Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31322e302f32322d3234203d3e20383334.roa
File:                     3136322e3232312e31322e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          urPi8foIGgKndCsr2IvzC2kLAL8g6wPx8HTLHo7JR2w=
Subject key identifier:   14:02:37:23:AB:6F:BB:D0:0E:61:62:82:19:C1:B7:16:5E:65:D2:4E
Certificate issuer:       /CN=9bc79fa8a10602fe7033680df595f97eefd68122a03b719e13
Certificate serial:       160A95AB6D2D931FB6B1F343ECD4EA319281427A
Authority key identifier: 66:F5:FC:06:9E:05:51:EB:73:4E:C5:3B:44:A9:84:84:A4:46:63:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a10602fe7033680df595f97eefd68122a03b719e13.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31322e302f32322d3234203d3e20383334.roa
Signing time:             Thu 23 Jul 2026 03:10:40 +0000
ROA not before:           Thu 23 Jul 2026 03:05:40 +0000
ROA not after:            Thu 22 Jul 2027 03:10:40 +0000
asID:                     834
IP address blocks:        162.221.12.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/66F5FC069E0551EB734EC53B44A98484A44663D5.crl
                          rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/66F5FC069E0551EB734EC53B44A98484A44663D5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a10602fe7033680df595f97eefd68122a03b719e13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:29:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:0a:95:ab:6d:2d:93:1f:b6:b1:f3:43:ec:d4:ea:31:92:81:42:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc79fa8a10602fe7033680df595f97eefd68122a03b719e13
        Validity
            Not Before: Jul 23 03:05:40 2026 GMT
            Not After : Jul 22 03:10:40 2027 GMT
        Subject: CN=14023723AB6FBBD00E61628219C1B7165E65D24E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:1f:83:0b:c8:36:cc:40:36:97:81:ed:06:
                    a3:75:8a:b6:da:d6:d6:22:4c:67:b5:f6:70:0d:b0:
                    fb:f9:31:81:e5:49:4e:0e:31:40:d3:b0:2b:d7:8a:
                    8b:43:d0:7c:06:45:b7:50:e5:a7:fb:5e:c7:11:df:
                    05:44:8e:a3:27:a2:5e:7c:88:38:3a:af:a3:9b:1e:
                    74:59:ed:75:bb:7e:54:bb:a4:dd:fa:09:6b:2b:90:
                    94:34:7a:a8:fe:09:fa:4d:be:fd:d6:35:0d:25:6a:
                    b3:c0:d2:1e:25:b3:61:9c:7d:15:be:12:0b:d5:87:
                    54:9a:2c:02:87:0b:e9:3d:b8:f4:cc:61:67:4f:1c:
                    26:bb:32:42:b6:8f:95:79:44:40:8a:85:92:df:b3:
                    8f:8c:c4:4f:67:04:8b:58:09:44:34:c7:82:ce:74:
                    97:46:31:e5:e5:8b:aa:16:1f:db:c9:97:27:25:1b:
                    1d:83:2f:f9:d8:c2:2e:85:e1:af:d2:a7:d5:14:82:
                    e4:65:96:12:9b:d7:32:82:9b:71:af:a9:0a:f7:cf:
                    3f:30:c5:63:82:a0:35:10:af:f4:28:46:c0:fd:5a:
                    f7:eb:f7:47:17:e2:1c:59:10:b0:43:81:eb:08:2e:
                    a2:42:78:31:cc:81:c6:85:27:5b:d7:b8:b5:3d:6b:
                    1f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:02:37:23:AB:6F:BB:D0:0E:61:62:82:19:C1:B7:16:5E:65:D2:4E
            X509v3 Authority Key Identifier:
                keyid:66:F5:FC:06:9E:05:51:EB:73:4E:C5:3B:44:A9:84:84:A4:46:63:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/66F5FC069E0551EB734EC53B44A98484A44663D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a10602fe7033680df595f97eefd68122a03b719e13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31322e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0f:45:c8:94:58:51:68:e0:30:30:c6:04:e6:aa:17:00:7d:05:
         4e:fc:4f:69:e8:7a:8d:25:cb:1e:9e:f2:e8:9b:af:ec:74:0b:
         42:38:57:b3:a2:8d:90:83:c0:96:b9:90:50:50:31:28:ae:06:
         c1:73:be:a5:59:41:9a:75:cd:a7:05:5b:cf:78:db:1d:ef:a4:
         6a:a1:ce:71:2e:c9:ba:0b:91:10:a7:ca:fd:ce:29:b4:fb:90:
         33:4e:3c:21:a2:72:cc:56:5b:11:9f:3a:87:57:1f:bc:8d:11:
         68:73:91:02:04:31:2b:68:80:d4:b3:6d:35:0c:f0:3f:c1:9c:
         96:a1:28:76:d0:91:48:08:6b:96:d8:08:52:43:39:68:be:e6:
         1e:5d:de:5e:fe:29:ca:c0:8a:59:dd:e2:06:d6:a6:97:6a:d7:
         a2:c5:4a:24:56:46:a2:5f:c9:1f:18:94:43:81:63:37:bb:4c:
         f7:57:73:1e:3c:73:f7:b0:69:32:e1:5d:28:37:d6:10:b3:10:
         d2:6a:76:c0:de:26:40:64:8c:37:d7:72:0d:e1:80:d6:85:4a:
         31:36:30:5c:b8:ee:98:60:b4:96:f5:4a:fe:b7:18:b0:87:5a:
         00:64:9e:4c:20:af:46:48:e6:be:e6:ee:0a:e7:b1:24:30:cc:
         33:b8:22:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:01 2026 by rpki-client