Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131362e302f32342d3234203d3e203138383534.roa
File:                     3134312e3139352e3131362e302f32342d3234203d3e203138383534.roa (raw, json)
Hash identifier:          6IK5MPCVTkArlxs6nsd+gpClhj3XNSF4xtcVvSl3Wi8=
Subject key identifier:   1F:A8:C5:CD:EC:DA:04:1D:DA:C3:57:1E:E6:CF:D2:BA:C1:A3:C7:BA
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       72B96695AEA1ECD666087DAB65F2C8241F313549
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131362e302f32342d3234203d3e203138383534.roa
Signing time:             Wed 22 Apr 2026 06:11:17 +0000
ROA not before:           Wed 22 Apr 2026 06:06:17 +0000
ROA not after:            Wed 21 Apr 2027 06:11:17 +0000
asID:                     18854
IP address blocks:        141.195.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 08:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:b9:66:95:ae:a1:ec:d6:66:08:7d:ab:65:f2:c8:24:1f:31:35:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Apr 22 06:06:17 2026 GMT
            Not After : Apr 21 06:11:17 2027 GMT
        Subject: CN=1FA8C5CDECDA041DDAC3571EE6CFD2BAC1A3C7BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:4f:26:fe:76:f8:b8:bb:5c:33:4e:16:9c:a2:
                    81:c6:fb:27:27:03:e9:92:98:e8:b7:31:9a:e6:a4:
                    70:fc:c1:39:95:c8:2d:5a:ab:b4:08:dd:d3:46:cb:
                    bb:a9:c6:60:99:d0:8c:cf:f3:d5:b4:c8:f3:cc:7f:
                    72:dd:6f:dc:7f:ad:63:a6:7f:f0:a0:7f:c8:3f:e0:
                    ad:0c:17:2e:ac:63:ce:2c:45:b9:c0:df:b1:e0:5f:
                    17:7e:b7:df:18:67:2a:dd:97:3b:09:37:3d:1b:cc:
                    a9:f4:0c:8a:20:9b:5b:b2:23:1b:d7:6c:4c:54:56:
                    e3:a6:70:9f:3c:42:da:a1:73:6b:25:d2:6b:25:2d:
                    eb:64:c7:82:79:a6:06:17:d7:74:2f:27:ca:4a:ac:
                    4d:8c:8c:10:0a:f9:5f:4a:24:61:4f:e2:35:52:1a:
                    b8:39:18:e4:b4:59:0c:19:31:dc:c4:2e:d9:72:1a:
                    72:0c:f2:2b:c9:38:49:fb:10:6d:b9:0f:31:e9:61:
                    77:10:4b:e8:52:60:9f:15:9c:9c:a0:9e:9d:44:71:
                    36:4b:82:d2:61:6a:bc:0c:bc:11:37:f5:3b:20:1e:
                    31:ef:3a:cd:3d:dc:5c:fa:5d:c5:22:03:43:54:29:
                    85:92:d4:c5:02:1c:6b:85:17:8c:2f:55:37:30:57:
                    7c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A8:C5:CD:EC:DA:04:1D:DA:C3:57:1E:E6:CF:D2:BA:C1:A3:C7:BA
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131362e302f32342d3234203d3e203138383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:3b:59:e2:23:99:ff:e6:ea:9f:64:13:87:f2:79:22:a7:9e:
         c5:dd:53:c8:be:0e:6a:03:73:ea:08:33:85:31:46:da:db:13:
         f8:71:c2:32:75:7e:73:0a:2b:78:fa:c1:50:12:b9:9e:18:65:
         88:29:28:2b:42:9c:7a:14:8b:de:b9:57:1d:6b:cb:1d:81:3a:
         a1:e7:19:7d:84:43:89:57:0b:66:3b:06:03:71:e1:e6:b8:0a:
         99:08:b8:16:4d:2c:fb:45:0b:51:da:8a:3f:a5:a0:9a:3a:d2:
         5c:e6:cf:1d:da:91:0e:d4:71:dd:f0:99:b3:c8:96:d0:03:86:
         d0:98:73:5a:a7:03:f5:0b:fb:24:95:6d:ca:46:49:65:66:d3:
         d3:e9:f0:f8:6c:2d:ad:0e:d9:bc:1a:ff:a7:2c:c5:f2:3b:23:
         0b:36:f0:13:9f:32:fb:d2:72:96:7b:72:50:2e:1b:0a:80:75:
         1b:9a:e4:29:97:fe:cd:e3:1a:50:98:56:c7:70:49:80:e4:80:
         d1:17:2c:1a:09:69:4f:f7:24:a3:db:a7:b9:0a:0a:02:13:8f:
         31:d9:5f:20:66:f3:b2:2e:71:56:bd:c8:d2:2d:4b:cb:60:8d:
         45:cb:32:5d:a4:13:86:bf:f6:9a:3a:6b:fe:36:8f:8d:2a:02:
         9c:a2:bb:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:25:39 2026 by rpki-client