Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3133302e3235302e3138392e302f32342d3234203d3e20333938393931.roa
File:                     3133302e3235302e3138392e302f32342d3234203d3e20333938393931.roa (raw, json)
Hash identifier:          aJr0UVm191SnK2MXxKzas4FP3/fxhMrZmg9Lm5mW2ZI=
Subject key identifier:   2F:AB:2D:FB:D9:AE:49:49:14:5E:1C:F5:AC:B0:04:F4:0B:7E:C9:AB
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       11A79FFF37DDB0034B40E9BB073DFAC50F28D8EC
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3133302e3235302e3138392e302f32342d3234203d3e20333938393931.roa
Signing time:             Thu 16 Jul 2026 16:39:38 +0000
ROA not before:           Thu 16 Jul 2026 16:34:38 +0000
ROA not after:            Thu 15 Jul 2027 16:39:38 +0000
asID:                     398991
IP address blocks:        130.250.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:a7:9f:ff:37:dd:b0:03:4b:40:e9:bb:07:3d:fa:c5:0f:28:d8:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Jul 16 16:34:38 2026 GMT
            Not After : Jul 15 16:39:38 2027 GMT
        Subject: CN=2FAB2DFBD9AE4949145E1CF5ACB004F40B7EC9AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:79:67:de:29:0e:06:93:30:64:17:09:06:68:
                    01:00:27:af:a0:a0:99:a6:7b:73:50:f2:02:3d:e0:
                    a2:09:94:7f:c3:b5:98:6d:b7:fc:16:93:ff:44:13:
                    37:6d:e9:0a:09:17:74:8b:55:76:89:46:57:3e:d7:
                    69:38:e7:af:9f:3e:e0:38:ce:52:2f:80:b6:26:93:
                    a2:a9:b3:b9:3c:61:fa:e8:75:dc:1b:28:f6:a3:c5:
                    9b:29:50:3a:73:c1:f5:b4:8d:8e:b6:2f:0c:da:48:
                    29:49:4d:5b:46:63:32:4f:01:8d:a9:f2:ea:0c:ac:
                    e9:59:66:51:58:3d:6b:4c:ee:e8:06:f5:ef:2d:98:
                    d7:e7:46:35:a6:76:d7:72:86:28:07:c4:15:ee:43:
                    5d:fc:61:4e:59:2e:30:3d:f7:32:5d:d1:81:c7:16:
                    7b:35:b2:4a:f1:c9:d2:b3:15:08:25:ee:97:e9:7f:
                    22:6e:ec:ae:e9:9f:88:d4:12:04:6f:51:75:28:24:
                    86:84:7b:a4:af:d3:56:2b:b2:6c:8f:1d:b1:05:d8:
                    71:ad:80:f2:f5:e9:82:38:37:cd:93:06:ee:1c:12:
                    3a:f2:04:08:00:37:58:a1:75:2b:bf:a0:7d:0d:22:
                    fe:f2:9f:64:85:27:df:a9:2f:33:5c:59:6e:30:d6:
                    68:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:AB:2D:FB:D9:AE:49:49:14:5E:1C:F5:AC:B0:04:F4:0B:7E:C9:AB
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3133302e3235302e3138392e302f32342d3234203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:7f:df:48:84:91:8d:52:de:de:c9:31:f8:ea:4e:d8:ee:d0:
         db:15:b9:e7:04:41:59:bf:1d:b0:ef:80:86:f4:ba:2d:c6:a7:
         bf:5b:f8:0d:7d:fd:13:17:7f:8b:4b:af:c4:d5:2f:c8:e2:0d:
         d1:82:ec:12:8f:b8:5d:6d:f5:ca:e3:87:a5:cb:13:d3:6c:b9:
         24:1f:e4:f9:8d:ea:7d:81:40:0f:3b:05:cc:4e:69:ba:f3:1e:
         e3:67:44:d2:ed:6d:dd:8d:75:cc:d5:d5:ea:f0:d2:3b:c9:07:
         9f:1e:d9:c8:84:fd:00:5d:fd:21:2c:96:80:e5:46:a0:2b:41:
         92:6e:54:58:cb:3f:59:7e:48:27:ac:89:9e:2b:89:b7:4e:e9:
         12:c8:e2:d3:83:ce:64:78:a0:e8:dd:aa:67:b2:38:e6:8e:00:
         86:74:24:07:81:60:92:4e:65:47:50:cc:f4:e8:d6:64:12:87:
         b0:af:6d:fb:41:04:4f:17:79:1c:2f:23:29:80:a7:2c:ea:8f:
         26:a9:29:5e:d3:20:b2:28:75:b1:e6:18:b1:11:6f:db:9d:7e:
         65:8a:c4:40:eb:93:69:8a:b4:47:11:df:ad:85:10:a1:82:16:
         14:00:80:e7:95:83:02:1d:3b:1a:6d:e8:8b:8f:29:d5:7b:31:
         fa:0a:3d:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:06:36 2026 by rpki-client