Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231302e302f32342d3234203d3e20333938323536.roa
File:                     3130342e3134352e3231302e302f32342d3234203d3e20333938323536.roa (raw, json)
Hash identifier:          XqCHZTLYOurvTbtn/H+RNZ/g1IF5i2gPn1DBDLz5pUE=
Subject key identifier:   53:00:48:3C:79:43:AB:39:C1:38:2F:1F:78:3B:07:FF:5A:E9:DB:B7
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       7AE198A5B621A656E6471E7475AB82ADECFE7099
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231302e302f32342d3234203d3e20333938323536.roa
Signing time:             Fri 12 Jun 2026 20:36:06 +0000
ROA not before:           Fri 12 Jun 2026 20:31:06 +0000
ROA not after:            Fri 11 Jun 2027 20:36:06 +0000
asID:                     398256
IP address blocks:        104.145.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:46:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:e1:98:a5:b6:21:a6:56:e6:47:1e:74:75:ab:82:ad:ec:fe:70:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun 12 20:31:06 2026 GMT
            Not After : Jun 11 20:36:06 2027 GMT
        Subject: CN=5300483C7943AB39C1382F1F783B07FF5AE9DBB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:2d:9a:1f:68:64:be:e1:5c:b5:b8:1d:69:
                    2f:f5:63:1a:8c:9c:af:b7:13:71:cd:e1:3e:47:73:
                    d1:68:a6:c5:d3:ae:01:bd:0a:7a:3a:b7:06:61:92:
                    c9:f8:64:8e:c4:aa:8f:ed:70:31:29:26:68:21:76:
                    9f:cd:fe:47:3c:9d:c9:b9:a5:c8:09:af:d5:21:2c:
                    7e:a0:01:28:3a:2f:4b:d3:69:eb:9e:91:6a:0e:02:
                    09:a8:ef:5a:f5:5f:1e:75:ed:90:52:9c:25:f0:b6:
                    15:62:aa:7a:32:84:af:fc:15:80:96:97:6d:44:ba:
                    0b:72:cc:2d:4b:54:2c:92:99:27:03:35:f5:fa:a6:
                    40:56:a0:1c:69:c6:d7:1f:42:7c:0b:30:65:27:d2:
                    46:9f:02:3a:66:70:d5:5c:fe:f6:00:f6:39:fc:3e:
                    ef:72:ea:74:8a:32:b7:c9:a2:7a:73:70:24:59:b4:
                    7c:ec:b3:b5:17:c4:1d:b7:96:f3:0d:ec:7d:bf:67:
                    c6:3c:32:4b:58:78:05:d9:39:e9:ff:28:96:be:b9:
                    d0:40:47:35:7b:67:29:83:88:dd:0a:d9:e1:dd:43:
                    06:9e:23:0d:46:5b:9c:86:ff:a8:4f:67:2c:6a:e8:
                    76:a7:65:f7:df:2a:be:b4:ac:ca:1f:35:eb:d9:f6:
                    3b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:00:48:3C:79:43:AB:39:C1:38:2F:1F:78:3B:07:FF:5A:E9:DB:B7
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231302e302f32342d3234203d3e20333938323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:32:8c:5e:28:65:dd:24:6e:d9:2a:be:5c:a8:46:4d:5b:36:
         21:4d:a5:2e:81:1a:bc:b3:cf:af:63:0e:e1:1a:7c:53:75:6c:
         95:d3:10:c9:84:6b:cb:4e:0f:8a:2c:70:96:d0:ff:ca:23:07:
         33:b7:91:01:a8:f9:84:fb:4c:dc:fa:e4:2c:dc:a6:88:89:71:
         9d:5a:b3:42:54:8d:8a:84:5a:7d:1b:55:8f:33:17:2b:45:db:
         e5:84:b2:33:0f:15:39:ae:61:cd:c5:9a:e3:41:32:5a:39:19:
         a0:f1:20:df:86:51:94:91:cb:42:3b:5d:23:24:1a:46:4d:db:
         93:50:71:71:6e:31:03:a3:10:61:68:73:73:50:14:2e:0c:1e:
         72:d3:43:aa:86:4a:26:b5:9f:ed:12:11:3e:30:08:4e:cd:ff:
         1e:23:eb:16:cd:7a:e7:e8:f2:d8:82:ae:fe:32:ad:63:1c:e0:
         5a:51:b5:68:e8:f0:69:ab:18:20:b3:fc:f9:fe:ab:4c:e2:72:
         64:cb:f3:7e:b1:b2:df:68:51:fb:61:d4:08:6b:e4:73:1f:b6:
         03:f7:9b:ef:97:f6:7e:b8:bf:bd:af:e7:89:eb:6f:eb:e9:df:
         36:d8:3c:4b:3e:e0:c8:03:4b:db:31:6a:48:ef:5c:0c:6c:c6:
         8f:2c:a9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:25:07 2026 by rpki-client