Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20313532363732.roa
File:                     3230342e31342e37362e302f32342d3234203d3e20313532363732.roa (raw, json)
Hash identifier:          ToFzo0f4OVmectCUisyQ2guXWooAI6dlkLbg0P3CPK4=
Subject key identifier:   6F:D2:CF:5D:15:37:AF:E1:13:FF:A0:FB:95:F3:22:F9:9E:55:85:95
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       3DE1139C14B1D557DE79DAF0E152C618CB5E2DE2
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20313532363732.roa
Signing time:             Mon 01 Jun 2026 06:36:05 +0000
ROA not before:           Mon 01 Jun 2026 06:31:05 +0000
ROA not after:            Mon 31 May 2027 06:36:05 +0000
asID:                     152672
IP address blocks:        204.14.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 04:53:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:e1:13:9c:14:b1:d5:57:de:79:da:f0:e1:52:c6:18:cb:5e:2d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Jun  1 06:31:05 2026 GMT
            Not After : May 31 06:36:05 2027 GMT
        Subject: CN=6FD2CF5D1537AFE113FFA0FB95F322F99E558595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:08:36:2b:5f:6c:54:3a:2c:b1:07:ba:ef:8d:
                    9f:8f:09:9a:5f:30:a3:d8:ae:e8:60:3d:26:80:2a:
                    26:ad:53:8d:28:47:6e:f4:d0:f1:c2:ec:d5:66:a6:
                    bc:e4:fe:67:b3:66:b7:87:fc:e6:1c:00:44:03:c4:
                    31:1b:96:23:1b:45:ea:e4:57:e0:b1:54:02:04:30:
                    a1:ab:bc:a2:20:c2:db:43:05:d5:1b:e5:b2:4c:1d:
                    c4:bb:e3:77:7d:8b:ac:ce:2a:ad:15:b7:72:35:ff:
                    51:84:3e:20:ba:fe:3e:e9:e8:46:7d:09:4d:67:d6:
                    bc:ad:f6:2e:e5:18:c5:68:a1:08:2e:1b:7c:cb:11:
                    ba:e5:ab:6b:c0:20:90:98:2f:38:24:2f:84:7f:a7:
                    07:45:96:73:01:56:c0:e8:5f:b5:80:be:53:41:13:
                    aa:8f:bf:68:91:c7:5d:91:ba:79:c6:01:ed:a4:6d:
                    16:2b:76:c0:cc:36:82:cf:fa:bc:62:1f:a4:77:d9:
                    10:ac:81:69:a3:50:08:47:91:12:c9:23:69:c4:66:
                    33:e2:d2:4a:6d:e3:ec:c2:b9:a6:48:9f:8a:98:5f:
                    b9:bf:b4:c1:e4:bb:93:8e:d9:99:db:d6:12:a0:a7:
                    79:4c:22:dd:4f:7e:6b:e6:55:76:86:2f:17:5c:3d:
                    c5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D2:CF:5D:15:37:AF:E1:13:FF:A0:FB:95:F3:22:F9:9E:55:85:95
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20313532363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:6c:4a:d2:b0:24:ba:47:99:ed:08:20:cb:e9:b4:56:ac:bb:
         b7:68:8f:5d:12:d3:b2:ea:2e:a7:5e:cb:5b:e9:02:09:28:e1:
         fe:ad:59:b6:58:1a:49:cc:b4:56:11:da:64:ae:b3:ea:3c:3a:
         61:55:e2:ff:6b:bc:13:ec:06:bc:03:d7:4a:1f:a7:cd:48:36:
         d4:79:de:77:c7:68:16:a5:4b:58:32:c3:90:8e:60:7e:92:a3:
         9d:6e:11:dd:4a:6e:5e:da:28:f6:e2:b4:03:3f:40:c1:6c:5a:
         6c:0e:93:89:f8:c8:aa:91:16:61:94:d4:ea:d3:b9:d9:62:62:
         e6:1d:e1:09:21:47:ed:6a:aa:74:44:eb:43:32:aa:a8:1d:60:
         ca:b4:12:5f:93:56:38:1d:e8:65:6d:70:31:55:9a:5f:ee:45:
         2b:4b:f6:12:74:bf:4c:37:1f:4d:fb:b9:d2:c0:a0:45:c5:2a:
         4e:9f:6b:b4:a1:a7:9f:b8:5c:26:d6:bc:cf:d1:c0:ae:46:81:
         44:de:fd:81:b7:08:1f:4a:10:ba:7f:4c:f7:2e:3f:8c:9d:ab:
         a2:1d:6f:43:fa:67:ff:e9:63:88:f7:d3:f8:6b:b0:13:bf:78:
         2b:df:25:db:46:49:01:3b:a8:45:6f:af:39:76:cd:9b:04:7e:
         3b:1a:19:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:03:29 2026 by rpki-client