Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3135322e302f32312d3234203d3e20383334.roa
File:                     3139382e312e3135322e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          VbcGI+QQKxf+Rlxkvi2wkWdmUDVYM1uYRWFXeS1v3a0=
Subject key identifier:   19:FC:E8:F1:8E:5E:D1:3A:92:6F:D7:A2:2D:4D:A5:1A:8C:A5:86:BC
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       65CE76CAF8BA7FCF87119D41055A1D7E6CE45200
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3135322e302f32312d3234203d3e20383334.roa
Signing time:             Wed 03 Jun 2026 19:41:08 +0000
ROA not before:           Wed 03 Jun 2026 19:36:08 +0000
ROA not after:            Wed 02 Jun 2027 19:41:08 +0000
asID:                     834
IP address blocks:        198.1.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:ce:76:ca:f8:ba:7f:cf:87:11:9d:41:05:5a:1d:7e:6c:e4:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun  3 19:36:08 2026 GMT
            Not After : Jun  2 19:41:08 2027 GMT
        Subject: CN=19FCE8F18E5ED13A926FD7A22D4DA51A8CA586BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:77:dc:44:38:8f:54:5d:11:9b:fd:08:d5:86:
                    a1:a7:32:ee:7d:d5:d7:f4:4a:f4:0b:5f:fb:f6:9d:
                    41:d7:e8:1a:9b:18:08:bb:fe:6f:7c:4f:1f:be:38:
                    40:6d:3d:2c:72:12:a0:97:0d:90:6b:5c:23:37:82:
                    6a:dd:4e:4b:cf:7d:0e:1a:7d:94:2d:ec:97:ed:c7:
                    4f:60:73:ff:93:23:57:ae:18:fc:83:fb:e6:63:31:
                    a2:60:98:97:d1:89:fa:a8:cd:68:f2:b7:57:43:8b:
                    5a:8b:f7:07:70:e3:9e:69:2a:83:45:ee:dc:ae:51:
                    f6:c4:a7:1a:3c:a2:f1:a1:41:aa:c9:7b:ee:ff:90:
                    98:c7:1c:0f:c7:fd:b5:bd:6e:73:44:67:64:71:dc:
                    3f:1d:5b:f4:db:87:21:a9:ff:e4:aa:fa:35:4d:c0:
                    48:1c:06:d0:c2:67:56:78:9f:1a:1b:22:3b:00:64:
                    f7:b5:0b:d6:5b:43:11:78:39:bf:44:0a:d4:f2:2b:
                    8a:61:44:bd:ae:7f:cd:8d:62:62:51:c3:82:bd:f8:
                    49:f9:ef:a9:45:1a:a5:19:b3:c9:d6:91:8b:7a:70:
                    77:d3:ce:1f:b6:c5:dd:5b:3a:9f:5d:b6:76:39:42:
                    bd:e2:37:d4:34:ee:34:e1:c5:58:8c:70:bf:b1:cf:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:FC:E8:F1:8E:5E:D1:3A:92:6F:D7:A2:2D:4D:A5:1A:8C:A5:86:BC
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3135322e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.152.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:8a:a4:d5:64:40:75:c5:85:08:67:94:60:4b:88:0d:b1:d4:
         b6:65:47:b0:1f:64:54:9a:90:f5:8e:be:51:cd:de:7f:6c:e5:
         43:05:39:b9:32:24:61:25:97:9e:a4:68:f6:2f:cc:ce:88:fa:
         4a:d8:8d:f5:ce:5a:f7:b9:b6:a9:2a:e9:69:f2:3c:b2:3e:48:
         18:f5:03:ff:92:54:57:d1:9a:50:d1:b0:f0:b7:b8:26:23:7c:
         f7:ba:1c:c1:97:3f:48:51:64:dc:db:c1:13:4f:49:fd:7b:be:
         83:c4:d9:55:17:53:2e:30:4c:6b:4d:94:34:0b:98:bc:8b:c2:
         39:73:12:c9:26:20:19:96:fd:d1:80:91:6f:42:83:eb:43:08:
         66:d7:b7:88:97:b3:43:e9:e7:04:ea:37:0c:d6:19:90:00:50:
         45:89:29:10:f7:45:d9:6c:39:c3:8d:0f:1d:15:7f:b4:84:5c:
         23:d3:bb:09:28:52:0c:41:4b:20:10:10:2e:e6:7b:6d:e9:96:
         6c:89:81:11:9f:ea:05:31:a8:9b:2d:c5:2a:a0:2b:e3:3e:0f:
         f0:5f:d4:b2:37:ac:41:71:94:c1:d6:25:f7:2e:19:de:30:fc:
         34:6f:0d:26:4a:91:6c:cd:57:89:98:42:b5:50:87:d7:82:be:
         c0:0f:02:3b
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUZc52yvi6f8+HEZ1BBVodfmzkUgAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYwNjAzMTkzNjA4WhcNMjcwNjAyMTk0MTA4
WjAzMTEwLwYDVQQDEygxOUZDRThGMThFNUVEMTNBOTI2RkQ3QTIyRDREQTUxQThD
QTU4NkJDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHfcRDiPVF0R
m/0I1YahpzLufdXX9Er0C1/79p1B1+gamxgIu/5vfE8fvjhAbT0schKglw2Qa1wj
N4Jq3U5Lz30OGn2ULeyX7cdPYHP/kyNXrhj8g/vmYzGiYJiX0Yn6qM1o8rdXQ4ta
i/cHcOOeaSqDRe7crlH2xKcaPKLxoUGqyXvu/5CYxxwPx/21vW5zRGdkcdw/HVv0
24chqf/kqvo1TcBIHAbQwmdWeJ8aGyI7AGT3tQvWW0MReDm/RArU8iuKYUS9rn/N
jWJiUcOCvfhJ+e+pRRqlGbPJ1pGLenB3084ftsXdWzqfXbZ2OUK94jfUNO404cVY
jHC/sc8nhwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFBn86PGOXtE6km/Xoi1NpRqM
pYa8MB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy
OGVhOWI3MjY3LzAvMzEzOTM4MmUzMTJlMzEzNTMyMmUzMDJmMzIzMTJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxgGYMA0GCSqGSIb3DQEBCwUAA4IBAQAA
iqTVZEB1xYUIZ5RgS4gNsdS2ZUewH2RUmpD1jr5Rzd5/bOVDBTm5MiRhJZeepGj2
L8zOiPpK2I31zlr3ubapKulp8jyyPkgY9QP/klRX0ZpQ0bDwt7gmI3z3uhzBlz9I
UWTc28ETT0n9e76DxNlVF1MuMExrTZQ0C5i8i8I5cxLJJiAZlv3RgJFvQoPrQwhm
17eIl7ND6ecE6jcM1hmQAFBFiSkQ90XZbDnDjQ8dFX+0hFwj07sJKFIMQUsgEBAu
5ntt6ZZsiYERn+oFMaibLcUqoCvjPg/wX9SyN6xBcZTB1iX3LhneMPw0bw0mSpFs
zVeJmEK1UIfXgr7ADwI7
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:37 2026 by rpki-client