Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20383334.roa
File:                     3230352e3231312e3135352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          MZBAkHZZ+MmZpt5MT04pCiM6heVW68HWcKVYX9zNiIA=
Subject key identifier:   96:17:CC:5B:C4:F1:CC:78:B7:21:44:42:63:6A:AE:4D:6E:0C:8F:9F
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       1783D158FAA740D8B3DD61AE0ED288BE46107B4E
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20383334.roa
Signing time:             Wed 16 Sep 2026 13:56:25 +0000
ROA not before:           Wed 16 Sep 2026 13:51:25 +0000
ROA not after:            Wed 15 Sep 2027 13:56:25 +0000
asID:                     834
IP address blocks:        205.211.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 11:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:83:d1:58:fa:a7:40:d8:b3:dd:61:ae:0e:d2:88:be:46:10:7b:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Sep 16 13:51:25 2026 GMT
            Not After : Sep 15 13:56:25 2027 GMT
        Subject: CN=9617CC5BC4F1CC78B7214442636AAE4D6E0C8F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:03:8d:ae:40:e9:75:69:c8:63:df:8f:79:14:
                    7d:46:fc:4f:47:d1:60:52:0a:3d:47:91:d7:ce:3d:
                    ae:25:8b:94:77:22:66:c1:07:fa:d2:84:10:7c:91:
                    4a:ea:13:e3:16:03:26:a4:f5:be:34:bd:aa:d6:e9:
                    3b:93:5c:12:fc:57:95:94:89:79:cb:d0:fa:af:2a:
                    a7:e5:41:0d:bb:d0:99:ba:36:00:d6:8f:2a:b7:7c:
                    0a:2b:6f:ff:5c:3a:7a:84:7e:36:c5:29:47:56:2d:
                    bd:e6:db:d6:af:57:33:81:43:8a:f6:cd:0a:e3:d3:
                    b9:c5:ed:35:89:84:71:ce:7b:2c:21:54:ca:1d:a9:
                    02:26:56:e6:ea:8d:57:2e:8b:04:97:85:fc:f3:0c:
                    41:95:21:9f:51:f4:be:00:b8:53:01:50:f9:7f:9e:
                    69:fc:be:d7:74:00:a5:91:8c:57:a3:ee:3c:e0:d6:
                    fc:f1:2d:5d:20:87:cc:98:ea:c4:60:59:5b:98:81:
                    7e:2c:67:3a:65:3a:a4:b1:fe:55:72:80:32:65:ac:
                    1a:70:e2:0a:f8:b9:f8:e6:75:96:2f:71:94:23:85:
                    75:4b:5a:81:07:ed:5b:fb:08:ef:01:f4:4b:4e:be:
                    fa:2f:8b:3a:dd:75:84:ba:d6:02:2f:75:30:80:af:
                    e5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:17:CC:5B:C4:F1:CC:78:B7:21:44:42:63:6A:AE:4D:6E:0C:8F:9F
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:10:06:f2:99:f2:67:dd:f5:e5:e7:e2:bc:1c:bf:1d:c2:3e:
         3d:c7:db:b8:20:10:f2:53:e9:36:a3:ab:58:ed:1b:f4:12:f2:
         83:d9:15:a7:39:71:4f:06:22:95:b2:05:98:71:d9:64:ac:3b:
         e0:10:bb:fd:cc:7d:af:3a:a6:4e:45:78:da:96:91:3a:dd:4e:
         a5:ca:e8:aa:bd:7c:c7:ae:99:30:94:bd:73:90:ff:68:d4:28:
         5b:77:f1:c5:b8:29:53:db:cb:a7:36:14:a8:90:5a:8c:20:bf:
         63:22:3a:4d:02:a6:bc:2c:5b:39:80:26:de:17:3c:52:a0:03:
         3d:cf:03:b6:ef:13:e7:6b:22:53:96:ba:b9:91:c9:e3:0e:56:
         4c:0c:b1:f2:77:20:a2:5f:20:0f:e0:69:57:93:06:7c:ea:68:
         79:4d:c7:9c:8a:77:60:ea:26:76:23:f3:bc:4a:91:3a:fc:b2:
         24:75:35:7c:b6:4f:e8:7c:aa:b5:83:94:bc:e8:30:6d:af:f7:
         16:54:fc:89:bc:76:78:2e:be:5f:62:fc:0e:ad:83:c1:c8:b7:
         ad:61:4b:8f:db:45:bc:cd:84:30:6f:19:b6:ef:26:17:8b:1b:
         35:43:82:f7:94:e9:70:7c:e4:bd:29:2c:72:12:6a:6d:c2:72:
         fc:5b:04:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:28:22 2026 by rpki-client