Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e322e302f32342d3234203d3e203137313339.roa
File:                     36362e3131372e322e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          T+Y+8KXPU88shk4a6xUn/HRkKvR/FQizSSRxEGLGV68=
Subject key identifier:   AE:A8:06:BE:C7:3C:EA:CA:9D:2C:E1:C0:23:AB:58:68:27:25:8C:4D
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       02EDFC0C0E3AACA7D34E7CE4A4AE1085C3C386D4
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e322e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 13 Jun 2026 06:36:08 +0000
ROA not before:           Sat 13 Jun 2026 06:31:08 +0000
ROA not after:            Sat 12 Jun 2027 06:36:08 +0000
asID:                     17139
IP address blocks:        66.117.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ed:fc:0c:0e:3a:ac:a7:d3:4e:7c:e4:a4:ae:10:85:c3:c3:86:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 13 06:31:08 2026 GMT
            Not After : Jun 12 06:36:08 2027 GMT
        Subject: CN=AEA806BEC73CEACA9D2CE1C023AB586827258C4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d6:73:9d:48:73:5a:6c:c4:d3:66:2a:1a:ba:
                    6f:f9:1a:67:d0:6a:aa:ad:cd:f9:d5:49:08:29:e4:
                    11:d7:49:1f:50:1b:8c:68:11:c3:18:0a:33:76:c6:
                    0b:b0:51:ca:5f:40:39:3e:cc:12:92:4b:c6:d6:85:
                    c1:64:23:06:11:8d:9e:73:28:a2:02:ff:04:f9:60:
                    69:3e:81:93:84:bc:d6:35:d2:95:03:df:c7:03:89:
                    6e:50:19:b6:ae:b0:cf:fb:83:94:d8:8c:62:3d:35:
                    d1:bb:15:e9:ca:e5:95:ea:29:a4:31:22:07:77:b6:
                    f4:6b:fe:e8:af:d2:cc:27:9e:32:87:7c:dd:41:48:
                    0e:37:b2:21:4b:30:6c:fe:da:ee:ef:d4:30:22:1b:
                    a0:a4:01:5a:f8:57:56:15:37:23:b4:4c:b0:be:0f:
                    e4:b0:49:8d:62:b2:7b:04:11:93:d0:d9:a4:0b:c3:
                    05:08:ad:4a:70:ea:a0:51:c6:33:54:81:58:c9:ba:
                    af:68:d3:06:29:ab:27:a0:89:62:4b:af:26:b6:d7:
                    94:9c:b4:87:b3:d9:01:7b:b2:a2:60:c2:88:a9:46:
                    60:da:5f:e3:0f:ac:7e:66:26:40:a0:9e:17:a0:0c:
                    1e:4e:23:1d:f3:85:26:e8:b5:67:52:3a:c5:b3:61:
                    5a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:A8:06:BE:C7:3C:EA:CA:9D:2C:E1:C0:23:AB:58:68:27:25:8C:4D
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/36362e3131372e322e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.117.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:6f:93:c4:67:29:ab:c9:cd:79:da:35:d2:f2:18:d8:b6:f7:
         e4:77:c6:da:15:3f:77:32:23:0e:07:a5:b4:b3:96:81:6a:98:
         86:7d:d0:f3:19:75:f4:f1:a5:69:21:7b:02:25:bf:82:bd:62:
         09:19:ce:29:ef:aa:60:8b:74:4d:68:a2:6d:b7:67:ff:e5:ca:
         dd:c5:5d:63:90:b6:64:a8:93:e7:20:4c:b2:bb:da:83:46:90:
         a6:46:59:05:8d:61:e6:0b:32:97:d8:07:a9:12:42:f9:ab:ad:
         2e:a8:a4:96:12:42:c5:e2:a9:66:d9:60:2e:52:aa:d6:97:96:
         52:71:74:23:44:83:5c:f3:8b:0f:2c:4d:ce:85:80:b0:3d:4c:
         b3:69:7e:0d:96:35:f3:1b:72:7f:da:e6:8f:d9:a0:48:da:ca:
         11:de:fa:94:7f:08:c9:d1:a1:e7:96:27:c5:8a:be:a0:2e:26:
         ad:52:8e:6c:61:59:fd:08:54:36:30:3e:8a:9a:a0:7b:06:0b:
         18:83:99:f0:d8:48:c1:a6:5d:d5:f6:e9:f9:58:95:6f:8c:54:
         74:8d:fe:43:f9:ce:0b:c1:b3:b3:b1:05:aa:e8:7e:bd:bc:20:
         ba:86:4e:03:93:de:0e:18:d6:3d:e2:90:e7:cb:dc:d0:5a:ea:
         ac:d2:38:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:33:46 2026 by rpki-client