Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36392e302f32342d3234203d3e20323138393635.roa
File:                     3139392e3233312e36392e302f32342d3234203d3e20323138393635.roa (raw, json)
Hash identifier:          iluNm4e+J/yFjdmgL4Ml3li4Y39wF0i4/0rtjWhWGkg=
Subject key identifier:   53:52:FA:A2:0C:01:BE:2E:BD:0E:09:46:FE:6C:A0:FE:D7:D1:C2:3E
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       730626EB546A95F8D61BBE5D635D17CADF233779
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36392e302f32342d3234203d3e20323138393635.roa
Signing time:             Wed 02 Sep 2026 05:38:14 +0000
ROA not before:           Wed 02 Sep 2026 05:33:14 +0000
ROA not after:            Wed 01 Sep 2027 05:38:14 +0000
asID:                     218965
IP address blocks:        199.231.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:06:26:eb:54:6a:95:f8:d6:1b:be:5d:63:5d:17:ca:df:23:37:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Sep  2 05:33:14 2026 GMT
            Not After : Sep  1 05:38:14 2027 GMT
        Subject: CN=5352FAA20C01BE2EBD0E0946FE6CA0FED7D1C23E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:47:96:23:26:00:b6:ce:df:af:21:78:0c:1c:
                    28:f0:cc:14:38:98:78:0e:0b:92:6c:15:61:7f:a5:
                    25:99:62:28:97:cc:dc:99:21:c9:bb:56:de:cc:a2:
                    3c:2f:ed:f1:9c:c4:51:94:53:08:53:84:33:9f:01:
                    21:55:01:70:41:16:fa:a9:09:9d:80:6c:02:21:f3:
                    27:e9:a1:06:9e:dc:4d:ef:6d:2c:d0:c5:ab:91:a4:
                    ae:ee:83:e6:55:58:fc:f1:de:09:ca:f9:36:41:55:
                    bd:8f:98:8a:35:3c:e5:83:6a:5d:0a:fc:fe:d2:0f:
                    80:25:89:c5:35:25:87:2d:cd:bb:57:e7:6b:fa:60:
                    63:d0:64:e7:2d:e4:92:be:be:b0:4e:eb:64:fc:99:
                    9d:ae:fc:6d:e2:ff:c4:35:5b:58:68:fd:d3:89:58:
                    ca:8d:0a:24:d5:68:b8:fa:39:d5:a3:f5:c6:69:e6:
                    88:5e:0a:6c:16:b1:e8:7d:27:c2:9c:b4:30:49:72:
                    62:24:69:43:07:6c:bd:22:36:63:07:75:fb:97:36:
                    41:ec:cd:63:d4:05:6b:c5:37:b5:f1:21:18:72:ba:
                    b1:4e:69:bd:21:e7:f5:25:5b:49:f9:fc:5d:13:5d:
                    c4:ab:95:70:b8:6a:8d:48:39:c1:c3:79:01:03:17:
                    38:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:52:FA:A2:0C:01:BE:2E:BD:0E:09:46:FE:6C:A0:FE:D7:D1:C2:3E
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36392e302f32342d3234203d3e20323138393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:86:21:ce:05:c2:ef:df:03:44:06:a5:ce:76:d7:e5:5a:56:
         af:fe:6f:ac:82:17:1a:b2:86:63:38:f6:60:0f:01:e7:9a:cd:
         14:c9:87:0c:e6:40:bc:31:ff:35:01:f1:ab:f1:b6:23:cb:3e:
         b7:07:28:03:60:9c:6c:36:7e:54:cc:2b:51:51:03:62:24:05:
         99:a7:77:2f:ec:27:ac:19:bb:b4:29:de:19:e7:f1:62:31:75:
         6e:fa:37:48:31:85:13:4a:bd:75:a8:d5:43:a1:03:5c:35:af:
         0f:fa:87:e4:7c:b2:9e:aa:75:eb:f1:a1:af:55:2b:1a:25:5a:
         d2:30:8b:04:6f:d5:5a:c4:83:f5:3d:9c:c1:e0:3a:2e:8a:e0:
         05:49:ba:3a:09:c4:4a:59:1f:ba:05:d7:dd:28:3a:8f:4a:d8:
         c4:16:fb:01:5a:62:f1:76:1d:46:d7:ce:9d:04:92:8d:af:d8:
         e9:8c:f6:a9:a4:00:e3:61:a6:75:bb:7e:08:05:52:6c:69:36:
         9f:92:f5:c1:62:61:72:d1:e2:3f:a4:da:56:4b:da:7f:d5:2a:
         34:ec:f5:54:48:a0:78:dc:6a:c7:29:29:5c:b2:1e:84:e5:37:
         47:0f:7d:c8:82:a8:4f:25:cf:60:c8:9a:4e:2c:58:a5:c7:50:
         1d:3f:f3:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:59:29 2026 by rpki-client