Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131352e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3131352e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          B4+CY12dEoUl8g72tnTyU/hFb9AnaJhLqvJKluOioWk=
Subject key identifier:   0F:33:93:80:FA:B1:23:92:18:DE:5A:BF:BE:43:40:94:66:AB:5B:00
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       7151BEFF665CEF46B58F0270A8A00601B128928A
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131352e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:12 +0000
ROA not before:           Fri 01 May 2026 02:21:12 +0000
ROA not after:            Fri 30 Apr 2027 02:26:12 +0000
asID:                     5650
IP address blocks:        172.108.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:51:be:ff:66:5c:ef:46:b5:8f:02:70:a8:a0:06:01:b1:28:92:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:12 2026 GMT
            Not After : Apr 30 02:26:12 2027 GMT
        Subject: CN=0F339380FAB1239218DE5ABFBE43409466AB5B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:ed:d5:b4:0a:fd:81:a8:54:61:08:f5:b6:
                    53:e3:cb:29:33:28:0a:6b:d5:7d:a5:23:90:d9:31:
                    c6:f0:ba:67:b6:9f:d0:d1:e8:4e:9c:6f:2d:d1:f2:
                    7e:8d:1a:da:df:55:0e:04:9c:b8:05:81:f4:b8:b5:
                    64:8a:3f:95:61:c6:a7:3b:82:5f:05:6a:f9:7e:e8:
                    51:20:fe:79:ff:c1:59:5b:1b:89:94:31:5c:52:a8:
                    1d:31:5f:33:25:b9:fa:a9:73:ef:64:d1:17:0f:83:
                    17:9f:4d:72:22:dc:16:53:78:d7:b9:6a:4a:a6:33:
                    2c:de:da:87:fc:28:dc:2e:f4:d1:fd:06:61:d6:95:
                    be:af:e1:35:a0:14:a2:a4:43:20:be:27:bf:04:4f:
                    f3:7c:86:76:56:59:b5:50:ba:36:c7:ca:48:75:b0:
                    48:48:c7:36:a5:6e:97:15:de:cf:ba:e4:35:e7:e5:
                    14:7e:96:cc:4e:86:81:fc:f6:d5:8c:67:cc:4f:b2:
                    32:e1:ae:cd:d4:fe:cd:7c:85:49:4a:6c:09:1b:e4:
                    6c:27:0c:c8:54:43:b6:37:87:d5:84:84:4e:5c:89:
                    9c:80:01:25:b4:cd:09:2b:ee:61:12:4a:b7:b9:3b:
                    78:5c:68:ad:52:28:6e:09:b2:28:33:3b:18:74:e5:
                    44:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:33:93:80:FA:B1:23:92:18:DE:5A:BF:BE:43:40:94:66:AB:5B:00
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131352e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:7e:14:b1:fd:7a:fb:98:02:bd:98:38:fc:ed:3e:23:ac:3c:
         84:5d:6f:3f:a9:08:5c:59:00:be:5f:f3:de:0a:64:68:a4:6f:
         21:d9:50:57:84:24:ab:a7:9c:ae:40:85:96:d3:c0:b8:66:0d:
         3a:c0:a5:c6:bf:0f:2d:d8:67:49:04:e8:61:8b:f2:33:3e:17:
         a5:33:a1:aa:c4:19:db:33:9e:98:20:90:58:ea:bc:7d:8c:cf:
         b0:24:86:a8:ad:1c:46:20:9a:c3:1e:0b:2f:61:aa:bf:0d:77:
         63:c5:f6:69:38:9b:fb:ea:17:e4:3c:b3:19:ff:3c:d0:ea:d7:
         8b:99:2b:57:9f:62:5b:53:81:e3:d4:c5:76:b5:99:eb:a5:66:
         8d:f7:f3:58:97:c4:a0:98:f1:99:36:10:38:6d:05:ec:cb:50:
         91:e2:b1:4c:53:c7:39:20:ea:6b:e7:01:e1:0a:a0:c3:07:98:
         ab:d1:62:ca:70:77:dd:a3:c4:44:a9:bf:5f:86:96:9d:48:77:
         cd:b7:8f:a1:a3:68:94:47:61:b4:96:b5:7d:7b:c4:76:93:8c:
         85:c6:fc:5c:92:31:06:0a:a3:c2:e7:cf:a0:43:27:7a:28:1f:
         e0:fc:e2:a0:92:25:e2:2f:84:32:a4:23:44:ad:7c:ea:2e:4c:
         3a:73:6d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:54:05 2026 by rpki-client