Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323135333034.roa
File:                     3139322e3230382e31322e302f32342d3234203d3e20323135333034.roa (raw, json)
Hash identifier:          vY66DHsfpphUh6aW0kVYLeRpNL0zQ3wI260V6qi+uu8=
Subject key identifier:   DF:5D:47:DF:B4:CC:51:28:B3:C0:8D:AB:74:FC:C4:9F:87:D9:3A:51
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       37ED875654D9109ACE1DBF30990E3A1CAB80905B
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323135333034.roa
Signing time:             Thu 30 Oct 2025 12:30:39 +0000
ROA not before:           Thu 30 Oct 2025 12:25:39 +0000
ROA not after:            Thu 29 Oct 2026 12:30:39 +0000
asID:                     215304
IP address blocks:        192.208.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:ed:87:56:54:d9:10:9a:ce:1d:bf:30:99:0e:3a:1c:ab:80:90:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Oct 30 12:25:39 2025 GMT
            Not After : Oct 29 12:30:39 2026 GMT
        Subject: CN=DF5D47DFB4CC5128B3C08DAB74FCC49F87D93A51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:71:a8:ba:a6:3f:88:d6:58:fa:62:fc:2e:31:
                    a6:0a:95:07:51:0d:3c:95:b9:09:6f:57:7f:e5:37:
                    33:df:22:5c:a1:af:e0:85:14:0c:c7:e6:d3:3d:ee:
                    1e:ce:bf:eb:97:96:8f:4f:a5:70:f6:ed:41:e3:bc:
                    db:c3:eb:45:ed:75:b4:d8:73:b9:73:a5:e7:14:b3:
                    c2:ff:41:95:63:bf:a7:d3:1f:c5:21:ee:9e:5a:eb:
                    83:23:9f:cc:fb:ae:b3:fb:2b:27:09:49:a9:1f:e9:
                    f7:98:a2:d6:c1:8b:eb:c1:57:3c:c3:21:01:eb:07:
                    d4:77:ce:96:d0:a6:6b:e8:5b:27:61:ed:b2:98:42:
                    bf:fd:14:04:86:05:c6:24:1b:63:28:a9:62:3e:8e:
                    79:ef:10:a9:5a:5c:5b:56:1e:be:29:f8:28:90:ae:
                    d4:3e:b9:2e:41:5b:29:5b:1c:44:76:7b:fd:ff:28:
                    68:63:7f:d7:c1:de:da:a0:ae:50:a3:38:6a:a3:12:
                    9f:cd:19:6d:aa:80:8c:b4:3b:c7:c0:31:1f:28:6f:
                    7b:d3:09:fc:5b:1d:8c:2a:e6:f3:89:28:b7:25:f1:
                    73:1f:5b:18:48:93:57:57:12:a4:90:a2:da:62:13:
                    9c:b4:cd:e3:49:92:c8:08:3d:84:23:c7:da:2c:da:
                    f9:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5D:47:DF:B4:CC:51:28:B3:C0:8D:AB:74:FC:C4:9F:87:D9:3A:51
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31322e302f32342d3234203d3e20323135333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:de:3e:87:81:d3:c5:86:92:6f:ef:ae:2e:ee:9c:96:b6:7e:
         16:b6:20:ff:5e:9f:7a:b8:ad:93:4b:15:f8:b8:c8:57:2d:be:
         41:5b:16:4d:22:a7:41:28:fc:a3:75:9a:4a:03:3b:0b:0c:7d:
         25:cd:65:cb:28:e0:7f:61:61:6d:0e:ba:e1:a7:8b:a4:7c:0c:
         e2:56:7f:91:3a:e7:94:f8:aa:89:2d:16:a7:17:09:03:63:47:
         0f:19:35:f5:00:93:4d:66:26:ee:6f:68:5e:6d:e0:2c:a4:35:
         48:44:fe:b9:88:18:ac:90:13:06:5f:94:51:33:76:43:96:15:
         74:a8:0c:a2:a2:e5:24:91:5a:20:e9:bf:e6:5f:9f:f4:3b:55:
         df:53:bc:5e:5a:04:30:6e:db:e3:d5:f7:49:1a:06:89:c0:7e:
         5d:e9:4c:7e:f0:11:aa:5e:18:81:ad:ca:2a:91:44:4d:ca:b1:
         33:2a:41:32:e2:43:a7:41:a1:b6:b4:77:2e:26:fe:90:9a:6e:
         0c:a9:9e:03:05:07:83:d3:01:6c:f6:c3:20:de:ef:a0:a9:10:
         cb:17:77:45:6f:c2:93:6c:2a:4f:e2:82:50:64:a2:0d:e3:c8:
         21:89:fc:f0:aa:8e:c0:5b:96:2c:12:8b:3e:e9:38:2c:2a:a2:
         2b:9c:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 16:32:44 2025 by rpki-client