Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e203633313939.roa
File:                     3139322e3230382e31312e302f32342d3234203d3e203633313939.roa (raw, json)
Hash identifier:          CG3ZlJzysJF3aHnVkH9Oa4ilDZ7nvGh27t/j1CsVf98=
Subject key identifier:   C8:49:F2:52:20:17:DB:2C:E8:BB:A4:21:B4:F0:15:02:68:42:8C:27
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       566579261672E9EE54389C4EA9C7AE9F9098F375
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e203633313939.roa
Signing time:             Thu 05 Feb 2026 15:18:31 +0000
ROA not before:           Thu 05 Feb 2026 15:13:31 +0000
ROA not after:            Thu 04 Feb 2027 15:18:31 +0000
asID:                     63199
IP address blocks:        192.208.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 14:34:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:65:79:26:16:72:e9:ee:54:38:9c:4e:a9:c7:ae:9f:90:98:f3:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Feb  5 15:13:31 2026 GMT
            Not After : Feb  4 15:18:31 2027 GMT
        Subject: CN=C849F2522017DB2CE8BBA421B4F0150268428C27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:85:b5:8a:f8:35:57:e6:ac:53:bd:ca:2f:0e:
                    21:ce:63:c0:29:d7:f9:8c:dc:90:b4:0d:38:97:c1:
                    3f:97:28:9d:ee:61:14:9c:f3:5f:27:60:87:d9:fd:
                    9d:d9:e9:30:1b:e6:fd:9d:60:7b:ae:cf:9b:01:52:
                    41:f6:d9:3b:e0:b1:84:1d:b7:e9:83:ae:22:7a:fa:
                    65:45:40:9c:d8:0b:2f:fe:5c:cc:53:b9:7c:ba:a7:
                    26:30:cd:eb:1c:d3:83:14:56:ae:ba:42:a0:4b:e2:
                    0f:6b:9b:85:aa:b9:f9:83:00:03:e9:64:a6:5b:ea:
                    d6:9a:98:2b:c1:a3:f3:fb:65:08:d0:cb:ed:2f:49:
                    14:7b:0c:39:46:70:b3:47:37:8d:df:c4:d0:b7:80:
                    34:39:56:6b:a8:1b:43:5a:a7:de:bf:13:c2:bd:14:
                    1e:f5:23:50:36:38:64:48:74:7f:64:d3:37:08:aa:
                    41:17:59:5f:29:4c:8d:0e:98:22:84:3f:c6:9a:a6:
                    81:f5:83:80:8d:0b:21:6e:81:70:62:55:5b:2c:57:
                    2c:e5:72:5c:28:8a:aa:80:23:de:05:9e:1e:70:e8:
                    95:c2:bf:38:cc:cf:29:3f:65:92:da:89:6b:df:d6:
                    9f:3a:17:97:86:ac:0b:9d:9f:99:78:7d:3b:a8:95:
                    ef:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:49:F2:52:20:17:DB:2C:E8:BB:A4:21:B4:F0:15:02:68:42:8C:27
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e203633313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:82:31:41:e2:ad:d6:e9:f7:e3:80:93:6b:0e:7e:80:0d:fb:
         9c:1a:ad:41:f0:c8:ee:74:fe:67:ed:b8:c7:69:05:01:1b:a7:
         17:ab:71:30:14:b9:2b:a7:57:ac:1b:d8:32:aa:9e:5c:c7:d6:
         19:24:11:b2:5b:07:1c:03:b9:23:f8:0e:5f:b8:00:b3:d1:93:
         8b:f1:04:33:36:c6:ba:ac:cf:52:17:9e:d1:8a:27:22:e1:15:
         32:e4:04:5b:55:6c:4b:a4:88:ac:04:67:74:3c:44:e2:4b:fc:
         ff:4c:9f:3e:fe:11:77:c7:d5:9f:15:be:19:d3:33:40:a1:3e:
         0a:c0:ad:63:2f:53:88:56:7b:04:ce:8d:38:7a:c7:58:99:06:
         0d:8a:02:35:0d:c0:d6:57:e6:4b:33:86:70:fb:3a:59:c0:d9:
         c9:c3:ab:99:ac:1b:31:de:e0:03:dc:a3:a2:a1:bf:8e:80:61:
         d3:32:7a:d3:9c:07:b3:08:b3:d3:1f:62:be:24:94:65:09:73:
         b8:ca:db:50:49:f3:c9:18:e7:e5:c7:e3:a0:67:e7:9e:fd:ef:
         9d:23:84:f6:03:b2:c9:a3:22:9d:bc:41:9c:c1:d5:8e:db:66:
         06:6c:c4:ea:a3:cf:1a:a2:a2:92:71:e1:d4:5a:a3:3a:9c:b8:
         b3:e4:30:7e
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUVmV5JhZy6e5UOJxOqceun5CY83UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjYwMjA1MTUxMzMxWhcNMjcwMjA0MTUxODMx
WjAzMTEwLwYDVQQDEyhDODQ5RjI1MjIwMTdEQjJDRThCQkE0MjFCNEYwMTUwMjY4
NDI4QzI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYW1ivg1V+as
U73KLw4hzmPAKdf5jNyQtA04l8E/lyid7mEUnPNfJ2CH2f2d2ekwG+b9nWB7rs+b
AVJB9tk74LGEHbfpg64ievplRUCc2Asv/lzMU7l8uqcmMM3rHNODFFauukKgS+IP
a5uFqrn5gwAD6WSmW+rWmpgrwaPz+2UI0MvtL0kUeww5RnCzRzeN38TQt4A0OVZr
qBtDWqfevxPCvRQe9SNQNjhkSHR/ZNM3CKpBF1lfKUyNDpgihD/GmqaB9YOAjQsh
boFwYlVbLFcs5XJcKIqqgCPeBZ4ecOiVwr84zM8pP2WS2olr39afOheXhqwLnZ+Z
eH07qJXvOQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMhJ8lIgF9ss6LukIbTwFQJo
QownMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzMTMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMzMxMzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDQCzANBgkqhkiG9w0BAQsF
AAOCAQEAY4IxQeKt1un344CTaw5+gA37nBqtQfDI7nT+Z+24x2kFARunF6txMBS5
K6dXrBvYMqqeXMfWGSQRslsHHAO5I/gOX7gAs9GTi/EEMzbGuqzPUhee0YonIuEV
MuQEW1VsS6SIrARndDxE4kv8/0yfPv4Rd8fVnxW+GdMzQKE+CsCtYy9TiFZ7BM6N
OHrHWJkGDYoCNQ3A1lfmSzOGcPs6WcDZycOrmawbMd7gA9yjoqG/joBh0zJ605wH
swiz0x9iviSUZQlzuMrbUEnzyRjn5cfjoGfnnv3vnSOE9gOyyaMinbxBnMHVjttm
BmzE6qPPGqKiknHh1FqjOpy4s+Qwfg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:45:01 2026 by rpki-client