Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32342d3234203d3e20323138383239.roa
File:                     3231362e3132322e3132342e302f32342d3234203d3e20323138383239.roa (raw, json)
Hash identifier:          6ZiT41B/t+tiO6i676pNIuxIl5VmniTy9JxKPosTWmo=
Subject key identifier:   5E:A7:7A:D8:29:DC:F4:1A:F6:E9:FF:0E:99:7A:70:7D:3D:35:FD:8D
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       1839E5988F28B7D7E80D5F6E08F0CE49CD10672C
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32342d3234203d3e20323138383239.roa
Signing time:             Sat 05 Sep 2026 06:59:12 +0000
ROA not before:           Sat 05 Sep 2026 06:54:12 +0000
ROA not after:            Sat 04 Sep 2027 06:59:12 +0000
asID:                     218829
IP address blocks:        216.122.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:04:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:39:e5:98:8f:28:b7:d7:e8:0d:5f:6e:08:f0:ce:49:cd:10:67:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep  5 06:54:12 2026 GMT
            Not After : Sep  4 06:59:12 2027 GMT
        Subject: CN=5EA77AD829DCF41AF6E9FF0E997A707D3D35FD8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:66:f5:9a:0f:26:ae:05:bc:3a:4a:dc:92:3c:
                    24:7c:19:e4:46:e4:02:70:c1:c1:08:e7:51:7d:66:
                    f8:68:03:02:05:22:95:c7:e8:16:fa:92:65:bc:89:
                    76:af:3d:76:56:b3:70:96:09:58:17:d9:cc:f0:6d:
                    34:91:5d:5c:65:12:6f:6f:47:64:2f:c5:63:07:13:
                    c5:07:b8:77:a4:88:b7:1b:5c:cd:41:30:18:75:c6:
                    2c:a2:03:67:4c:2f:d6:d7:f5:35:5d:8b:49:aa:17:
                    c2:e6:f1:08:f2:ae:30:ee:ce:1b:54:65:90:83:83:
                    c7:9b:f5:82:3f:c5:97:73:d3:57:c0:6f:ce:1a:ea:
                    32:a4:4a:d4:b9:bd:c6:b0:8d:11:23:b6:a2:18:84:
                    ec:1b:3b:20:de:6b:8c:cd:08:12:29:e1:79:13:ac:
                    81:bb:df:a4:41:91:60:ab:18:a3:0b:fd:9f:26:2e:
                    07:57:b3:c7:de:9e:53:b7:fd:4f:cd:9e:d3:6a:97:
                    72:fd:48:c2:6e:3f:de:de:aa:68:d5:15:28:87:71:
                    ec:15:94:16:0e:72:d8:92:ee:f8:e2:83:05:f5:c1:
                    d0:44:be:05:82:51:54:af:4b:0b:47:3c:b2:00:e6:
                    fb:31:e5:14:1b:6a:e4:76:df:89:56:72:03:c2:e8:
                    7b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A7:7A:D8:29:DC:F4:1A:F6:E9:FF:0E:99:7A:70:7D:3D:35:FD:8D
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32342d3234203d3e20323138383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:fa:ba:4f:5e:9c:5f:8f:d9:86:b8:47:57:c6:cd:74:9c:43:
         ad:29:be:ed:13:80:fb:f7:51:5c:1c:f7:76:5e:06:78:0b:2d:
         97:68:84:60:a6:e0:ca:7b:3d:14:f9:06:6a:fb:4e:a2:a6:25:
         56:68:5f:47:2e:1c:79:cc:69:ba:6c:00:1b:ae:24:4b:f6:b1:
         d1:d5:29:b9:32:d5:d2:d4:7c:1d:36:23:dc:02:40:fe:7f:77:
         62:02:1b:1d:e9:0a:4f:77:54:90:89:24:4b:95:1b:23:4b:4b:
         f3:18:a7:11:fb:0c:91:d4:d1:2b:27:18:af:f8:5e:6a:06:e6:
         eb:37:0a:98:a0:dd:0d:c0:c0:57:7f:86:8a:c1:69:7f:c0:f3:
         9f:4e:5a:37:a4:54:cb:5b:e2:01:e1:28:75:83:88:8e:41:b0:
         4a:13:da:de:b1:1a:5b:6f:c9:dc:ef:19:be:5a:d3:f3:4b:fe:
         28:a8:9b:32:61:4b:b6:93:b4:2a:6e:5f:5d:38:6a:56:7c:b7:
         1e:5b:3f:64:dc:e6:f0:c9:9e:e0:fe:50:53:89:f2:30:f8:55:
         b3:2a:22:d4:c3:24:30:73:a3:7e:82:35:e4:b5:b3:b1:df:20:
         61:d3:d8:8a:a7:48:74:ef:84:3f:77:d2:52:15:0e:56:aa:1b:
         52:d7:31:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:57:58 2026 by rpki-client