Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323134303235.roa
File:                     3139322e3230382e31322e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier:          I6tppjhFXrKnruq7f4Vu6b53zszltSINS1PyyOUm4xA=
Subject key identifier:   71:8C:25:10:CC:77:E9:7A:E4:DA:66:2F:92:80:26:1D:2D:D6:3B:71
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       70454C394E9C2242209451C36D3C90F3845CACDF
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323134303235.roa
Signing time:             Thu 30 Oct 2025 12:30:39 +0000
ROA not before:           Thu 30 Oct 2025 12:25:39 +0000
ROA not after:            Thu 29 Oct 2026 12:30:39 +0000
asID:                     214025
IP address blocks:        192.208.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:02:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:4c:39:4e:9c:22:42:20:94:51:c3:6d:3c:90:f3:84:5c:ac:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Oct 30 12:25:39 2025 GMT
            Not After : Oct 29 12:30:39 2026 GMT
        Subject: CN=718C2510CC77E97AE4DA662F9280261D2DD63B71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:57:5e:82:dc:d0:98:27:61:38:ab:d8:fe:25:
                    19:d6:d9:6e:3d:f1:af:6b:49:e9:2f:ae:45:69:be:
                    df:8c:16:54:6b:6b:97:d6:b1:48:da:6b:ec:45:7b:
                    0e:7b:1e:fa:cd:41:64:5e:6a:b9:26:50:80:79:77:
                    93:80:5b:68:95:ca:19:1f:b5:99:df:1c:e4:31:8a:
                    d9:5c:10:36:8d:66:f8:1b:44:71:35:50:da:24:9c:
                    3a:66:f5:2e:03:c2:9c:ea:96:ab:6b:2d:a0:2a:f2:
                    21:28:8a:1e:42:da:28:55:4c:1b:dc:4f:1c:a2:b1:
                    c8:17:04:16:97:3b:08:75:f8:c9:3b:8c:4d:9b:d3:
                    e6:95:e0:20:c5:a6:67:f3:b8:aa:c8:98:18:7a:07:
                    de:79:2b:fa:09:19:73:7d:6f:34:6f:8f:70:5e:88:
                    7f:53:4b:b3:a2:01:9d:0a:71:9d:1d:3a:65:ab:2f:
                    76:53:a4:a0:20:15:01:3c:97:1d:e0:d6:cf:1c:e8:
                    20:90:37:10:03:24:34:ce:46:75:11:80:aa:d9:f8:
                    1c:d0:05:1c:83:43:50:76:9c:52:25:45:bb:30:c1:
                    4a:dc:32:ea:11:65:aa:74:53:26:47:9a:5e:42:f6:
                    63:9b:61:fc:54:d4:02:75:10:70:de:bc:43:13:8b:
                    97:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8C:25:10:CC:77:E9:7A:E4:DA:66:2F:92:80:26:1D:2D:D6:3B:71
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323134303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:be:73:6c:fc:ac:d2:3a:0c:4f:67:2e:f7:38:7a:9d:85:a8:
         20:e8:98:15:f1:e4:3f:da:a9:e1:ec:a5:5b:9a:ac:ed:73:a7:
         97:a2:f5:44:24:71:a4:e7:0e:a0:ee:c4:10:b3:63:c5:7e:de:
         ec:37:35:3f:af:1c:2e:b2:75:dc:1c:f4:d0:bf:95:81:91:a9:
         55:56:30:6d:0f:7c:9e:08:e5:1b:1c:22:b3:97:47:ec:2e:54:
         7b:71:21:ba:78:05:58:ee:9a:da:e3:ee:5c:44:12:d6:bc:23:
         9a:ab:1a:dd:bb:b1:b2:e9:ec:c9:90:24:a7:e5:1a:59:3e:68:
         9c:ae:f6:7e:06:13:d9:3c:6e:b5:1a:ba:2f:78:64:bd:8b:3a:
         55:fe:e3:00:3b:4e:aa:f0:93:e5:1e:ec:f6:76:7d:20:fc:79:
         ab:50:3f:96:a2:b0:46:dd:17:00:0a:e7:7e:6c:eb:c3:5e:15:
         a7:c4:d1:6c:98:3b:96:42:4c:90:58:93:1c:e6:41:f7:e3:22:
         09:79:4d:ca:bb:8b:e5:f3:46:2a:83:01:ab:66:11:9e:ea:81:
         34:76:e0:7d:77:1d:c0:b4:51:af:47:84:24:25:f0:80:8f:35:
         90:45:94:fa:08:e9:cf:80:6e:cd:c8:1b:34:e5:bf:3e:83:69:
         89:e4:e9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:09:28 2025 by rpki-client