Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136372e302f32342d3234203d3e203239383032.roa
File:                     3231362e3135312e3136372e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          dc0us2hsdUNxOB/VaR9oJDM+W7eUfjLSJF1xJownG4s=
Subject key identifier:   F9:40:4A:BD:1B:6A:A7:0D:C4:E5:CA:69:E5:0B:E1:8D:16:24:F3:B0
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       1008810E6AFDB8C9CF57EDFB34083E862AED89A6
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136372e302f32342d3234203d3e203239383032.roa
Signing time:             Thu 11 Jun 2026 07:36:05 +0000
ROA not before:           Thu 11 Jun 2026 07:31:05 +0000
ROA not after:            Thu 10 Jun 2027 07:36:05 +0000
asID:                     29802
IP address blocks:        216.151.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:40:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:08:81:0e:6a:fd:b8:c9:cf:57:ed:fb:34:08:3e:86:2a:ed:89:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jun 11 07:31:05 2026 GMT
            Not After : Jun 10 07:36:05 2027 GMT
        Subject: CN=F9404ABD1B6AA70DC4E5CA69E50BE18D1624F3B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c9:76:72:b6:3c:50:76:29:ee:3e:3e:08:af:
                    31:39:1a:df:64:44:19:1e:81:ec:b3:c7:db:00:58:
                    4c:c9:3a:29:81:b7:27:a8:9b:28:ae:5e:cc:20:b6:
                    54:c4:70:c8:74:25:1f:1b:b3:eb:9e:c7:88:18:48:
                    d4:ef:ed:e6:c8:54:37:37:a4:dc:79:35:ec:93:9e:
                    ff:9c:de:cd:4a:81:36:36:bd:7b:04:10:6a:5b:1e:
                    b0:61:3c:74:f6:7e:eb:71:31:2f:40:19:98:9b:76:
                    bc:d6:a2:0d:5c:68:e5:66:23:15:be:c0:b3:11:44:
                    b9:9f:81:1d:21:9f:01:f2:33:5f:33:a3:e9:08:9f:
                    17:84:76:ae:d1:d4:8a:a2:31:73:24:12:ae:4e:cc:
                    ae:75:31:8a:57:fb:4e:cd:1a:0d:aa:72:9c:19:3a:
                    41:f5:2d:e9:00:db:2e:8d:29:0a:40:e8:3a:c1:00:
                    43:a3:79:c1:ca:1c:b3:44:61:77:ba:8a:c7:ab:81:
                    90:3e:d9:0c:0b:c1:e8:5d:5b:43:05:ca:c1:6d:ef:
                    0b:f8:a4:62:1c:2a:7f:de:ec:a6:1c:91:d7:68:f0:
                    60:bd:5a:e6:e5:e6:e1:cb:5f:f3:c4:d6:fa:d3:a6:
                    0e:eb:70:f9:31:16:8a:c9:23:83:b5:0c:b7:74:99:
                    a0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:40:4A:BD:1B:6A:A7:0D:C4:E5:CA:69:E5:0B:E1:8D:16:24:F3:B0
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136372e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:dc:a2:87:31:4a:e1:1f:d2:e6:6c:59:4a:1a:ff:02:ce:d4:
         9a:61:95:f3:a0:4e:8c:67:0f:47:ab:cc:53:a8:fb:5c:55:37:
         f6:32:5d:05:8b:49:34:44:a1:83:3d:50:2a:15:8c:60:d7:7e:
         d5:d8:e4:7b:1c:df:50:22:d8:33:22:66:aa:60:79:f1:b4:96:
         10:5b:b9:ec:13:91:00:f7:46:d0:d5:9f:8d:d2:e7:ae:af:6b:
         74:7c:67:88:fc:f6:fa:66:ca:3b:c1:4b:c0:8a:39:b8:db:71:
         12:69:fe:c0:7b:72:01:fd:6e:ee:ec:5b:4a:e4:61:b8:31:df:
         1f:d3:05:27:7a:d0:b7:8d:5d:d5:67:c8:60:b9:05:34:cd:48:
         8a:70:8d:bb:cb:42:bc:4a:38:ae:b8:02:7e:a6:79:3e:e1:a6:
         d8:51:8d:e4:fe:b0:38:a5:b7:14:4d:3d:83:b9:7e:9c:15:2c:
         9d:84:14:69:a2:73:ac:8b:2d:a8:74:79:57:98:b4:24:bc:00:
         53:97:57:e7:8e:0e:67:20:a0:86:0c:6f:13:27:d5:e9:c4:ae:
         97:ae:c5:62:d9:9e:f4:d7:d5:af:9e:df:cf:09:6f:2b:ea:11:
         a8:6b:3f:d7:ea:8e:a8:2f:9d:a0:0a:02:a4:dd:0a:a7:c7:64:
         71:d5:68:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:09:55 2026 by rpki-client