Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36312e302f32342d3234203d3e20323138393635.roa
File:                     3139382e3137372e36312e302f32342d3234203d3e20323138393635.roa (raw, json)
Hash identifier:          XgV7l1zrgPSTLnV56EgAFd7ZY/njM4j2o6rTsU5mQwc=
Subject key identifier:   51:35:8B:6D:C0:69:6E:30:34:C6:AB:E8:90:4B:A8:8E:45:20:83:50
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       24462F6DF858A9B2B6D740BADC2D83F9DC2059A1
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36312e302f32342d3234203d3e20323138393635.roa
Signing time:             Thu 03 Sep 2026 12:11:37 +0000
ROA not before:           Thu 03 Sep 2026 12:06:37 +0000
ROA not after:            Thu 02 Sep 2027 12:11:37 +0000
asID:                     218965
IP address blocks:        198.177.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:46:2f:6d:f8:58:a9:b2:b6:d7:40:ba:dc:2d:83:f9:dc:20:59:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Sep  3 12:06:37 2026 GMT
            Not After : Sep  2 12:11:37 2027 GMT
        Subject: CN=51358B6DC0696E3034C6ABE8904BA88E45208350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:63:00:c3:51:9c:cb:0b:fb:db:e8:d9:70:37:
                    37:5a:a6:34:b4:0d:7b:3a:85:f3:d6:7f:3a:0b:a0:
                    c5:e0:e2:37:e5:fa:cf:02:0f:a0:14:c4:40:9d:1e:
                    7c:0c:22:09:5b:16:4c:18:27:c9:fc:29:9b:97:e4:
                    44:72:09:81:54:d5:03:1d:ea:40:72:4f:d8:f3:20:
                    70:5b:69:df:67:ce:1c:b9:79:b6:e9:1b:c5:c7:92:
                    2d:75:18:6b:ee:7a:57:27:1f:e4:d8:43:97:50:c4:
                    79:02:a8:c4:1a:19:16:02:f6:2c:67:9c:00:e6:10:
                    34:8f:84:23:65:15:81:cf:91:f1:b5:e3:7c:ed:40:
                    51:fc:16:72:93:bc:b4:ca:f1:2b:d4:df:da:44:41:
                    12:03:69:4a:af:ba:56:71:c6:b1:d7:23:10:12:59:
                    c0:34:b1:ce:a3:f1:db:37:11:ab:85:85:da:c4:12:
                    43:27:41:2c:81:5e:d2:85:b1:c2:38:f1:ac:ad:e2:
                    36:50:e9:57:d9:f2:6a:25:29:22:ac:29:2e:b2:d6:
                    6b:34:ac:b9:63:b9:b4:fc:4a:4f:10:c7:33:94:ee:
                    6f:74:f3:ac:04:a8:39:3a:70:42:0a:5b:34:8c:2e:
                    22:00:d6:d1:20:32:ab:ca:dd:1c:a8:4d:73:09:87:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:35:8B:6D:C0:69:6E:30:34:C6:AB:E8:90:4B:A8:8E:45:20:83:50
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36312e302f32342d3234203d3e20323138393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:22:c2:e8:98:7c:c6:da:59:06:d8:3a:16:00:ac:74:85:30:
         61:2c:b3:2d:4c:06:72:95:c5:ea:b1:f3:99:89:e8:0c:c7:11:
         b0:46:10:20:d8:c7:a9:21:f1:cf:43:68:6d:c1:70:88:14:e0:
         b6:54:3d:05:6e:18:53:ef:f7:ec:e5:7a:a3:f4:01:49:80:6c:
         44:61:fb:e8:a0:02:5e:45:ab:f3:39:68:d6:0d:a9:9d:3a:b6:
         b5:8c:1c:5d:5b:1e:1b:54:ef:ad:7a:b2:7c:63:48:28:43:26:
         fb:44:08:13:a4:d5:fb:89:ab:fe:5c:30:49:69:52:59:fc:92:
         17:03:da:9c:7f:d7:10:59:de:b6:4f:5f:c7:61:04:1a:a1:59:
         a6:7f:cb:9e:9e:f7:84:4b:39:98:5c:ac:a2:14:42:b7:7c:d0:
         6a:17:6a:c5:c1:4e:77:60:89:1a:80:9a:20:65:c0:7b:3b:31:
         ba:45:a3:41:c3:a2:18:ce:c6:fa:4a:c0:04:02:7a:e8:d4:7e:
         a0:65:be:9e:8b:97:01:04:b8:0c:31:0f:b2:88:0e:f2:08:5b:
         a8:dc:80:94:70:2b:9c:0a:50:f1:16:74:e4:5b:45:62:2c:ee:
         2a:a7:f2:ca:33:76:3e:13:25:c5:51:cf:7a:42:bc:81:7f:3b:
         92:41:fc:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:58:03 2026 by rpki-client