Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32382e302f32342d3234203d3e2037303239.roa
File:                     3136322e3231372e32382e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          dWEpIHc5gv6tRbJgN+n+5tlh5UMlF3C+3GxZYJTUeGc=
Subject key identifier:   F8:69:DC:98:67:78:EA:EA:B1:BE:65:00:60:2A:0F:9A:D9:2A:B2:99
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       5F6238A2AD6DEB7852780C2D41ADF6CEB149091F
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32382e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 13 Aug 2026 07:36:19 +0000
ROA not before:           Thu 13 Aug 2026 07:31:19 +0000
ROA not after:            Thu 12 Aug 2027 07:36:19 +0000
asID:                     7029
IP address blocks:        162.217.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 16:12:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:62:38:a2:ad:6d:eb:78:52:78:0c:2d:41:ad:f6:ce:b1:49:09:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Aug 13 07:31:19 2026 GMT
            Not After : Aug 12 07:36:19 2027 GMT
        Subject: CN=F869DC986778EAEAB1BE6500602A0F9AD92AB299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:52:47:10:b4:b5:33:d2:84:63:5e:78:f5:97:
                    8a:a0:d6:21:bc:00:08:0c:72:d7:67:f1:af:9f:0c:
                    8a:1c:16:b9:8e:41:4b:0a:2f:c8:b5:45:d5:a7:5e:
                    7e:d2:d6:44:82:a7:96:9f:35:a2:28:0d:96:df:01:
                    d1:75:53:eb:e6:cb:d4:1f:f6:ef:4a:1a:f8:14:cd:
                    cb:2f:11:f4:f5:cf:2d:17:68:81:5c:ac:4b:42:0e:
                    99:0e:84:28:aa:d2:a5:bb:6d:16:8e:d0:10:4c:b1:
                    fe:53:25:1d:3c:42:a2:93:89:a9:6d:69:8e:d3:a8:
                    0c:19:78:33:63:be:cb:80:42:07:ba:0b:53:f8:56:
                    5a:36:4b:10:8a:b2:f3:21:b7:78:82:da:40:f6:ac:
                    17:61:19:33:c8:b4:87:b1:5f:f9:80:e1:bb:63:af:
                    ce:75:6c:d0:0c:36:38:29:55:20:a1:dd:a5:0a:49:
                    16:dd:56:dd:bf:91:8f:2d:63:0c:4f:2f:66:5d:04:
                    18:c0:3a:8c:3b:d7:af:b6:30:de:21:76:58:7a:9f:
                    f7:aa:fd:f1:40:9c:dd:37:d9:a6:a6:f8:64:c7:e0:
                    a2:6e:64:9b:8e:44:b4:8f:11:4d:39:bf:0b:76:fc:
                    d3:59:6f:8a:8d:9c:ac:4b:9e:b9:e2:a7:c1:b4:dc:
                    73:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:69:DC:98:67:78:EA:EA:B1:BE:65:00:60:2A:0F:9A:D9:2A:B2:99
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32382e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:02:d4:8a:4f:e6:23:60:63:31:4c:68:b4:5b:80:de:df:f3:
         68:80:0b:89:bc:1f:11:46:1f:e4:2f:02:5e:81:40:d6:2e:c8:
         18:c2:af:3e:aa:26:7b:cd:24:36:25:47:43:71:7b:da:2c:ca:
         25:f0:f1:57:5b:44:33:1e:5a:a4:68:e1:bc:94:0c:22:46:9a:
         f7:8a:30:a8:46:97:a0:81:67:cb:0d:4f:bc:b7:d2:0e:fd:b4:
         ed:79:2c:9f:a9:02:c2:c1:5a:39:5c:95:60:75:6f:15:28:07:
         d3:d2:a5:52:6a:96:9a:3d:f2:c2:99:51:93:22:7a:f6:62:a3:
         64:8c:7a:8e:1d:f6:c5:b8:3c:d2:d0:19:de:dc:8a:c5:4e:02:
         52:18:66:0d:50:24:13:a6:0b:c5:c1:88:e7:8a:94:d0:35:e6:
         9e:d7:09:3f:60:a3:db:a9:66:6b:b1:62:35:5f:86:f0:8f:f5:
         a0:af:7b:c2:8a:87:6b:f4:5e:3f:40:e8:51:cc:f5:ef:87:14:
         e6:99:8c:90:0c:69:1a:86:38:06:67:4a:af:5c:66:52:7d:01:
         cd:f2:29:48:f3:9a:57:d7:c7:3b:8b:b9:ed:23:f5:39:b0:0b:
         b9:b9:ed:f2:5b:47:7d:2a:3f:c4:17:2a:bd:d6:d6:f3:03:43:
         12:aa:e6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 06:13:51 2026 by rpki-client