Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3135352e3130332e34392e302f32342d3234203d3e2033323830.roa
File:                     3135352e3130332e34392e302f32342d3234203d3e2033323830.roa (raw, json)
Hash identifier:          pNypWJMoUUCpF/y+rxaBV7SwOuqPLs3VlBvlJxHS3Ow=
Subject key identifier:   0F:F4:23:C8:AF:40:65:21:6B:62:47:17:EB:46:49:F7:DB:41:06:8C
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       780380F0320E2F9694C40D4FD3B609C2EE56D2A9
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3135352e3130332e34392e302f32342d3234203d3e2033323830.roa
Signing time:             Tue 07 Jul 2026 20:00:02 +0000
ROA not before:           Tue 07 Jul 2026 19:55:02 +0000
ROA not after:            Tue 06 Jul 2027 20:00:02 +0000
asID:                     3280
IP address blocks:        155.103.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:03:80:f0:32:0e:2f:96:94:c4:0d:4f:d3:b6:09:c2:ee:56:d2:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jul  7 19:55:02 2026 GMT
            Not After : Jul  6 20:00:02 2027 GMT
        Subject: CN=0FF423C8AF4065216B624717EB4649F7DB41068C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a4:ce:81:ea:c5:d2:4a:b5:ab:f7:e8:71:d4:
                    08:cc:c9:00:df:e7:9b:61:af:1c:e5:98:d2:3e:da:
                    82:11:9d:0e:fa:79:aa:92:bc:e9:56:55:1c:6e:8f:
                    c0:76:bc:ee:a5:75:6e:12:08:7f:91:0d:27:83:63:
                    af:f6:a5:9e:14:8b:d9:92:40:c0:88:e9:8d:38:e5:
                    07:1e:f4:1b:4c:2a:bf:05:43:31:34:4d:3a:bf:5b:
                    7e:74:2b:68:0e:77:b8:2f:5b:70:c9:a1:12:79:5a:
                    aa:55:59:15:b8:f4:b5:ac:2c:98:f6:d7:f7:44:39:
                    48:85:0c:e5:24:7f:4a:e3:38:76:d4:8f:1a:66:97:
                    16:c9:5a:1f:80:2c:3f:01:08:83:c4:36:4e:7b:b4:
                    64:32:90:ee:13:b3:de:9c:b6:c8:b8:4c:d8:c2:cf:
                    36:5a:de:cb:e9:b4:58:86:b6:d2:47:73:ea:ad:4d:
                    9f:13:78:fe:89:34:50:24:52:5a:0f:f4:50:24:d2:
                    7d:84:a0:c9:61:87:90:c8:14:ab:a5:69:14:cf:56:
                    09:1a:39:7c:6e:1a:62:2c:72:f9:e6:7d:04:95:4a:
                    9e:b3:bf:ec:f5:66:ac:1e:96:02:7f:35:4c:30:c8:
                    2e:3c:80:01:40:68:64:c1:29:18:8b:75:8d:b6:a2:
                    7b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:23:C8:AF:40:65:21:6B:62:47:17:EB:46:49:F7:DB:41:06:8C
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3135352e3130332e34392e302f32342d3234203d3e2033323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.103.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:f3:25:13:6f:48:14:4e:aa:0c:28:5d:1b:2f:7f:26:d8:eb:
         c3:02:74:0e:75:6c:32:d9:5c:82:dc:3d:dd:f3:c1:31:6a:6b:
         02:f1:62:3b:d7:c8:f6:9b:5a:89:15:20:b1:3b:87:7e:86:d4:
         d4:22:4d:65:e4:f2:ec:0c:85:8d:cb:0d:ab:19:73:82:51:f3:
         7d:a6:9e:6a:03:c0:c9:40:4e:af:89:70:d1:13:8a:0c:47:09:
         28:5a:92:62:59:81:c8:4b:09:46:e1:75:c5:5b:c8:da:cb:f5:
         37:bc:2e:11:09:25:b1:be:f1:37:f7:f9:98:5d:28:9a:b0:de:
         bf:54:2e:02:4b:ce:48:2b:ea:e6:bf:2e:65:13:38:44:62:8e:
         7f:f6:26:c2:28:b7:f4:33:16:d8:0b:66:1f:cb:a2:94:e8:6e:
         5a:af:ed:db:90:bc:bc:bd:7a:b6:1f:19:f3:0f:52:04:08:51:
         7b:0b:2c:c7:59:9d:a9:b4:ae:ce:75:d3:d8:72:0e:62:22:f1:
         c3:8d:2f:7f:73:0a:a3:28:fc:d0:b1:89:62:49:a9:d4:84:f9:
         26:cf:24:dd:44:ec:98:91:6d:7c:df:f4:fc:7b:be:7b:74:07:
         6d:29:17:3b:ed:27:63:33:90:fe:6e:f2:27:01:fb:e8:b6:88:
         6a:96:03:95
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUeAOA8DIOL5aUxA1P07YJwu5W0qkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMDk4NWVhNTBkZjU0ZTc5NWE0YmUxNGFkNTE4OGE4ZTUy
ODczNzg3MDM5YmI2YjI3YjIwHhcNMjYwNzA3MTk1NTAyWhcNMjcwNzA2MjAwMDAy
WjAzMTEwLwYDVQQDEygwRkY0MjNDOEFGNDA2NTIxNkI2MjQ3MTdFQjQ2NDlGN0RC
NDEwNjhDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KTOgerF0kq1
q/focdQIzMkA3+ebYa8c5ZjSPtqCEZ0O+nmqkrzpVlUcbo/AdrzupXVuEgh/kQ0n
g2Ov9qWeFIvZkkDAiOmNOOUHHvQbTCq/BUMxNE06v1t+dCtoDne4L1twyaESeVqq
VVkVuPS1rCyY9tf3RDlIhQzlJH9K4zh21I8aZpcWyVofgCw/AQiDxDZOe7RkMpDu
E7PenLbIuEzYws82Wt7L6bRYhrbSR3PqrU2fE3j+iTRQJFJaD/RQJNJ9hKDJYYeQ
yBSrpWkUz1YJGjl8bhpiLHL55n0ElUqes7/s9WasHpYCfzVMMMguPIABQGhkwSkY
i3WNtqJ7pQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFA/0I8ivQGUha2JHF+tGSffb
QQaMMB8GA1UdIwQYMBaAFBjAkk0jHaMBlRYLJe7mMn60Awb4MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxNzMzYzVjNWY2YjViLzAv
MThDMDkyNEQyMzFEQTMwMTk1MTYwQjI1RUVFNjMyN0VCNDAzMDZGOC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzcyMjViNDE1LThhZTAtNDUyMy1iMzdmLTc0ZWQ3ODA2NzZhYS8wOTg1
ZWE1MGRmNTRlNzk1YTRiZTE0YWQ1MTg4YThlNTI4NzM3ODcwMzliYjZiMjdiMi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MTcz
M2M1YzVmNmI1Yi8wLzMxMzUzNTJlMzEzMDMzMmUzNDM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzMjM4MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACbZzEwDQYJKoZIhvcNAQELBQAD
ggEBABvzJRNvSBROqgwoXRsvfybY68MCdA51bDLZXILcPd3zwTFqawLxYjvXyPab
WokVILE7h36G1NQiTWXk8uwMhY3LDasZc4JR832mnmoDwMlATq+JcNETigxHCSha
kmJZgchLCUbhdcVbyNrL9Te8LhEJJbG+8Tf3+ZhdKJqw3r9ULgJLzkgr6ua/LmUT
OERijn/2JsIot/QzFtgLZh/LopToblqv7duQvLy9erYfGfMPUgQIUXsLLMdZnam0
rs5109hyDmIi8cONL39zCqMo/NCxiWJJqdSE+SbPJN1E7JiRbXzf9Px7vnt0B20p
FzvtJ2MzkP5u8icB++i2iGqWA5U=
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:02:34 2026 by rpki-client