Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203236323836.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e203236323836.roa (raw, json)
Hash identifier:          U7yuYjDGMzjF4G0XJzP1lGU7ipxgRWBs+Lx37MwVlek=
Subject key identifier:   CA:03:FB:D9:84:93:3B:71:36:9C:F4:45:8D:EB:6A:D9:0E:AE:FA:17
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2B346719C096FAEE41B1967E4BF9427C2C3691F4
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203236323836.roa
Signing time:             Wed 25 Jun 2025 20:25:09 +0000
ROA not before:           Wed 25 Jun 2025 20:20:09 +0000
ROA not after:            Wed 24 Jun 2026 20:25:09 +0000
asID:                     26286
IP address blocks:        216.247.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 05:21:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:34:67:19:c0:96:fa:ee:41:b1:96:7e:4b:f9:42:7c:2c:36:91:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun 25 20:20:09 2025 GMT
            Not After : Jun 24 20:25:09 2026 GMT
        Subject: CN=CA03FBD984933B71369CF4458DEB6AD90EAEFA17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:34:62:51:f4:82:e5:1a:ff:91:e5:84:d0:3b:
                    e0:17:16:32:a9:e3:df:46:05:dd:0c:88:58:96:4e:
                    49:f7:17:4c:c5:6e:27:f2:78:99:09:a3:a4:6d:58:
                    e9:cb:0b:6e:33:08:01:c3:1b:35:55:b0:47:b2:30:
                    42:f7:eb:62:b3:1c:87:a8:e4:28:b1:87:56:d0:c3:
                    53:da:b9:26:b3:d4:da:1d:f7:79:80:18:69:ff:0e:
                    88:16:24:2b:4d:4c:07:1c:60:45:33:81:e3:69:6c:
                    2a:84:62:0b:ea:a1:08:c4:da:ca:09:5e:49:51:20:
                    35:01:77:fa:97:fb:77:0f:c3:7f:1c:b4:0e:81:7f:
                    47:07:dd:28:bf:f9:17:7d:10:b4:69:9f:d8:6f:e0:
                    3f:8f:07:6e:66:ee:8b:9f:39:85:24:5a:ae:4b:d7:
                    31:04:c7:23:f3:70:c6:1b:8a:3a:7b:63:92:79:38:
                    3e:d7:42:de:64:ca:aa:2e:81:cf:a0:41:54:5f:2f:
                    4a:1b:19:7f:1b:3c:e3:c3:0e:88:e3:c8:09:29:6b:
                    34:a2:43:f3:c1:7b:f7:00:cf:7a:69:92:51:5c:af:
                    d7:36:83:7a:50:b2:cc:f2:db:2d:cf:b9:5d:e0:1b:
                    a6:dd:39:40:20:3a:88:a2:7a:86:66:21:a5:b7:02:
                    6c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:03:FB:D9:84:93:3B:71:36:9C:F4:45:8D:EB:6A:D9:0E:AE:FA:17
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203236323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:47:d5:8d:36:b3:b6:78:b5:f9:78:b4:18:a9:54:8b:47:7d:
         95:c2:c8:28:48:ed:34:50:4a:8d:d7:5d:b1:af:e5:8c:fa:4f:
         ab:02:3f:d7:38:74:67:f7:e7:51:3d:16:1f:8e:0f:1b:98:cd:
         62:08:a9:ef:3f:bc:6b:bf:02:cd:d7:a9:ff:74:ad:6e:fd:51:
         c3:95:c0:50:49:b5:5a:9b:cf:b5:a1:d7:60:82:68:ab:4b:38:
         14:49:a4:b1:6d:dc:30:6b:53:43:d1:d0:4d:38:b8:9d:29:8c:
         34:28:20:e9:b1:91:18:15:b5:f9:36:b8:1b:5b:99:6a:fd:27:
         9e:f4:1e:e2:c0:6d:1d:ad:21:b0:bf:f2:b9:1f:b1:bf:4c:02:
         fe:62:02:a5:8c:cb:00:e8:ed:64:70:6d:75:33:08:58:2b:fc:
         9d:dd:e5:42:04:87:2c:02:2a:c1:9e:b6:60:33:0e:7d:20:1d:
         a5:f8:ee:2b:f3:99:69:b9:ef:6e:f4:fc:57:8d:be:93:3d:e9:
         8d:5a:08:87:ad:e3:dd:c4:d2:da:7b:77:0e:0f:e5:59:e5:0b:
         86:11:64:0d:8e:7e:c9:73:9c:5b:2d:de:88:b4:4c:99:c1:51:
         37:1d:ea:c2:1d:cb:16:fb:04:da:17:48:52:4e:f6:03:66:77:
         87:58:bf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:24:29 2025 by rpki-client