Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132332e302f32342d3234203d3e20323134393632.roa
File:                     3231362e3132322e3132332e302f32342d3234203d3e20323134393632.roa (raw, json)
Hash identifier:          78MxqCGORmqR1v0k4Fn1vZH0cMRDg+8INizTnM5L+hg=
Subject key identifier:   8C:A9:41:31:5D:06:E1:E0:75:7D:3C:B2:D5:1E:79:CD:8B:D8:F3:9F
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       414B2D69BFE2DEC07C960A721C91A02132491426
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132332e302f32342d3234203d3e20323134393632.roa
Signing time:             Tue 12 May 2026 09:04:21 +0000
ROA not before:           Tue 12 May 2026 08:59:21 +0000
ROA not after:            Tue 11 May 2027 09:04:21 +0000
asID:                     214962
IP address blocks:        216.122.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 12:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4b:2d:69:bf:e2:de:c0:7c:96:0a:72:1c:91:a0:21:32:49:14:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May 12 08:59:21 2026 GMT
            Not After : May 11 09:04:21 2027 GMT
        Subject: CN=8CA941315D06E1E0757D3CB2D51E79CD8BD8F39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a1:1a:2b:82:ec:64:d2:7d:30:2a:93:da:af:
                    40:fb:08:6b:e8:a7:5f:1b:87:3f:ec:87:ea:bc:38:
                    d8:c8:91:37:ac:eb:e1:20:82:34:95:1c:a6:82:22:
                    5e:0e:7c:9a:6a:2e:7f:8f:83:24:63:57:4c:82:89:
                    46:af:f1:4d:44:65:36:ef:9e:73:1d:f8:a9:8a:a5:
                    dc:5a:14:27:e1:81:51:b8:81:af:d2:3d:2a:da:3f:
                    82:6c:4c:e0:25:46:aa:86:0c:f4:6c:73:c1:33:ae:
                    2d:b5:32:76:f3:81:0e:35:ac:73:02:a5:82:56:3f:
                    3f:3c:40:b3:29:b6:39:30:28:ed:39:18:88:6d:03:
                    9f:b4:31:d1:02:95:4b:e4:0e:26:70:6b:62:37:ab:
                    42:55:29:c4:1f:28:d4:b9:5f:a5:db:e8:a6:39:bd:
                    02:8e:c0:19:f4:50:9e:05:53:b9:9f:d3:8e:bc:62:
                    33:2f:69:08:f5:d7:47:af:09:49:c1:08:ec:7c:a1:
                    a7:71:ca:34:30:48:db:46:cf:ca:82:5b:6e:ea:a3:
                    7a:3b:dd:6f:f8:dd:a5:e4:27:c1:88:0a:91:85:a2:
                    08:07:d1:2a:69:b2:b8:d3:9d:d0:63:3e:49:be:0d:
                    37:dc:64:8d:46:ff:79:a9:d5:04:09:65:15:4e:0e:
                    cc:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A9:41:31:5D:06:E1:E0:75:7D:3C:B2:D5:1E:79:CD:8B:D8:F3:9F
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132332e302f32342d3234203d3e20323134393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:af:d3:3a:71:54:e9:91:82:1c:cc:d5:7f:91:2b:fc:3c:01:
         b1:8f:40:ec:e5:67:bc:8f:fa:f0:48:8d:6b:a7:98:1a:51:16:
         1a:a1:b1:cd:13:65:1a:90:2e:19:fc:e1:5a:f0:f9:cb:ca:32:
         22:7e:87:0b:84:2a:ec:ea:53:a9:43:47:05:c7:89:83:5a:cf:
         9e:26:f4:16:a5:9c:7c:c3:f9:7a:f2:4b:7e:ca:d6:eb:4e:4d:
         27:a5:8d:a4:98:a5:42:0c:3d:1b:d9:dd:85:67:5d:a9:f6:5d:
         63:1e:d8:ee:94:4b:df:0a:fd:d9:4e:1c:51:b8:21:a7:23:95:
         ec:9d:4b:ce:8e:01:36:2c:cb:83:73:21:36:e4:d2:67:cf:a8:
         f4:ea:ae:14:9d:45:ed:fc:df:c4:2e:91:3d:16:2f:6c:5f:ae:
         b4:8a:43:5b:42:fe:31:8d:c8:b6:c9:b5:4c:91:30:af:52:85:
         6b:c1:eb:22:1a:3a:a9:be:76:c7:e8:06:9b:34:1f:16:cb:89:
         c0:81:f3:9a:78:4d:f3:21:5b:93:ae:4d:c6:2d:54:58:90:1a:
         81:74:53:61:6f:ce:6a:d2:5b:41:ba:5a:31:96:02:c0:55:42:
         df:49:7e:43:e1:2c:52:f2:44:7f:54:55:24:98:65:be:02:d9:
         9e:4e:50:c0
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUQUstab/i3sB8lgpyHJGgITJJFCYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjYwNTEyMDg1OTIxWhcNMjcwNTExMDkwNDIx
WjAzMTEwLwYDVQQDEyg4Q0E5NDEzMTVEMDZFMUUwNzU3RDNDQjJENTFFNzlDRDhC
RDhGMzlGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqEaK4LsZNJ9
MCqT2q9A+whr6KdfG4c/7IfqvDjYyJE3rOvhIII0lRymgiJeDnyaai5/j4MkY1dM
golGr/FNRGU2755zHfipiqXcWhQn4YFRuIGv0j0q2j+CbEzgJUaqhgz0bHPBM64t
tTJ284EONaxzAqWCVj8/PECzKbY5MCjtORiIbQOftDHRApVL5A4mcGtiN6tCVSnE
HyjUuV+l2+imOb0CjsAZ9FCeBVO5n9OOvGIzL2kI9ddHrwlJwQjsfKGncco0MEjb
Rs/Kgltu6qN6O91v+N2l5CfBiAqRhaIIB9EqabK4053QYz5Jvg033GSNRv95qdUE
CWUVTg7MuwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFIypQTFdBuHgdX08stUeec2L
2POfMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzEzMjMyMmUzMTMyMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzQzOTM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYenswDQYJKoZIhvcN
AQELBQADggEBABWv0zpxVOmRghzM1X+RK/w8AbGPQOzlZ7yP+vBIjWunmBpRFhqh
sc0TZRqQLhn84Vrw+cvKMiJ+hwuEKuzqU6lDRwXHiYNaz54m9BalnHzD+XryS37K
1utOTSeljaSYpUIMPRvZ3YVnXan2XWMe2O6US98K/dlOHFG4IacjleydS86OATYs
y4NzITbk0mfPqPTqrhSdRe3838QukT0WL2xfrrSKQ1tC/jGNyLbJtUyRMK9ShWvB
6yIaOqm+dsfoBps0HxbLicCB85p4TfMhW5OuTcYtVFiQGoF0U2FvzmrSW0G6WjGW
AsBVQt9JfkPhLFLyRH9UVSSYZb4C2Z5OUMA=
-----END CERTIFICATE-----
Generated at Wed May 13 04:51:32 2026 by rpki-client