Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32372e302f32342d3234203d3e2036303739.roa
File:                     3136322e3231372e32372e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          XbN3zlYsbIM2vvKE7vrLeKYkMavR3nKdxXbhfa4TmTc=
Subject key identifier:   E0:96:81:A7:0F:27:8F:B8:76:8D:14:26:70:A2:4D:0F:EC:5E:5E:C7
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       0A400610D98006B38C78B8D63AFF1216E9EB7200
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32372e302f32342d3234203d3e2036303739.roa
Signing time:             Thu 11 Jun 2026 14:53:35 +0000
ROA not before:           Thu 11 Jun 2026 14:48:35 +0000
ROA not after:            Thu 10 Jun 2027 14:53:35 +0000
asID:                     6079
IP address blocks:        162.217.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 20:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:40:06:10:d9:80:06:b3:8c:78:b8:d6:3a:ff:12:16:e9:eb:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Jun 11 14:48:35 2026 GMT
            Not After : Jun 10 14:53:35 2027 GMT
        Subject: CN=E09681A70F278FB8768D142670A24D0FEC5E5EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:22:0d:1d:71:2c:93:c8:2d:50:02:b2:e7:3f:
                    b8:33:12:cd:5d:cb:93:6b:dc:62:56:f4:a9:ca:52:
                    8f:e3:47:d6:9e:69:99:b0:df:59:e8:61:7f:91:e4:
                    13:dd:be:78:0f:81:be:13:7d:f2:84:ca:7b:8f:fd:
                    fb:3b:59:04:90:af:52:9e:0e:ae:c4:f8:21:4b:fe:
                    a6:1a:b5:d7:eb:8a:2b:2c:35:ea:1e:83:d9:0c:b3:
                    3b:79:ac:01:62:d0:0b:bb:65:ff:48:5d:32:c7:ec:
                    cb:21:27:e9:cc:c5:19:06:e3:57:01:94:83:bd:64:
                    7a:ed:1e:32:5d:01:7d:90:ca:3e:9a:2a:50:52:bf:
                    76:05:92:9b:92:4b:63:0a:10:2e:08:d2:f8:0a:6f:
                    f4:b6:ca:09:e6:57:01:db:cc:99:70:83:72:52:be:
                    6f:3c:65:5c:4c:12:35:4e:7c:91:ff:9a:fe:c5:23:
                    ad:ff:05:1f:94:42:4a:39:b9:0d:c9:69:43:17:76:
                    21:6b:dd:77:0d:98:f3:90:0b:60:54:fe:31:9b:fa:
                    15:e8:1b:a6:aa:ee:f7:38:4c:e4:6d:45:b3:46:20:
                    92:7f:f6:49:8c:fb:0d:13:3a:c4:28:a4:70:e2:bc:
                    77:72:36:2b:39:56:d0:13:4a:f0:f7:51:53:5c:47:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:96:81:A7:0F:27:8F:B8:76:8D:14:26:70:A2:4D:0F:EC:5E:5E:C7
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32372e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ba:ba:e5:13:91:bd:dc:e9:1c:0e:2f:ea:90:a5:d3:3b:22:
         07:e0:32:af:dd:f8:6e:86:a1:b5:0b:78:c7:c3:f7:da:fc:0b:
         a9:02:67:5c:d4:08:7f:17:e7:f9:10:37:e4:ac:62:80:4a:f7:
         89:c8:02:f5:92:29:3a:47:82:d3:a5:ab:99:ba:63:d4:6b:a0:
         2d:d4:e6:63:4e:2d:f5:39:8c:c4:3d:ed:52:47:46:b3:cd:6b:
         3a:da:b3:54:93:1a:54:e6:59:96:38:1e:3c:ad:ff:bb:07:95:
         ec:7e:4d:0e:f2:a9:5e:3f:a9:cb:c2:12:a9:c0:de:b7:b8:05:
         d5:5e:2f:68:6b:b2:d7:aa:a1:08:24:03:6f:c6:38:00:dd:6d:
         f8:b2:ac:c3:a7:f8:36:e6:81:fd:7d:f6:1d:df:17:cd:48:25:
         04:0d:3b:05:7e:94:fa:28:ed:d0:f6:14:e5:52:76:4e:17:18:
         6e:de:21:67:6f:56:67:04:80:4e:e8:31:2f:d4:ed:d0:1a:c9:
         5d:72:75:55:51:af:77:fe:65:27:f8:4e:fe:f9:79:48:b4:cb:
         37:bc:fc:bc:10:3d:97:e7:14:48:73:27:00:ec:5a:46:0f:77:
         56:21:2e:43:7e:90:b7:d9:55:7d:c5:03:31:e6:c6:a9:dc:86:
         2b:2b:8f:99
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUCkAGENmABrOMeLjWOv8SFunrcgAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm
NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjYwNjExMTQ0ODM1WhcNMjcwNjEwMTQ1MzM1
WjAzMTEwLwYDVQQDEyhFMDk2ODFBNzBGMjc4RkI4NzY4RDE0MjY3MEEyNEQwRkVD
NUU1RUM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSINHXEsk8gt
UAKy5z+4MxLNXcuTa9xiVvSpylKP40fWnmmZsN9Z6GF/keQT3b54D4G+E33yhMp7
j/37O1kEkK9Sng6uxPghS/6mGrXX64orLDXqHoPZDLM7eawBYtALu2X/SF0yx+zL
ISfpzMUZBuNXAZSDvWR67R4yXQF9kMo+mipQUr92BZKbkktjChAuCNL4Cm/0tsoJ
5lcB28yZcINyUr5vPGVcTBI1TnyR/5r+xSOt/wUflEJKObkNyWlDF3Yha913DZjz
kAtgVP4xm/oV6Bumqu73OEzkbUWzRiCSf/ZJjPsNEzrEKKRw4rx3cjYrOVbQE0rw
91FTXEdjYwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOCWgacPJ4+4do0UJnCiTQ/s
Xl7HMB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv
MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl
ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy
YzFiMTllMGM1ZS8wLzMxMzYzMjJlMzIzMTM3MmUzMjM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACi2RswDQYJKoZIhvcNAQELBQAD
ggEBAIq6uuUTkb3c6RwOL+qQpdM7IgfgMq/d+G6GobULeMfD99r8C6kCZ1zUCH8X
5/kQN+SsYoBK94nIAvWSKTpHgtOlq5m6Y9RroC3U5mNOLfU5jMQ97VJHRrPNazra
s1STGlTmWZY4Hjyt/7sHlex+TQ7yqV4/qcvCEqnA3re4BdVeL2hrsteqoQgkA2/G
OADdbfiyrMOn+Dbmgf199h3fF81IJQQNOwV+lPoo7dD2FOVSdk4XGG7eIWdvVmcE
gE7oMS/U7dAayV1ydVVRr3f+ZSf4Tv75eUi0yze8/LwQPZfnFEhzJwDsWkYPd1Yh
LkN+kLfZVX3FAzHmxqnchisrj5k=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:37:34 2026 by rpki-client