Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e312e302f32342d3234203d3e203137313339.roa
File:                     36362e3131372e312e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          Iv17rdxBTt0WLGje6JoUixX9pvzrm1PjQKTNZL7QDJQ=
Subject key identifier:   65:48:2F:A4:B7:20:9F:4A:9D:FA:F9:90:FC:8A:E6:3E:2B:16:88:9B
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       57ACB76FD0772A3F44BAD146C1F7C1EC56B997F7
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e312e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 13 Jun 2026 06:36:07 +0000
ROA not before:           Sat 13 Jun 2026 06:31:07 +0000
ROA not after:            Sat 12 Jun 2027 06:36:07 +0000
asID:                     17139
IP address blocks:        66.117.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:ac:b7:6f:d0:77:2a:3f:44:ba:d1:46:c1:f7:c1:ec:56:b9:97:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 13 06:31:07 2026 GMT
            Not After : Jun 12 06:36:07 2027 GMT
        Subject: CN=65482FA4B7209F4A9DFAF990FC8AE63E2B16889B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1c:46:2f:bf:a6:d1:93:ce:83:76:ad:b6:39:
                    de:eb:dd:2f:28:14:45:9f:4c:6f:a7:3c:20:0e:95:
                    db:37:33:92:b5:7c:2d:e3:ce:cc:ee:1d:a7:5b:59:
                    c4:66:9f:e2:32:28:e0:36:b8:da:1f:38:01:7c:59:
                    64:83:05:bb:70:39:f6:68:54:ef:54:ad:d6:0f:9b:
                    fc:00:8c:a6:c8:39:ef:7f:49:fa:bb:2b:2f:52:d9:
                    7d:28:a8:7a:fb:46:54:e8:5d:96:89:f3:bf:f6:18:
                    db:d0:ad:54:33:2f:46:94:bd:49:0e:e0:c3:a8:45:
                    8c:0c:73:3d:fb:a2:d6:69:be:1e:5e:bd:ec:fc:75:
                    7c:be:52:36:7e:b1:b9:c2:74:be:a7:38:3d:1d:a8:
                    83:79:06:f0:1c:02:9b:18:24:76:14:2f:fd:67:9d:
                    8f:00:7a:8f:42:5e:86:a5:40:47:83:2a:8a:aa:b2:
                    28:8f:75:8b:a3:93:2e:54:cd:99:c8:98:7d:a5:a4:
                    95:a5:6b:a8:36:ab:a9:72:61:ac:16:9e:93:17:0b:
                    18:e3:4e:ca:a7:3b:51:57:a0:21:04:a6:02:e3:f3:
                    8f:cf:31:08:d6:22:d9:d2:a7:e8:28:4a:48:8e:9e:
                    9c:c4:2c:ea:60:30:b9:dc:dc:e7:93:28:eb:42:b4:
                    ef:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:48:2F:A4:B7:20:9F:4A:9D:FA:F9:90:FC:8A:E6:3E:2B:16:88:9B
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e312e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:9e:d4:84:a5:11:4f:0f:0e:28:91:76:be:c8:1d:d6:35:7a:
         3e:13:e8:35:14:ba:e4:ce:27:e1:c9:87:ea:2a:f9:44:c0:c7:
         d5:ef:78:b1:66:9f:15:bb:ae:3e:e5:e6:01:d3:76:35:87:bc:
         77:7b:8c:1c:39:25:2e:1a:1d:7e:0e:0c:00:9b:20:a9:49:b8:
         3f:b3:6c:9d:fb:20:23:9e:6d:94:70:ae:73:dd:e6:bf:f2:37:
         03:bc:a5:f7:ce:cd:78:d9:77:a6:f4:4d:e2:20:e6:6e:e9:85:
         c7:17:ad:c2:56:4c:99:59:b8:95:7e:a1:13:f8:87:99:ee:27:
         1a:2a:a0:ee:72:7a:ca:60:40:d7:53:53:1c:ea:5c:df:3b:8e:
         54:45:fc:75:c8:26:7c:cb:e5:44:10:d3:20:b9:bd:1b:3c:a8:
         0c:8f:c0:19:4a:30:94:12:af:9d:1a:1c:14:73:da:f2:f3:4e:
         a9:91:ae:c2:80:aa:ee:fa:97:9a:8e:a5:1f:13:71:8d:c1:7a:
         ee:62:4a:2d:cf:23:04:3d:a9:67:75:18:4f:3f:d6:dd:4d:c7:
         15:31:34:19:76:2a:42:cc:3d:04:16:d8:d5:f8:55:22:4f:7b:
         ee:b3:91:c9:b8:aa:41:15:91:2a:a9:b0:4b:64:89:13:8e:5b:
         e8:98:16:7d
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUV6y3b9B3Kj9EutFGwffB7Fa5l/cwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZmI1YWIxY2IzMGVmMzM4YTcyZDU5MzUyYjEzN2JhMDA2
Y2M1NTkxMGIxNzMwYTUxODEwHhcNMjYwNjEzMDYzMTA3WhcNMjcwNjEyMDYzNjA3
WjAzMTEwLwYDVQQDEyg2NTQ4MkZBNEI3MjA5RjRBOURGQUY5OTBGQzhBRTYzRTJC
MTY4ODlCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hxGL7+m0ZPO
g3attjne690vKBRFn0xvpzwgDpXbNzOStXwt487M7h2nW1nEZp/iMijgNrjaHzgB
fFlkgwW7cDn2aFTvVK3WD5v8AIymyDnvf0n6uysvUtl9KKh6+0ZU6F2WifO/9hjb
0K1UMy9GlL1JDuDDqEWMDHM9+6LWab4eXr3s/HV8vlI2frG5wnS+pzg9HaiDeQbw
HAKbGCR2FC/9Z52PAHqPQl6GpUBHgyqKqrIoj3WLo5MuVM2ZyJh9paSVpWuoNqup
cmGsFp6TFwsY407KpztRV6AhBKYC4/OPzzEI1iLZ0qfoKEpIjp6cxCzqYDC53Nzn
kyjrQrTvDwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGVIL6S3IJ9Knfr5kPyK5j4r
FoibMB8GA1UdIwQYMBaAFNoSx6AMCgAwgQhlHtVvIB0it77ZMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUxMzZlMjkxODRhLzAv
REExMkM3QTAwQzBBMDAzMDgxMDg2NTFFRDU2RjIwMUQyMkI3QkVEOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1LzI5M2ZiMTViLTVhODUtNGFiZS1iZDI0LTIzMmExMTRhZTQ5MC9mYjVh
YjFjYjMwZWYzMzhhNzJkNTkzNTJiMTM3YmEwMDZjYzU1OTEwYjE3MzBhNTE4MS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGYwYjgwNmMwMThmYTUx
MzZlMjkxODRhLzAvMzYzNjJlMzEzMTM3MmUzMTJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMxMzczMTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABCdQEwDQYJKoZIhvcNAQELBQADggEB
ABGe1ISlEU8PDiiRdr7IHdY1ej4T6DUUuuTOJ+HJh+oq+UTAx9XveLFmnxW7rj7l
5gHTdjWHvHd7jBw5JS4aHX4ODACbIKlJuD+zbJ37ICOebZRwrnPd5r/yNwO8pffO
zXjZd6b0TeIg5m7phccXrcJWTJlZuJV+oRP4h5nuJxoqoO5yespgQNdTUxzqXN87
jlRF/HXIJnzL5UQQ0yC5vRs8qAyPwBlKMJQSr50aHBRz2vLzTqmRrsKAqu76l5qO
pR8TcY3Beu5iSi3PIwQ9qWd1GE8/1t1NxxUxNBl2KkLMPQQW2NX4VSJPe+6zkcm4
qkEVkSqpsEtkiROOW+iYFn0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:37:50 2026 by rpki-client