Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3134342e302f32322d3234203d3e20383334.roa
File:                     3139382e312e3134342e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          uY+BlVbV/DmnpxrCAV3eoIqRDhouaejyi4kNF9GKCNY=
Subject key identifier:   D7:B5:3B:F0:B0:2B:20:AC:34:A1:94:51:71:B2:DB:45:57:E8:C9:CF
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       7FB856653FCBA9A252FF28DF1179FD7DEF33DD2B
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3134342e302f32322d3234203d3e20383334.roa
Signing time:             Wed 03 Jun 2026 19:41:08 +0000
ROA not before:           Wed 03 Jun 2026 19:36:08 +0000
ROA not after:            Wed 02 Jun 2027 19:41:08 +0000
asID:                     834
IP address blocks:        198.1.144.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b8:56:65:3f:cb:a9:a2:52:ff:28:df:11:79:fd:7d:ef:33:dd:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun  3 19:36:08 2026 GMT
            Not After : Jun  2 19:41:08 2027 GMT
        Subject: CN=D7B53BF0B02B20AC34A1945171B2DB4557E8C9CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d3:98:57:34:5c:79:00:f5:4d:2f:93:9f:18:
                    f7:a6:fb:fb:6d:8e:b4:28:b5:6b:89:bd:ce:f5:09:
                    91:a1:bc:6e:ef:8e:d0:04:cc:b7:58:10:60:9d:07:
                    26:52:59:f5:7e:bd:d7:1e:18:77:6a:5d:59:d5:f4:
                    31:71:ce:af:4c:11:04:06:69:7b:a0:92:4c:fc:a5:
                    3d:65:bd:2f:39:76:20:d4:59:00:ab:45:5a:12:e6:
                    74:67:44:ee:c2:fd:49:be:7c:b9:53:f4:f6:c6:2e:
                    84:7f:2f:3a:96:46:77:77:cf:25:e5:69:9c:13:0c:
                    59:04:55:96:2a:2a:82:c5:82:2d:36:61:96:93:99:
                    6c:21:0b:3c:b0:d6:c7:47:7c:4f:1e:2e:cd:7c:05:
                    e6:84:ab:f5:37:fd:e2:27:c3:31:a4:13:91:43:1e:
                    60:2d:ca:7a:78:8f:4b:3f:58:11:35:e4:6f:06:8d:
                    53:97:bf:6b:91:fa:1f:a7:07:0e:73:50:8c:12:30:
                    06:1e:bd:df:39:a3:16:e6:c1:8d:9f:c3:c9:9f:82:
                    9d:92:0d:cd:64:b1:ff:2a:64:0d:90:ee:b6:6e:ed:
                    95:ca:1c:02:ac:ed:14:cf:fc:d3:99:ca:2a:1a:85:
                    77:24:83:7c:25:5c:fb:1a:1a:24:eb:30:89:fe:bf:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B5:3B:F0:B0:2B:20:AC:34:A1:94:51:71:B2:DB:45:57:E8:C9:CF
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3134342e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         64:43:96:d6:0e:6f:6c:d0:55:bc:75:59:52:a8:e3:7b:c1:23:
         4e:5c:fe:90:19:7f:8d:c7:6c:84:b8:b9:7a:3f:b4:fb:cc:ad:
         bf:d3:4d:d6:82:57:77:cb:42:19:33:64:e4:de:f5:3f:ce:a2:
         ff:2a:e7:25:7e:4b:ca:1a:01:3d:c7:09:6c:e7:29:a7:1d:de:
         2a:59:c4:19:ce:a1:88:df:59:8b:ae:7f:60:ef:15:be:e4:b0:
         c8:a9:28:93:fb:ed:53:8c:01:88:a5:9d:0c:f4:af:89:c1:21:
         71:89:ac:b5:16:13:b4:ff:d6:bc:14:22:22:15:13:4a:07:09:
         08:da:00:bd:7e:a1:d5:c3:e2:f7:b9:a1:1d:95:9b:96:6f:7e:
         98:73:0a:bf:f4:a8:f2:37:be:05:73:a4:4d:4a:c4:05:6e:ad:
         cc:c3:40:e1:8c:d7:e6:15:1d:a3:2e:b3:e4:d6:12:47:5c:2e:
         db:3b:90:b0:6d:7f:f4:6f:a8:39:c5:89:4a:db:89:74:43:16:
         77:ee:92:30:fd:87:11:33:44:7f:aa:97:36:5f:b2:12:1d:55:
         51:d9:a5:32:fa:22:c2:af:e4:4c:a2:60:c1:2d:fa:d3:26:65:
         28:a4:99:13:41:45:d3:9a:e9:17:59:1b:a4:dc:07:26:2c:63:
         92:74:6b:95
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUf7hWZT/LqaJS/yjfEXn9fe8z3SswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYwNjAzMTkzNjA4WhcNMjcwNjAyMTk0MTA4
WjAzMTEwLwYDVQQDEyhEN0I1M0JGMEIwMkIyMEFDMzRBMTk0NTE3MUIyREI0NTU3
RThDOUNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNOYVzRceQD1
TS+Tnxj3pvv7bY60KLVrib3O9QmRobxu747QBMy3WBBgnQcmUln1fr3XHhh3al1Z
1fQxcc6vTBEEBml7oJJM/KU9Zb0vOXYg1FkAq0VaEuZ0Z0Tuwv1Jvny5U/T2xi6E
fy86lkZ3d88l5WmcEwxZBFWWKiqCxYItNmGWk5lsIQs8sNbHR3xPHi7NfAXmhKv1
N/3iJ8MxpBORQx5gLcp6eI9LP1gRNeRvBo1Tl79rkfofpwcOc1CMEjAGHr3fOaMW
5sGNn8PJn4Kdkg3NZLH/KmQNkO62bu2VyhwCrO0Uz/zTmcoqGoV3JIN8JVz7Ghok
6zCJ/r/T2QIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFNe1O/CwKyCsNKGUUXGy20VX
6MnPMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy
OGVhOWI3MjY3LzAvMzEzOTM4MmUzMTJlMzEzNDM0MmUzMDJmMzIzMjJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxgGQMA0GCSqGSIb3DQEBCwUAA4IBAQBk
Q5bWDm9s0FW8dVlSqON7wSNOXP6QGX+Nx2yEuLl6P7T7zK2/003Wgld3y0IZM2Tk
3vU/zqL/KuclfkvKGgE9xwls5ymnHd4qWcQZzqGI31mLrn9g7xW+5LDIqSiT++1T
jAGIpZ0M9K+JwSFxiay1FhO0/9a8FCIiFRNKBwkI2gC9fqHVw+L3uaEdlZuWb36Y
cwq/9KjyN74Fc6RNSsQFbq3Mw0DhjNfmFR2jLrPk1hJHXC7bO5CwbX/0b6g5xYlK
24l0QxZ37pIw/YcRM0R/qpc2X7ISHVVR2aUy+iLCr+RMomDBLfrTJmUopJkTQUXT
mukXWRuk3AcmLGOSdGuV
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:54:21 2026 by rpki-client