Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/3137322e38312e3138392e302f32342d3234203d3e203430363736.roa
File:                     3137322e38312e3138392e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          mPbSgb0UvKTYQPIW/RO/mftjzKH8O6OF42rTjwmVXhY=
Subject key identifier:   81:E7:F9:08:0A:5B:73:A8:05:0B:CB:77:74:AD:3E:19:95:B6:46:BC
Certificate issuer:       /CN=b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff
Certificate serial:       11A5244656F05B3592A932FA86583748355F02FD
Authority key identifier: 75:D0:60:2D:37:3B:EF:51:12:ED:A0:3C:FD:DA:3E:FF:ED:7E:55:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/3137322e38312e3138392e302f32342d3234203d3e203430363736.roa
Signing time:             Wed 07 Oct 2026 06:19:18 +0000
ROA not before:           Wed 07 Oct 2026 06:14:18 +0000
ROA not after:            Wed 06 Oct 2027 06:19:18 +0000
asID:                     40676
IP address blocks:        172.81.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/75D0602D373BEF5112EDA03CFDDA3EFFED7E553F.crl
                          rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/75D0602D373BEF5112EDA03CFDDA3EFFED7E553F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:10:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a5:24:46:56:f0:5b:35:92:a9:32:fa:86:58:37:48:35:5f:02:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff
        Validity
            Not Before: Oct  7 06:14:18 2026 GMT
            Not After : Oct  6 06:19:18 2027 GMT
        Subject: CN=81E7F9080A5B73A8050BCB7774AD3E1995B646BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:82:33:52:06:50:53:7f:a9:28:03:07:d9:f6:
                    e6:8f:9c:a3:0f:e3:db:91:41:83:0b:71:5d:83:ae:
                    1f:31:15:f1:f7:3e:77:ce:93:72:73:2c:a2:ef:43:
                    71:a9:6d:2b:b0:f1:24:9c:c5:cf:11:99:e7:4a:1f:
                    ec:db:d6:54:ca:90:51:5e:34:d5:ee:f0:01:5a:71:
                    b9:65:51:a6:e0:28:cb:ee:19:a6:4b:e1:60:a1:0b:
                    c3:ed:71:7d:b9:68:99:57:13:2e:08:fd:e3:f2:cc:
                    96:e7:6c:7f:10:38:32:b7:32:a6:78:c5:c8:72:ae:
                    ef:8e:54:00:02:14:4f:57:d6:d4:b1:d9:50:fb:5a:
                    6f:7d:b7:38:d7:eb:06:cb:69:c5:64:06:a1:8c:af:
                    79:c9:a2:e7:e4:9b:2d:54:f3:71:42:97:93:4d:ba:
                    c1:99:b5:ac:3e:5e:17:80:9a:91:37:50:50:33:63:
                    d1:68:7d:e7:7b:0d:5d:bf:74:51:99:5d:b9:0f:2b:
                    42:7a:10:fd:ec:c3:f9:8e:a8:2a:0d:81:e2:e7:a5:
                    d5:d6:7a:02:1a:81:3e:1b:18:1e:2e:24:c6:a7:4d:
                    e7:47:f4:3a:a8:c0:52:13:28:da:61:19:75:20:a9:
                    c5:59:1a:49:4c:64:eb:a3:5b:85:2d:8a:aa:55:ab:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:E7:F9:08:0A:5B:73:A8:05:0B:CB:77:74:AD:3E:19:95:B6:46:BC
            X509v3 Authority Key Identifier:
                keyid:75:D0:60:2D:37:3B:EF:51:12:ED:A0:3C:FD:DA:3E:FF:ED:7E:55:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/75D0602D373BEF5112EDA03CFDDA3EFFED7E553F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/f2e57b2e-e7cb-45be-82ae-b8bfdf8f595a/b348f8d5dfc044a38041c635b165c7fd98daa511f166e9b4ff.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/12674885b50e4d7a89855c91099019ee/0/3137322e38312e3138392e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:03:21:f7:aa:2a:b6:60:de:54:64:ad:85:59:cf:6b:6a:ad:
         75:57:1f:23:69:71:91:40:ad:00:53:3d:1b:5a:d0:e5:4c:4a:
         a3:7c:a1:a1:0b:9d:2f:58:e9:96:c6:2d:d1:e0:17:56:65:d3:
         b9:93:4c:4b:e3:30:c7:07:4f:c5:86:97:51:d2:b7:df:e4:de:
         f8:10:f4:e4:c6:12:aa:cd:53:ff:51:aa:8c:b9:1c:f5:a1:63:
         3a:bf:b6:34:e0:01:2f:5d:b9:09:88:14:d2:03:fa:3f:56:58:
         96:b1:16:5c:8b:11:80:fd:3e:09:ed:c9:01:73:a0:ac:dc:46:
         40:84:8f:e0:04:91:74:15:3c:11:f5:fc:9c:fe:03:34:aa:24:
         40:12:5b:97:e7:e5:52:0a:69:5d:e2:37:c9:89:50:75:5f:28:
         8e:34:3d:43:e9:75:0f:b3:a4:b2:af:11:e1:28:b1:a9:fd:2e:
         14:9a:7f:94:17:a4:20:58:de:a2:f4:4e:e5:96:b9:0f:bb:34:
         85:a3:6c:58:fa:17:96:e5:24:0d:7b:56:1c:a1:64:67:3a:70:
         df:bf:5e:c6:f4:4e:0f:2c:db:89:d6:81:75:b2:2f:8a:8e:d3:
         ed:57:7e:8e:a1:82:0d:29:5b:97:2d:3e:0f:af:93:81:62:06:
         73:ca:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:51:13 2026 by rpki-client