Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130382e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3130382e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          IgH2iiHcOpBh071FO8AqKLS/MEcP73N/K7ODlJbamgI=
Subject key identifier:   EE:D7:F1:57:90:27:12:31:CB:5E:7C:15:E9:34:3F:65:8E:05:8B:DE
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       1BD8123F7AA91C19F92854421AF93A978279A0C4
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130382e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:09 +0000
ROA not before:           Fri 01 May 2026 02:21:09 +0000
ROA not after:            Fri 30 Apr 2027 02:26:09 +0000
asID:                     5650
IP address blocks:        172.108.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:d8:12:3f:7a:a9:1c:19:f9:28:54:42:1a:f9:3a:97:82:79:a0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:09 2026 GMT
            Not After : Apr 30 02:26:09 2027 GMT
        Subject: CN=EED7F15790271231CB5E7C15E9343F658E058BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:94:ce:ce:b8:9a:db:9e:dc:ae:6c:b0:e2:36:
                    dd:0c:09:40:9b:49:55:3b:83:6e:92:33:95:54:a9:
                    48:35:f6:da:3f:66:d3:59:fd:69:51:79:0d:ac:5d:
                    92:10:f8:39:21:10:8a:d5:23:3f:57:ea:65:6a:3a:
                    ef:26:d9:37:2e:d0:09:e8:91:b7:08:bb:fa:04:8f:
                    4d:5f:61:ef:82:a8:2b:0b:50:af:f3:f3:1b:ac:aa:
                    70:b7:57:58:c8:b1:b2:4e:4e:99:b8:14:a2:43:fc:
                    da:7e:a1:c0:d0:7f:f6:e0:71:8c:38:67:0c:47:30:
                    1d:c6:f5:e6:85:81:94:1e:b7:5e:95:ba:7b:59:13:
                    6c:55:68:42:5d:f5:d3:f1:f1:8d:26:46:8a:82:e4:
                    34:94:7a:10:ce:83:27:fd:17:cc:98:7a:f7:f0:fe:
                    c0:9f:39:43:e7:35:a5:e8:8c:56:11:01:31:a7:34:
                    0a:4c:47:f6:d6:a9:2e:82:75:ed:07:08:8d:70:33:
                    5d:6b:3c:0a:84:d2:37:c6:ee:b8:00:13:68:f7:ab:
                    e1:a3:41:c9:8e:fe:03:87:2e:eb:a0:c2:14:b0:35:
                    30:a6:b1:09:d5:08:10:d7:c2:45:d1:44:76:ba:b6:
                    d1:9c:87:2d:99:be:02:0b:65:ac:35:7b:60:ec:b3:
                    60:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D7:F1:57:90:27:12:31:CB:5E:7C:15:E9:34:3F:65:8E:05:8B:DE
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3130382e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:3f:8a:0f:12:36:30:be:7c:ef:a2:f6:0b:55:ea:5c:6e:75:
         95:bc:62:3a:c0:a8:84:b3:13:13:d4:35:b2:4e:41:71:2c:af:
         d9:d6:ac:f4:6f:c1:5f:ae:ca:89:ee:0d:6a:9f:65:1a:f9:9e:
         37:d6:99:70:2f:75:36:9e:11:97:c5:7a:bc:a7:02:39:e3:cb:
         0a:05:6d:e3:3f:5b:09:cf:cb:4b:d4:29:39:cc:91:6c:19:32:
         0f:4a:38:af:9b:fb:71:f2:f3:c2:6f:86:44:25:1c:c0:ec:d7:
         56:30:9c:42:70:73:57:62:ea:5c:42:9d:b4:5c:51:c8:ff:d2:
         eb:19:47:4d:b6:54:73:6a:dc:8f:2a:03:75:6e:31:da:72:de:
         6c:10:7d:1e:fa:07:af:46:1d:36:f1:a3:73:b3:9e:e4:17:96:
         46:ca:bd:10:45:a5:8e:e7:8f:8d:99:26:a8:51:19:43:cc:f6:
         16:7b:41:9e:08:80:81:54:c1:15:ca:14:65:bb:fa:4a:94:ec:
         f8:ed:e8:e5:db:50:b5:43:f2:03:31:51:12:ee:e6:62:e9:df:
         1d:b8:7d:a3:23:f8:09:2f:51:16:72:cc:ed:cd:d9:92:43:67:
         61:32:9d:c1:78:ff:eb:a9:89:33:f3:af:ce:f3:2d:40:59:8c:
         2a:4f:cc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:08:02 2026 by rpki-client