Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20383334.roa
File:                     3230342e31342e37362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          OYLcAYONSpXirCdhjxCLBrc+lYR4RT7jcJJDn9BhcHI=
Subject key identifier:   D0:36:AA:E6:87:55:7C:CA:DE:D5:0E:7A:D4:31:0E:EF:AA:1F:A2:9F
Certificate issuer:       /CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
Certificate serial:       46441339F13904BE5157EF2E0C571496445C4F38
Authority key identifier: DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20383334.roa
Signing time:             Fri 28 Aug 2026 00:02:53 +0000
ROA not before:           Thu 27 Aug 2026 23:57:53 +0000
ROA not after:            Fri 27 Aug 2027 00:02:53 +0000
asID:                     834
IP address blocks:        204.14.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/081bd66e-b1d1-405a-8a32-c830ec790ce5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:16:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:44:13:39:f1:39:04:be:51:57:ef:2e:0c:57:14:96:44:5c:4f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3
        Validity
            Not Before: Aug 27 23:57:53 2026 GMT
            Not After : Aug 27 00:02:53 2027 GMT
        Subject: CN=D036AAE687557CCADED50E7AD4310EEFAA1FA29F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e2:04:d6:1e:b2:31:61:e7:71:30:63:a0:6b:
                    69:5e:51:64:4c:07:f5:a2:d5:d7:48:e3:9d:67:64:
                    83:d4:dd:47:ba:a8:31:d9:09:d0:31:fc:f9:54:07:
                    07:86:d7:02:f9:19:cc:3c:58:3f:de:fe:7c:92:ed:
                    e1:22:e6:06:88:7c:f2:08:20:ea:0b:db:64:00:ff:
                    2b:53:a9:d0:45:5c:60:9c:5c:e2:e4:14:8d:6b:82:
                    00:67:8e:ea:e8:58:1b:b2:da:71:a5:79:b8:0c:82:
                    04:fb:b4:76:c9:e2:ba:60:e9:82:41:fa:59:54:b9:
                    d6:6d:32:fa:ad:7b:7f:22:7c:de:d1:00:9b:b5:00:
                    c9:96:02:4a:84:9a:06:92:9f:ac:45:a8:d7:96:a9:
                    ac:ee:77:19:a8:15:07:13:27:56:8c:4c:41:a9:57:
                    f3:63:78:52:3c:96:d8:66:94:e3:eb:7f:83:8b:29:
                    31:12:7a:fb:e9:95:85:87:90:6b:1d:47:8e:5a:4a:
                    0a:71:66:03:66:cd:0d:8c:8d:53:ba:5e:43:d4:64:
                    d3:0c:b2:0a:16:61:b4:15:e4:54:8f:b1:ad:21:1d:
                    18:4e:5f:cb:f7:96:44:f1:c8:02:00:87:35:e3:52:
                    89:2e:f7:a3:e9:79:7b:46:6b:71:eb:25:64:d0:0c:
                    6e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:36:AA:E6:87:55:7C:CA:DE:D5:0E:7A:D4:31:0E:EF:AA:1F:A2:9F
            X509v3 Authority Key Identifier:
                keyid:DF:4E:46:83:A0:C8:76:F6:8A:72:BD:DF:AA:05:88:30:93:56:C3:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/DF4E4683A0C876F68A72BDDFAA0588309356C3D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/081bd66e-b1d1-405a-8a32-c830ec790ce5/9c94a1c4191d6eeaf7e77336a5edbc05cb99ac63c7835a8bc3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bb2dab7cc0a91/0/3230342e31342e37362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.14.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:02:1d:b5:e3:f0:b6:20:91:eb:11:f9:75:d2:b1:95:05:56:
         bf:6e:42:e6:a7:6b:57:4f:85:ff:27:cf:25:0d:f1:f0:bd:d6:
         9b:b2:e5:21:c6:3e:79:ce:49:64:19:cb:48:0e:d8:dc:9b:44:
         36:64:b8:1b:54:33:ee:be:00:1e:fc:45:61:2e:90:4d:04:c0:
         f2:c2:b0:83:d4:42:41:45:5f:64:62:1e:66:42:ce:aa:35:eb:
         c7:59:20:6e:53:6a:90:c3:f7:96:20:c2:dc:21:74:ef:f6:63:
         7b:27:7d:f8:65:e3:02:03:8a:62:73:9c:de:3b:2c:bd:21:fd:
         ad:9c:36:08:8f:1a:92:35:b2:c7:d6:bf:69:4d:d2:35:35:7e:
         3c:f7:d7:25:bd:c1:83:b6:9b:9b:5e:14:c8:d1:00:3e:a0:bb:
         53:e6:5f:e5:98:0a:63:46:66:69:2a:89:00:ba:4f:93:2f:61:
         e6:60:cd:7d:48:90:af:a4:f8:a7:f9:2c:35:b1:1c:a1:48:5e:
         bb:e6:3f:de:d7:2f:57:d9:62:1f:9a:98:57:17:26:06:8d:37:
         26:df:fc:ee:c5:dc:70:7f:9a:b2:97:05:22:fe:0a:32:b1:7e:
         8e:64:71:82:44:95:d5:8b:20:8f:dd:1e:78:e6:27:0e:2c:96:
         1b:16:a1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:23:07 2026 by rpki-client