Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e39312e302f32342d3234203d3e20343033303637.roa
File:                     3135362e392e39312e302f32342d3234203d3e20343033303637.roa (raw, json)
Hash identifier:          xMkeKzuUrG+V0CDbOHhJAQQbmpvAdUW+WG/hd+bcC0M=
Subject key identifier:   BC:E7:91:C5:A2:EC:B0:3F:52:E8:18:C3:3B:4C:24:1B:0B:46:AA:65
Certificate issuer:       /CN=b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8
Certificate serial:       54B65F38FC3F4B515EE9042216BFCC156168FDA7
Authority key identifier: D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e39312e302f32342d3234203d3e20343033303637.roa
Signing time:             Wed 28 Oct 2026 02:31:43 +0000
ROA not before:           Wed 28 Oct 2026 02:26:43 +0000
ROA not after:            Wed 27 Oct 2027 02:31:43 +0000
asID:                     403067
IP address blocks:        156.9.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.crl
                          rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:b6:5f:38:fc:3f:4b:51:5e:e9:04:22:16:bf:cc:15:61:68:fd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8
        Validity
            Not Before: Oct 28 02:26:43 2026 GMT
            Not After : Oct 27 02:31:43 2027 GMT
        Subject: CN=BCE791C5A2ECB03F52E818C33B4C241B0B46AA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9a:98:50:0c:a7:fa:74:62:49:42:0c:7d:8f:
                    18:77:1d:9c:4f:60:3a:5a:eb:b9:c1:22:1b:39:93:
                    93:7f:a4:df:53:71:98:2b:8e:e7:21:58:12:15:d0:
                    d4:e4:73:64:28:5c:f5:b8:47:8a:67:ad:00:8d:b2:
                    36:81:37:15:77:77:22:cd:96:af:93:ef:ff:e0:48:
                    69:95:6d:43:f1:e8:3a:74:76:ef:be:6b:3d:fd:97:
                    7b:62:cc:ce:80:b9:56:ed:2d:47:43:28:01:db:16:
                    c9:eb:bb:60:4a:15:73:01:bb:09:8f:cc:f1:a9:2c:
                    ae:76:35:a1:19:f9:8b:2e:a4:67:31:3f:ab:98:1c:
                    ae:61:42:62:c9:3f:72:3b:1e:28:42:87:a6:7a:55:
                    36:c3:9a:67:a8:19:c4:22:55:c9:e0:69:8b:7b:8d:
                    d4:69:6d:e3:94:83:e5:44:dc:9d:c9:e1:e7:94:d9:
                    60:68:e1:ce:4a:65:7e:fb:9a:56:89:8c:70:77:67:
                    ac:04:ff:aa:bc:39:41:81:16:1f:7d:de:82:d3:c6:
                    cd:92:d2:65:5b:af:60:0f:93:01:f0:45:f9:0a:f3:
                    a9:1e:98:51:06:0d:29:cf:b5:ec:d0:b7:26:03:5a:
                    bc:87:3a:2e:e2:1d:5c:4f:37:e2:f9:d0:36:c3:5e:
                    7d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:E7:91:C5:A2:EC:B0:3F:52:E8:18:C3:3B:4C:24:1B:0B:46:AA:65
            X509v3 Authority Key Identifier:
                keyid:D2:17:BE:28:41:39:82:93:4A:3C:40:2B:0E:67:10:B9:85:A9:93:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/D217BE28413982934A3C402B0E6710B985A99356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2945dfb7-bd07-4995-89ee-f1ff169d4bd4/b5ca9efa13e933bad9d1dbea061bbd45ef844bdfd61aba80c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/4db95c00c8e24761aece791835ce316c/0/3135362e392e39312e302f32342d3234203d3e20343033303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  156.9.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:bd:c3:5a:39:49:ee:1a:21:98:47:b2:53:27:91:ab:4b:a1:
         b4:eb:a9:11:f4:4f:aa:f4:f2:35:44:68:a9:33:99:46:aa:8f:
         ff:d7:25:98:83:75:f8:d3:30:c7:63:b3:6f:bc:8b:95:67:3b:
         e3:a2:97:4c:be:cf:85:22:9a:86:41:5b:b8:a2:c3:b1:e8:d6:
         e3:6f:c5:8e:8e:4a:34:c1:52:6f:61:e7:96:e7:e5:3f:6b:d6:
         ec:4a:51:23:ad:71:8b:e0:97:ef:17:5b:7f:0b:5d:36:a1:df:
         6a:a5:ca:b8:66:1d:f1:18:b5:74:f7:72:c9:5a:a9:31:e9:ba:
         39:e2:5a:b4:91:1b:c3:06:84:63:02:2a:f8:a3:83:7e:d9:7e:
         28:7b:51:03:c1:af:6a:25:a1:83:bc:6b:2c:81:49:ca:49:83:
         5a:b2:f8:c1:62:d5:f7:ed:34:3c:42:ab:77:a4:16:57:b3:a6:
         11:20:cd:ec:47:4d:2d:16:bb:bf:24:d7:a0:19:dd:d2:17:e7:
         f6:14:fe:07:50:9b:e3:b1:5e:3e:14:16:38:df:5f:ee:d7:3d:
         e9:64:3c:f4:1d:ce:da:62:2f:8f:3a:a2:2b:6d:1b:51:28:ae:
         76:53:60:1e:b6:7d:c7:ca:7d:e2:93:4a:6f:f7:2e:5d:6d:83:
         6f:d2:07:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:41:56 2026 by rpki-client