Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132362e302f32332d3234203d3e20313532333234.roa
File:                     3231362e3132322e3132362e302f32332d3234203d3e20313532333234.roa (raw, json)
Hash identifier:          NuRwYRhiC9rJmKnLjUrn64nLLEc4lYQ+p6YOVcAcFJ8=
Subject key identifier:   7B:00:9F:30:3A:E7:10:EF:1C:6E:19:ED:28:FA:29:D0:D5:64:D1:73
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       17DCA61B6DFA95B7E0B7DA55E225776C0E297E56
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132362e302f32332d3234203d3e20313532333234.roa
Signing time:             Mon 04 May 2026 14:25:05 +0000
ROA not before:           Mon 04 May 2026 14:20:05 +0000
ROA not after:            Mon 03 May 2027 14:25:05 +0000
asID:                     152324
IP address blocks:        216.122.126.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 12:34:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:dc:a6:1b:6d:fa:95:b7:e0:b7:da:55:e2:25:77:6c:0e:29:7e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: May  4 14:20:05 2026 GMT
            Not After : May  3 14:25:05 2027 GMT
        Subject: CN=7B009F303AE710EF1C6E19ED28FA29D0D564D173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d1:c9:6f:df:8f:07:62:0c:f7:f5:b5:67:78:
                    fd:c7:7a:c2:70:2b:7e:d2:9d:bf:cc:a6:39:65:86:
                    99:4e:cf:4b:9f:17:6b:45:86:54:96:bb:f9:99:3b:
                    2e:a6:a9:2e:c5:f3:fe:d9:c9:66:09:10:fb:9c:bd:
                    be:dc:4d:02:f1:70:0f:52:a8:84:a7:08:ae:dd:02:
                    9b:3e:86:41:88:1b:24:5d:6b:94:bd:03:16:ee:41:
                    03:da:24:52:7a:95:78:02:b0:12:67:d2:90:6d:6f:
                    7c:8f:ff:0b:db:50:ec:29:18:c1:bb:8f:89:77:82:
                    e3:6b:26:e7:81:2b:b9:80:85:25:ae:e0:02:c5:aa:
                    06:05:3b:72:10:b1:11:b3:f2:68:a2:60:3d:1a:62:
                    89:3d:6a:68:58:f0:aa:dc:3b:ef:d5:99:82:2e:03:
                    f5:f8:e9:08:45:a8:43:32:8b:d8:16:f3:4d:58:e0:
                    20:6e:21:54:31:c4:a9:79:ce:9c:b4:fb:36:49:bd:
                    b9:b8:76:9b:26:4e:3b:d1:41:37:ba:75:cb:3f:e3:
                    7c:86:a5:68:09:04:0e:48:d1:03:31:05:0d:7e:23:
                    2f:3b:e3:a7:a4:56:47:26:e9:6f:89:ac:e8:50:95:
                    c1:7b:b1:bd:a8:7d:3e:c2:54:f6:46:f7:1b:a7:d9:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:00:9F:30:3A:E7:10:EF:1C:6E:19:ED:28:FA:29:D0:D5:64:D1:73
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132362e302f32332d3234203d3e20313532333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:17:53:6b:9c:43:2d:8a:ef:14:d9:2f:e2:b3:f9:49:62:0d:
         e9:8b:99:15:73:39:f7:f1:4b:3c:4c:32:5c:0b:50:c8:b1:31:
         ea:3a:45:23:47:47:c1:71:ac:76:bc:06:47:e9:aa:0f:87:e4:
         2a:e7:a6:e6:f7:75:ba:b6:cb:0d:1f:9c:ca:98:33:ea:2a:22:
         ed:d7:e6:cc:fa:44:4d:53:bd:c1:6a:b6:33:85:b4:85:5c:8e:
         59:a4:bc:9d:e6:1d:56:0e:89:53:3f:16:d6:41:34:c3:e3:63:
         00:94:12:2f:34:5e:93:dd:3c:b4:6e:7b:b5:68:d2:67:64:9a:
         cd:26:72:2c:2c:ef:c3:c8:dc:e3:58:85:d5:ab:03:f0:d3:20:
         54:bf:b0:af:12:cb:f7:bd:e8:1f:a5:d3:66:12:a3:ec:ea:9c:
         84:8f:e9:40:44:80:e6:a9:39:79:92:0f:46:c1:fc:a5:07:92:
         71:30:e0:5b:d1:a3:5c:0a:09:1a:94:18:87:d9:7d:4f:73:db:
         33:62:fd:a8:c1:5a:c8:e5:9c:28:8b:c2:91:c9:60:09:c3:19:
         71:99:d4:3b:05:69:67:79:69:2d:e0:33:1b:a3:f1:73:21:d1:
         dc:d1:1e:a3:cc:7c:50:79:93:84:27:f2:bf:30:66:63:01:6a:
         31:85:e9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:26:18 2026 by rpki-client