Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e20343031383139.roa
File:                     3230352e3233332e3135352e302f32342d3234203d3e20343031383139.roa (raw, json)
Hash identifier:          O+6xmOkurvw79FqBzfaZWb9/q3PDfHO4SvX9mUhp6Y4=
Subject key identifier:   AB:B7:33:4F:41:16:02:05:F8:AF:53:85:85:22:99:D2:52:28:BF:B4
Certificate issuer:       /CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
Certificate serial:       2F598E7A888124D7FF929131BB4A9DE0705AB78A
Authority key identifier: 5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e20343031383139.roa
Signing time:             Thu 26 Feb 2026 09:23:19 +0000
ROA not before:           Thu 26 Feb 2026 09:18:19 +0000
ROA not after:            Thu 25 Feb 2027 09:23:19 +0000
asID:                     401819
IP address blocks:        205.233.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 09:45:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:59:8e:7a:88:81:24:d7:ff:92:91:31:bb:4a:9d:e0:70:5a:b7:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
        Validity
            Not Before: Feb 26 09:18:19 2026 GMT
            Not After : Feb 25 09:23:19 2027 GMT
        Subject: CN=ABB7334F41160205F8AF5385852299D25228BFB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5a:50:3f:ae:fd:a3:d6:d9:e6:32:a4:ee:1b:
                    03:fa:38:d5:9c:fd:32:25:69:8c:48:d8:0f:33:b6:
                    f1:f0:97:b3:32:1e:89:6a:81:53:8c:19:db:e8:73:
                    84:92:1b:69:d9:0f:db:24:43:cf:1f:1c:72:ac:a7:
                    10:1d:a3:5b:99:ec:23:d8:7b:9b:bf:0a:cc:6f:ab:
                    24:99:9d:08:cc:e5:61:06:2b:67:a4:a9:45:86:a5:
                    84:e3:b0:cd:f3:0c:d3:8b:d4:ea:1b:71:de:6b:e7:
                    eb:61:c7:77:1d:9a:97:18:9e:33:20:f9:f9:4b:87:
                    15:98:b7:ac:3c:6a:8c:7d:d1:d3:26:30:7e:bf:0f:
                    91:03:1e:90:4e:d3:a1:48:fc:b9:be:12:05:ac:d1:
                    01:b8:e2:fc:28:01:7b:28:a2:3c:bf:4e:97:a2:a7:
                    4e:0e:2c:1d:6a:b8:19:13:e0:e5:4b:1b:bd:1a:ee:
                    18:2f:da:d4:fb:c5:7b:c5:40:92:1c:45:e6:f5:4d:
                    85:24:8e:a5:f2:7a:23:30:9b:b0:46:32:3c:cf:e7:
                    25:2d:87:71:fa:9c:f6:9c:59:05:5a:cf:46:25:49:
                    71:13:3e:74:ff:21:5b:ef:5d:e0:0d:dc:cd:e3:65:
                    d9:66:e2:0c:59:17:3e:7f:c6:c5:88:b3:21:f4:c8:
                    0e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B7:33:4F:41:16:02:05:F8:AF:53:85:85:22:99:D2:52:28:BF:B4
            X509v3 Authority Key Identifier:
                keyid:5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e20343031383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:c6:99:a5:b2:4e:15:44:cc:c0:44:39:0e:d9:1c:f3:1e:25:
         9b:d4:59:95:91:c0:84:74:0a:1e:29:41:00:e8:05:a5:07:57:
         d8:c3:58:04:06:ce:da:47:e5:df:ed:77:df:55:af:a3:2a:41:
         1e:11:96:63:4d:9e:13:b9:58:f3:5e:d2:80:61:14:58:c8:cd:
         06:ee:3f:03:ec:de:42:eb:36:a8:14:e6:9a:71:6c:20:f7:fe:
         74:08:3c:5e:46:5d:ad:c3:96:f1:38:be:6e:17:93:23:61:59:
         bb:c8:81:a7:fd:e9:ea:6b:62:97:c0:6f:0b:3c:be:d2:67:2a:
         63:f1:c7:3d:0d:4b:4b:29:1d:a1:d9:af:4c:55:e6:10:f4:6b:
         96:13:d6:4d:a3:5d:58:83:e4:36:ee:a5:5b:0d:be:8e:a4:17:
         02:0a:33:01:ad:87:c9:f4:d2:b4:fc:af:34:13:4c:cb:24:b8:
         f8:7e:ee:a8:80:e2:5d:35:37:83:61:58:b8:01:51:78:b3:a0:
         06:72:6d:78:3a:2a:11:0f:af:f2:ce:32:ea:84:88:c6:0a:e2:
         58:88:ab:83:50:1c:49:fc:5b:3f:93:1b:24:b2:31:5f:f7:46:
         52:0d:22:bc:a6:65:89:99:ee:b8:fc:90:19:aa:cb:b6:97:77:
         6e:fa:80:64
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUL1mOeoiBJNf/kpExu0qd4HBat4owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTdhOGIxNzg0YjQxMDI5OGUzNzhmODE3OTNkMWY5YmMw
ZTk4MDQwMTNlYzRjNDg4NWEwHhcNMjYwMjI2MDkxODE5WhcNMjcwMjI1MDkyMzE5
WjAzMTEwLwYDVQQDEyhBQkI3MzM0RjQxMTYwMjA1RjhBRjUzODU4NTIyOTlEMjUy
MjhCRkI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlpQP679o9bZ
5jKk7hsD+jjVnP0yJWmMSNgPM7bx8JezMh6JaoFTjBnb6HOEkhtp2Q/bJEPPHxxy
rKcQHaNbmewj2HubvwrMb6skmZ0IzOVhBitnpKlFhqWE47DN8wzTi9TqG3Hea+fr
Ycd3HZqXGJ4zIPn5S4cVmLesPGqMfdHTJjB+vw+RAx6QTtOhSPy5vhIFrNEBuOL8
KAF7KKI8v06XoqdODiwdargZE+DlSxu9Gu4YL9rU+8V7xUCSHEXm9U2FJI6l8noj
MJuwRjI8z+clLYdx+pz2nFkFWs9GJUlxEz50/yFb713gDdzN42XZZuIMWRc+f8bF
iLMh9MgObwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFKu3M09BFgIF+K9ThYUimdJS
KL+0MB8GA1UdIwQYMBaAFFonSRE83l1sMalXgbneJac3Rk8UMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiY2QyNzAyMjcxZDA1LzAv
NUEyNzQ5MTEzQ0RFNUQ2QzMxQTk1NzgxQjlERTI1QTczNzQ2NEYxNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3LzRhYWU4MjgyLTFjYWQtNDA3My05ZDRhLWU5NDg0MDE0OTE5ZS8xN2E4
YjE3ODRiNDEwMjk4ZTM3OGY4MTc5M2QxZjliYzBlOTgwNDAxM2VjNGM0ODg1YS5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmNk
MjcwMjI3MWQwNS8wLzMyMzAzNTJlMzIzMzMzMmUzMTM1MzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDMwMzEzODMxMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADN6ZswDQYJKoZIhvcN
AQELBQADggEBAGjGmaWyThVEzMBEOQ7ZHPMeJZvUWZWRwIR0Ch4pQQDoBaUHV9jD
WAQGztpH5d/td99Vr6MqQR4RlmNNnhO5WPNe0oBhFFjIzQbuPwPs3kLrNqgU5ppx
bCD3/nQIPF5GXa3DlvE4vm4XkyNhWbvIgaf96eprYpfAbws8vtJnKmPxxz0NS0sp
HaHZr0xV5hD0a5YT1k2jXViD5DbupVsNvo6kFwIKMwGth8n00rT8rzQTTMskuPh+
7qiA4l01N4NhWLgBUXizoAZybXg6KhEPr/LOMuqEiMYK4liIq4NQHEn8Wz+TGySy
MV/3RlINIrymZYmZ7rj8kBmqy7aXd276gGQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:58:44 2026 by rpki-client