Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32332d3234203d3e20383334.roa
File:                     3139382e3137372e35382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          aS1p6BAOJs9k1WNcuccZjMHEI0UPaRkWDFowTkdNd60=
Subject key identifier:   7F:E7:82:C4:3F:04:96:A1:2E:EA:CC:16:17:0B:5F:E0:6D:38:F5:DF
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       046F0E40A98196143C5029C5E689DCA48D1AA7A9
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32332d3234203d3e20383334.roa
Signing time:             Fri 13 Nov 2026 00:36:22 +0000
ROA not before:           Fri 13 Nov 2026 00:31:22 +0000
ROA not after:            Fri 12 Nov 2027 00:36:22 +0000
asID:                     834
IP address blocks:        198.177.58.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 06:58:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:6f:0e:40:a9:81:96:14:3c:50:29:c5:e6:89:dc:a4:8d:1a:a7:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Nov 13 00:31:22 2026 GMT
            Not After : Nov 12 00:36:22 2027 GMT
        Subject: CN=7FE782C43F0496A12EEACC16170B5FE06D38F5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:c7:3c:f7:d0:a2:6b:42:ab:0b:ef:76:74:
                    a4:19:38:46:49:8b:8f:2a:d7:12:f0:8c:39:68:df:
                    77:8c:ca:8d:1a:fa:43:bd:89:d6:a4:30:c3:cb:23:
                    6d:8c:2e:80:19:b7:dd:6e:95:37:14:f7:29:95:3e:
                    c9:6f:bf:9d:00:c6:dd:f1:0a:fa:be:c2:bb:ac:80:
                    96:15:c8:0b:26:da:22:86:51:6e:02:20:9f:87:15:
                    c5:bc:5a:9b:a7:5e:e2:03:38:43:56:99:54:4b:af:
                    56:24:d5:2d:bb:ef:52:74:30:a9:f1:e8:10:f2:2b:
                    ae:c8:7d:e0:76:f0:f4:e8:12:eb:bd:c6:ff:ce:71:
                    7c:f6:ea:41:2d:08:3f:64:63:b1:28:eb:cc:af:50:
                    aa:1d:4a:cf:7f:db:24:80:5b:12:23:4b:84:94:32:
                    f1:f6:23:f1:d5:a9:b0:14:2c:ef:61:69:fc:7c:6a:
                    77:01:f2:9f:dc:a6:71:b7:a9:dc:6e:dd:46:e1:0c:
                    56:40:3e:bc:79:ac:ab:f5:f5:57:ca:69:5d:26:f6:
                    53:fa:3f:9e:25:ed:b3:4d:a7:27:d6:f3:8a:02:48:
                    19:03:99:06:61:f1:58:04:f2:6b:94:1c:0b:ad:03:
                    71:f0:41:5f:dd:ff:10:27:f2:be:2e:69:39:63:e9:
                    56:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E7:82:C4:3F:04:96:A1:2E:EA:CC:16:17:0B:5F:E0:6D:38:F5:DF
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:fe:5a:c1:94:9c:e1:67:c6:ea:e5:80:1b:c0:2f:c5:d7:67:
         22:09:c7:05:4f:2d:ae:88:42:45:16:b3:38:e5:ba:95:36:8a:
         2c:dd:58:3f:93:9b:11:de:e1:78:75:06:fa:d7:72:6f:87:b5:
         b6:ed:ba:f2:7f:e5:a5:2e:d9:c6:89:4e:43:e5:b7:76:02:81:
         90:43:f8:ab:53:c2:65:dd:07:fd:14:5f:82:4a:13:c9:80:92:
         31:0f:aa:f8:50:0d:e7:27:bc:59:04:9a:5e:14:6b:9e:8a:37:
         a3:8c:fc:c1:d2:81:35:b4:76:65:e3:e9:1c:e6:05:34:43:7e:
         57:65:1e:da:39:35:26:57:5e:ab:64:54:34:81:d7:2b:1d:9c:
         f3:87:b5:df:95:6c:7c:ec:9d:cb:1b:8f:8c:4e:59:65:d3:ab:
         1f:bc:f9:3a:a0:e8:6f:55:93:74:b9:b2:39:e3:34:2c:06:36:
         e0:e5:f5:3b:44:a1:42:cc:d2:00:5e:4c:46:a1:38:eb:bb:7d:
         80:8f:1b:63:b5:60:85:0a:2e:f6:4c:2b:66:53:4f:fb:f4:ed:
         bb:8d:77:24:30:4e:fa:d0:ee:43:57:62:bf:80:2c:34:1c:48:
         23:a7:a3:87:89:1f:5a:aa:cb:3f:3d:bf:27:c4:d9:84:9e:71:
         a0:46:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:56:40 2026 by rpki-client