94:89:a9:bf:a2:9f:94:a7:e9:8f:
                    f1:5a:95:89:e4:a4:b7:b4:72:f3:0a:44:c0:f4:50:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E3:B6:BB:FD:E7:2D:86:EE:2F:67:2B:AD:CD:60:07:4A:9D:27:8F
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:e2:f3:cd:42:cc:9b:6e:a6:c6:86:dc:10:eb:4c:a6:f0:2f:
         f3:5b:d0:a2:e5:dc:03:91:15:9a:cb:57:e7:83:09:72:65:e0:
         f2:36:05:f3:ad:88:7f:82:48:a1:b2:3e:a3:15:43:2a:c1:58:
         b1:0b:be:1d:0f:14:f5:d6:b4:df:7a:17:81:94:b7:d9:53:47:
         ac:01:3a:57:99:44:db:e7:45:a4:43:bf:e6:55:f0:ff:e6:74:
         78:1f:31:35:45:a4:57:a0:86:b2:0e:cb:37:05:4c:a2:9c:8d:
         5c:3f:31:55:1b:a2:22:e1:f4:2c:81:70:6d:48:26:83:89:99:
         78:fd:22:f0:4c:51:0f:3e:29:74:a3:be:c9:3b:cd:e6:f9:0b:
         ff:22:89:9b:be:10:a0:ed:cf:fc:46:72:e6:9a:99:3c:e8:39:
         06:42:81:1f:7f:44:a5:b3:7a:bb:f2:38:c6:94:2e:de:16:05:
         01:8b:19:24:17:e3:6d:ad:fd:d9:a0:d6:61:b5:cd:ae:46:cc:
         91:7b:12:9c:a3:52:4d:d5:60:a7:4b:6b:c9:71:b7:94:a1:63:
         f7:1c:53:45:3a:1d:9e:06:18:20:55:00:39:34:76:2f:fb:12:
         87:6a:87:1c:db:18:80:d9:7f:aa:8f:c1:f2:c1:b8:03:77:5d:
         cb:6e:bc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:41:32 2026 by rpki-client