Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa
File:                     3136322e3231372e33302e302f32342d3234203d3e203139303339.roa (raw, json)
Hash identifier:          eEKI887aBYL4T0vafrRbVy9wu7+T9lX5q/Yq86CbCOg=
Subject key identifier:   75:53:A0:14:F2:DD:88:45:3A:F0:64:C5:9A:B8:67:7E:7C:AE:C2:B7
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       31279C9E29B411B72324A97123AFE2DF57B030F8
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa
Signing time:             Thu 13 Aug 2026 07:36:20 +0000
ROA not before:           Thu 13 Aug 2026 07:31:20 +0000
ROA not after:            Thu 12 Aug 2027 07:36:20 +0000
asID:                     19039
IP address blocks:        162.217.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:27:9c:9e:29:b4:11:b7:23:24:a9:71:23:af:e2:df:57:b0:30:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Aug 13 07:31:20 2026 GMT
            Not After : Aug 12 07:36:20 2027 GMT
        Subject: CN=7553A014F2DD88453AF064C59AB8677E7CAEC2B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ae:40:a6:57:f4:9f:8f:e0:21:0a:74:4d:44:
                    ee:d3:45:6a:76:79:e2:a5:a5:4d:db:32:c3:2b:2d:
                    c1:c1:2c:4b:20:37:13:78:74:a4:3b:0f:d6:d5:d0:
                    74:c5:05:a4:8d:ed:7e:99:ee:e6:86:b3:ee:fd:98:
                    6d:a3:b1:b3:a0:32:3a:4a:0f:1b:79:6e:de:45:90:
                    60:a6:e3:20:29:0b:2c:e3:da:c8:75:9a:c9:bf:7f:
                    d3:b3:12:47:45:7c:32:43:56:09:71:1d:fb:20:23:
                    f0:38:a4:c4:36:f5:dc:30:4f:53:c2:bf:0d:46:7d:
                    6d:46:92:25:f4:ef:3a:ee:e9:b6:5c:8a:eb:99:4c:
                    78:b9:2c:0b:72:c7:b6:2c:64:74:bf:c8:58:13:d7:
                    13:08:b1:ce:ef:a5:cf:2f:56:f4:2a:8b:89:f8:8e:
                    dd:62:db:9e:34:27:75:a7:68:79:93:28:ef:18:7d:
                    fe:31:f0:87:d8:d3:e4:10:ed:2d:3c:cf:50:d8:b1:
                    a1:43:7f:b9:bc:37:21:0f:bd:e0:ac:d7:41:f7:06:
                    0e:5d:43:82:df:1b:36:99:ab:0c:3a:2b:1b:10:0e:
                    3d:98:a2:cc:4e:3c:5d:df:b5:cc:f3:31:91:cc:b9:
                    b4:bd:71:88:33:6f:a4:17:22:55:c7:21:95:17:9b:
                    49:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:53:A0:14:F2:DD:88:45:3A:F0:64:C5:9A:B8:67:7E:7C:AE:C2:B7
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:8a:a9:49:a2:08:89:e8:59:1b:c1:3c:33:37:30:bf:b0:33:
         d1:92:3f:73:c5:65:00:b9:45:ab:c1:68:f0:2c:3f:c3:75:ea:
         b3:ea:9e:79:96:4e:6e:28:a8:8c:a2:8b:76:4c:2e:f4:94:54:
         b6:30:9e:48:c7:3f:2f:87:6b:f7:74:25:a3:2d:f2:a0:1a:53:
         7a:a8:cd:96:c1:7c:32:25:d1:be:6b:05:39:15:2a:c2:29:84:
         91:56:40:b5:eb:ae:09:f9:c0:00:32:85:1a:29:08:c3:0a:30:
         3e:2c:ce:5e:35:93:2a:98:82:7d:4f:5b:2f:96:89:2f:69:67:
         01:64:a8:93:3d:68:1f:58:d4:4e:ab:14:d6:45:46:e9:c4:e0:
         35:27:69:5e:7d:c7:d5:4e:20:9c:14:44:13:db:ff:be:82:48:
         63:9b:1e:0f:ad:54:8f:24:99:d6:f1:c2:aa:4d:c6:04:cf:93:
         29:45:5a:37:aa:62:d7:48:a2:75:b4:98:1f:76:8a:57:0a:d2:
         1b:a3:47:d6:a0:d6:4e:fb:c1:fd:38:12:62:be:59:4d:b2:14:
         df:31:21:00:dc:60:60:7f:11:6e:30:7b:bd:46:a1:7e:bc:4f:
         67:c6:5e:97:56:47:00:24:7b:7a:e4:af:d2:b0:6e:f0:8f:87:
         fa:c1:d6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:43:36 2026 by rpki-client