Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa
File:                     3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          N8pQA0DLN+nYaT5rR3miSy1lf+25aoWipTVaLcqWcsY=
Subject key identifier:   74:BA:B8:66:25:85:82:BA:D8:03:BF:0C:BE:5D:32:19:9B:DF:1D:A4
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       269F1A38F4B27B050340CA64ADBA990D317A2D6A
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 13 Jun 2026 06:36:08 +0000
ROA not before:           Sat 13 Jun 2026 06:31:08 +0000
ROA not after:            Sat 12 Jun 2027 06:36:08 +0000
asID:                     17139
IP address blocks:        173.247.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9f:1a:38:f4:b2:7b:05:03:40:ca:64:ad:ba:99:0d:31:7a:2d:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 13 06:31:08 2026 GMT
            Not After : Jun 12 06:36:08 2027 GMT
        Subject: CN=74BAB866258582BAD803BF0CBE5D32199BDF1DA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:da:59:e2:54:4b:5a:93:3a:09:6a:28:a7:77:
                    a5:93:10:05:6e:62:fe:cc:74:77:5a:6e:97:04:99:
                    11:b0:f1:1f:b9:d9:88:fd:86:b3:87:84:30:96:35:
                    e9:ad:e7:49:dd:40:0a:25:9c:9e:68:3e:36:bc:4c:
                    21:94:f5:c8:91:49:db:49:e5:5f:9b:e8:1d:01:3f:
                    77:fd:14:bf:60:3a:0f:99:05:47:59:f3:6b:a4:65:
                    3d:87:09:db:3d:e0:d7:10:71:7a:9c:7a:e2:b3:c9:
                    60:b3:f0:a2:d3:02:ce:dc:5c:db:85:71:9f:6e:5d:
                    5d:b5:0d:25:04:39:d7:9e:c8:ea:6e:a2:cf:f9:f3:
                    9b:9e:c7:67:1e:89:5b:e9:5c:c6:7b:36:ec:be:fd:
                    bd:6f:88:ec:f4:9b:7c:66:49:51:03:89:9b:e2:f1:
                    0a:12:a8:ff:81:f4:48:9d:97:4d:2d:9d:b9:78:04:
                    2b:dc:3f:10:17:10:49:93:9b:04:74:74:89:ee:94:
                    95:89:e1:30:1f:27:91:e6:17:4f:9a:fa:9c:22:ed:
                    03:ce:a0:0d:25:b6:d5:0e:c1:4d:4e:0e:01:c6:9c:
                    69:d8:38:75:68:22:03:49:57:b6:40:d5:f0:fa:9a:
                    81:9a:76:17:1b:3c:b4:2e:46:f7:f2:d8:2d:fe:b1:
                    90:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:BA:B8:66:25:85:82:BA:D8:03:BF:0C:BE:5D:32:19:9B:DF:1D:A4
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3233322e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:cf:d4:44:d4:4c:92:5c:d2:9e:27:1c:43:43:d9:8f:70:d6:
         ed:3c:19:a2:3a:80:9d:97:46:d4:12:48:eb:92:be:4d:20:12:
         1f:d3:a9:73:26:88:9f:94:a1:03:4e:64:c0:24:37:27:b4:49:
         93:6c:75:3d:5e:c3:d5:d8:0b:dd:8c:9b:3c:92:a3:19:30:7d:
         e0:fa:b9:68:6f:15:d5:9d:eb:c4:53:e7:15:15:11:ea:cf:b9:
         e6:13:c7:95:de:7b:c1:2c:58:0a:85:83:18:b4:d0:d1:6e:25:
         ab:f5:54:21:d7:15:cd:ec:74:d8:61:d0:af:5b:ed:10:b4:8d:
         9d:15:b2:11:6e:b7:94:1a:03:85:70:bc:5a:d4:d2:9b:e7:0d:
         74:8d:2e:5d:f0:4d:e8:2d:31:e1:e5:0c:dd:b3:db:0c:9b:9f:
         16:bc:29:bd:4b:45:a0:05:5a:a3:79:c1:08:87:a2:df:fe:91:
         01:6d:ae:28:c7:da:a0:b2:2f:b9:80:d1:42:01:a1:f1:f5:80:
         eb:68:e0:38:a7:9b:dc:cb:53:f8:02:04:6b:88:0a:59:0c:5a:
         f9:fc:e9:5e:75:3a:4d:f2:b7:6d:04:e8:23:5d:03:9b:07:2b:
         14:78:73:7e:25:e2:4b:ad:b1:97:e5:38:69:08:1e:34:71:3c:
         32:14:9e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:12:12 2026 by rpki-client