Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3134382e302f32322d3234203d3e20323734323439.roa
File:                     3139382e312e3134382e302f32322d3234203d3e20323734323439.roa (raw, json)
Hash identifier:          yXQspUmJYYQlf6/JBaCCxJ6h8lBDytQisLBr3Kyw51w=
Subject key identifier:   37:2C:A7:27:40:AE:79:45:BC:3A:61:4C:38:80:FC:59:2D:17:8F:08
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       3BB97BC392ED2B51E4CEC8D50653581E1D0FF963
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3134382e302f32322d3234203d3e20323734323439.roa
Signing time:             Wed 03 Jun 2026 19:39:04 +0000
ROA not before:           Wed 03 Jun 2026 19:34:04 +0000
ROA not after:            Wed 02 Jun 2027 19:39:04 +0000
asID:                     274249
IP address blocks:        198.1.148.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:b9:7b:c3:92:ed:2b:51:e4:ce:c8:d5:06:53:58:1e:1d:0f:f9:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun  3 19:34:04 2026 GMT
            Not After : Jun  2 19:39:04 2027 GMT
        Subject: CN=372CA72740AE7945BC3A614C3880FC592D178F08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:41:c1:2d:0c:ae:fc:7f:f5:f8:36:70:18:87:
                    a9:b7:ae:5e:0c:9b:ac:5c:7e:59:28:c7:d5:4e:e5:
                    eb:a0:e7:fb:42:94:14:1a:28:2d:43:e6:75:1a:dd:
                    64:11:6c:67:3f:6b:2e:b4:a5:61:0b:72:00:d0:7b:
                    bb:82:8f:2b:20:38:e3:7d:2d:e8:fd:b9:28:70:38:
                    59:00:44:11:a6:18:b4:49:48:9e:a7:7a:77:80:93:
                    31:c9:55:0e:be:f4:1b:8b:53:04:3f:4e:bb:78:91:
                    35:6f:92:8d:81:e9:c0:5d:c4:47:34:21:10:10:f1:
                    e2:8a:51:79:56:63:4f:c1:c1:14:cd:d1:49:6a:ed:
                    66:b7:86:aa:ca:a6:e0:40:f3:3d:0b:96:e8:51:c5:
                    1e:7e:47:37:20:a6:33:72:a4:e2:b4:71:fa:49:7d:
                    78:b4:a2:7a:bc:89:46:d0:fe:69:b3:60:1d:75:b9:
                    dc:00:13:7f:c3:86:82:3f:d4:e6:e4:41:74:06:59:
                    90:2a:3f:66:b0:29:c4:bc:b9:b5:5f:60:28:6f:a4:
                    15:06:1a:cc:5f:29:49:34:a9:d8:90:ff:db:fc:b5:
                    f2:76:b4:c4:a3:b7:70:b0:82:0b:fc:b4:8c:75:bf:
                    c6:2c:54:24:0f:d3:2a:45:7f:4b:d0:44:de:c9:f4:
                    a4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2C:A7:27:40:AE:79:45:BC:3A:61:4C:38:80:FC:59:2D:17:8F:08
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3134382e302f32322d3234203d3e20323734323439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:85:09:fe:91:ea:13:2e:9d:0a:3c:69:37:77:45:68:d7:44:
         5a:c0:74:06:eb:c4:94:df:2a:82:e0:f9:69:70:60:cd:a0:d7:
         5c:67:0f:57:db:6b:42:4e:0f:d8:58:c9:07:06:e6:83:69:91:
         6b:a6:2e:ba:30:31:ba:39:55:11:d9:a7:4c:51:e9:ba:69:3c:
         05:54:1b:5e:06:8c:14:bc:f4:81:0b:cf:f1:71:64:53:dd:1a:
         1b:b4:3a:f1:30:63:35:e6:b2:2f:2b:50:6b:65:01:c0:b2:71:
         3b:3a:89:8c:cf:f6:38:e5:f2:c5:c7:51:f2:b3:cd:c4:66:86:
         ff:e0:c6:80:6b:81:85:c9:e3:50:c6:e4:5b:85:3e:30:da:d5:
         c2:8b:43:f1:f7:bd:ed:18:32:ab:df:a5:90:f8:44:1b:a5:20:
         5b:78:c8:a2:21:f0:a7:fd:4d:cd:0f:f9:90:bd:ef:80:5b:fd:
         7e:b4:d8:ad:53:98:17:8a:a5:f7:15:0c:74:6f:13:09:38:60:
         00:6b:92:ac:2b:61:c9:bb:fe:6f:ce:a4:40:09:1d:b6:07:85:
         ae:35:d5:b3:9a:7f:0c:68:48:87:08:51:24:48:e7:bb:90:a0:
         12:19:de:ea:d0:a5:5a:fb:b9:58:85:17:b5:29:05:e0:20:c7:
         fd:7d:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:22 2026 by rpki-client