Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
File:                     3137322e38322e39312e302f32342d3234203d3e20323132333936.roa (raw, json)
Hash identifier:          yna3P3TaUE6lE0fBQGHNw6sNxcMK5PcD1q3KobGFtnw=
Subject key identifier:   35:A6:B6:A4:E7:AD:63:48:78:01:9D:9E:19:55:44:FC:27:14:F9:3C
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       4BDAD8886FC8F8A3AB8579B13B57B1ACCF4D168B
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa
Signing time:             Tue 14 Jul 2026 13:27:55 +0000
ROA not before:           Tue 14 Jul 2026 13:22:55 +0000
ROA not after:            Tue 13 Jul 2027 13:27:55 +0000
asID:                     212396
IP address blocks:        172.82.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:08:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:da:d8:88:6f:c8:f8:a3:ab:85:79:b1:3b:57:b1:ac:cf:4d:16:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jul 14 13:22:55 2026 GMT
            Not After : Jul 13 13:27:55 2027 GMT
        Subject: CN=35A6B6A4E7AD634878019D9E195544FC2714F93C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e9:3d:d6:fe:69:11:d4:d2:13:75:b8:b5:4b:
                    cd:29:40:fb:cd:67:9d:be:ea:ac:86:3a:1e:0a:71:
                    99:de:dd:95:5d:42:63:d8:b8:62:ec:47:6f:b1:3c:
                    be:04:7a:00:35:a3:f6:55:c6:21:e8:3c:da:6a:c5:
                    e8:c8:50:e4:ab:bf:61:aa:fc:8e:00:73:e5:95:68:
                    97:5a:11:29:0f:b4:2a:e5:1b:fe:c8:83:75:92:20:
                    34:9a:be:85:8f:15:40:72:af:81:3b:8e:7d:ff:77:
                    62:97:cc:78:1c:d6:3b:bd:ec:91:1d:97:f3:5c:3f:
                    f3:35:fe:49:48:ca:54:52:ed:b0:98:af:f3:4c:f6:
                    c9:0a:86:73:88:3d:73:fa:42:ed:32:71:6d:97:9f:
                    94:3d:4e:dc:29:39:a1:34:77:29:f8:e9:38:25:60:
                    45:5a:1f:19:67:de:60:3f:f7:f5:95:29:3f:67:70:
                    20:b1:06:89:aa:6d:44:02:7b:71:82:c3:fb:58:3a:
                    c2:71:d9:77:f2:3d:74:e5:bd:f8:2f:68:ce:50:b5:
                    ca:78:d4:73:f3:74:88:66:1a:a7:6d:9b:a0:5c:34:
                    e7:67:e6:89:b1:e5:ca:cc:63:c1:c9:ee:7d:0e:c2:
                    3f:73:c2:4d:9b:bd:3c:10:8e:ce:fa:e4:5b:fc:72:
                    94:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A6:B6:A4:E7:AD:63:48:78:01:9D:9E:19:55:44:FC:27:14:F9:3C
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39312e302f32342d3234203d3e20323132333936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:41:e4:80:f9:d4:88:02:e7:c5:17:f1:07:c8:b8:de:8d:ea:
         16:56:95:4a:04:50:f0:74:3b:a3:f2:04:8d:f3:ee:a2:49:9b:
         d6:87:13:34:c1:93:ee:ff:64:e6:70:f1:db:c8:d0:f4:b7:e4:
         7d:3f:48:3e:bc:0e:08:fb:b9:f1:18:4b:fd:39:bf:1c:a2:6d:
         dd:63:c3:3f:13:24:8d:a6:fc:9e:7e:5f:4f:e6:cc:55:d9:e2:
         5d:5a:8f:f1:b7:3f:0c:5f:08:98:d3:2e:92:9a:f9:54:2f:23:
         0e:39:f1:1f:db:7f:57:a5:ef:7c:cd:29:ab:55:fc:3e:6d:b9:
         04:48:7f:d0:21:f4:ba:f5:08:6d:a3:05:58:a0:6c:d4:66:df:
         87:1c:00:2e:89:2c:58:25:c6:ae:cf:1b:15:e7:17:68:df:22:
         b0:e6:27:21:a3:70:86:96:05:80:49:f5:2d:d0:c3:d8:70:a7:
         f8:89:55:e7:ff:f0:ff:80:e1:d8:86:2a:96:25:e8:d8:63:a8:
         a1:69:f7:d5:64:be:e7:c1:ad:75:cd:a0:fa:91:24:ff:e1:1d:
         0c:54:40:31:e8:df:32:0d:fa:2a:ff:94:6d:01:8c:8a:60:60:
         ec:e4:46:57:9f:f5:00:63:ec:64:32:62:5c:8e:43:f4:41:f9:
         20:2a:ae:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:49:56 2026 by rpki-client