Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3139322e302f32312d3234203d3e20383334.roa
File:                     3139382e31352e3139322e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          ryn9Nn/qbM7A1ZGG/oA26qEczDKUvJUARqIF7fs+dOg=
Subject key identifier:   D9:72:5C:22:7D:C4:F4:35:32:36:56:02:AC:58:66:9D:C8:53:1F:68
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       335E04E20C34521A24D15F83039E628EB76ADF65
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3139322e302f32312d3234203d3e20383334.roa
Signing time:             Fri 05 Jun 2026 20:08:28 +0000
ROA not before:           Fri 05 Jun 2026 20:03:28 +0000
ROA not after:            Fri 04 Jun 2027 20:08:28 +0000
asID:                     834
IP address blocks:        198.15.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 13 Jun 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:5e:04:e2:0c:34:52:1a:24:d1:5f:83:03:9e:62:8e:b7:6a:df:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun  5 20:03:28 2026 GMT
            Not After : Jun  4 20:08:28 2027 GMT
        Subject: CN=D9725C227DC4F43532365602AC58669DC8531F68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:89:e2:e0:02:6e:67:aa:2f:49:07:db:81:
                    ec:b3:f9:50:df:7a:c7:b5:da:c7:06:98:45:56:2d:
                    ae:a4:46:8e:6d:e3:a1:99:ca:8b:be:ed:31:2d:c9:
                    6b:e9:51:36:e3:f6:ad:00:88:61:91:33:d1:6d:2d:
                    71:00:0a:8d:c8:63:4f:1d:ec:98:1b:d7:01:44:81:
                    f4:c4:57:11:d1:f4:6c:57:a6:91:5f:96:be:07:f3:
                    b5:d1:86:10:11:1a:df:d8:11:9e:51:f1:8b:71:81:
                    f1:aa:67:ac:61:7c:a4:ce:50:f7:d8:7e:ef:fa:14:
                    8f:fd:d1:51:aa:18:c7:66:66:39:30:33:9e:10:5d:
                    ff:a7:8e:6b:60:e7:7b:63:f2:01:0a:3d:e4:30:f7:
                    b6:e6:8d:92:7d:b5:59:44:29:c0:a0:b8:8d:4d:60:
                    b4:71:bf:35:bc:65:da:06:46:3e:47:8c:2a:3b:b8:
                    b7:d0:a0:e2:19:4d:94:26:55:31:1a:87:ac:84:ca:
                    7d:c5:8e:28:50:ad:6f:d5:f7:c9:1a:91:c3:25:60:
                    23:c6:c2:d8:07:19:21:b5:3c:69:85:97:0d:2d:60:
                    94:78:ab:82:8e:d5:77:8a:4a:f9:c6:b7:f4:1f:be:
                    1c:48:cb:31:b7:86:7d:3b:9f:32:10:fa:2f:23:74:
                    8c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:72:5C:22:7D:C4:F4:35:32:36:56:02:AC:58:66:9D:C8:53:1F:68
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3139322e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:d8:49:8e:1d:f6:73:ff:a8:f7:f1:90:7c:21:3d:1d:0c:3b:
         16:34:59:16:13:9b:3c:f4:27:3b:5a:5f:37:ad:67:15:05:f5:
         fb:8a:ea:b6:14:ae:d5:f4:7b:0a:b6:4a:3c:2b:67:11:90:ef:
         d0:24:1a:a2:fe:d4:a0:23:9f:72:b7:ca:bc:9c:6b:d3:0c:74:
         52:5a:e3:73:c9:3d:1c:f3:12:9a:80:c2:7d:01:d3:c7:e2:23:
         d8:e1:09:27:0b:7c:92:f6:6a:cd:55:53:e8:03:d9:70:40:6b:
         a3:6f:8b:d7:a7:60:9a:6a:fe:77:2e:7c:6e:42:56:84:04:e7:
         dd:8f:35:73:bd:48:d9:4f:7a:6e:13:9a:60:a0:77:6e:3b:99:
         43:df:c6:1b:61:98:67:76:4a:bd:5f:f6:b7:e1:04:38:78:a7:
         67:d9:eb:72:48:da:55:6d:38:84:cc:12:fb:d8:5e:4d:ff:49:
         fe:d2:ea:14:c0:d7:55:e0:6e:64:ae:59:75:f8:a2:46:03:00:
         d6:0a:8f:24:63:af:de:ac:11:cb:cb:a1:6e:35:df:8f:22:dd:
         81:0f:b3:3a:6c:37:2b:0c:1f:de:71:55:e0:a4:42:72:7d:4b:
         47:83:3d:53:25:67:ae:0e:01:6a:58:62:0b:c6:a3:d1:0d:0b:
         7e:ef:de:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:12 2026 by rpki-client