Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131372e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130382e3131372e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          IoDg5e27caUKvmACx3no9eq+SM6HOm0PmgwWax1A1/8=
Subject key identifier:   DB:AF:BA:C4:1F:14:C8:97:95:02:08:47:01:7E:1E:A3:E7:93:CF:5C
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       34C8A0EAEAC7498954BF39E9475862B8092E622A
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131372e302f32342d3234203d3e2035363530.roa
Signing time:             Fri 01 May 2026 02:26:10 +0000
ROA not before:           Fri 01 May 2026 02:21:10 +0000
ROA not after:            Fri 30 Apr 2027 02:26:10 +0000
asID:                     5650
IP address blocks:        172.108.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 19:03:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c8:a0:ea:ea:c7:49:89:54:bf:39:e9:47:58:62:b8:09:2e:62:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: May  1 02:21:10 2026 GMT
            Not After : Apr 30 02:26:10 2027 GMT
        Subject: CN=DBAFBAC41F14C89795020847017E1EA3E793CF5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:6b:71:45:b4:b1:79:6c:cc:0d:81:11:96:
                    4a:1e:8b:03:78:48:42:68:88:51:65:c1:01:71:c2:
                    33:cf:91:b7:bb:a1:bc:fc:ab:75:71:e8:2c:7b:9e:
                    22:a6:44:e5:02:c6:92:26:5e:35:57:b6:45:fe:80:
                    0c:cc:c4:f9:77:9a:90:ee:90:27:29:63:c3:26:b2:
                    f5:86:06:78:c3:2a:46:09:d8:da:07:5d:6b:aa:88:
                    c2:e5:64:d9:c7:e4:36:b4:41:05:44:6c:7f:24:c0:
                    bc:24:ad:5f:27:4c:fa:21:4e:f4:73:b6:b1:5c:dd:
                    7f:8f:90:df:0e:19:f0:0b:ca:8e:fa:48:4b:d4:c2:
                    ff:e0:4f:c1:eb:f3:13:2b:c5:5b:8a:3e:a3:ea:8e:
                    83:b9:66:44:fc:5b:15:d3:5b:a1:90:57:73:27:dc:
                    ef:11:87:2d:b7:c0:03:43:4d:25:be:5d:eb:71:98:
                    e0:4e:8b:00:a1:3a:15:c2:a4:d7:ef:84:82:85:fb:
                    ed:76:ef:d3:8f:a0:aa:19:9b:e8:8f:3d:4d:1c:db:
                    ba:d9:64:87:eb:c2:9d:d7:5a:3c:99:56:ab:78:1a:
                    b1:e2:b4:34:86:40:88:1c:60:f2:4d:f3:7e:4b:e1:
                    50:3d:c3:cb:e9:42:db:95:78:fd:fb:ee:ff:31:60:
                    c1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:AF:BA:C4:1F:14:C8:97:95:02:08:47:01:7E:1E:A3:E7:93:CF:5C
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/3137322e3130382e3131372e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.108.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:97:83:6c:6e:70:1c:21:77:a4:17:73:e2:51:b9:8d:87:7e:
         e2:a4:e7:aa:99:6d:be:c5:b9:58:2b:31:16:e7:60:ed:ae:6d:
         05:10:8c:e6:64:6c:fb:76:b7:85:41:46:ab:89:cb:bc:e2:07:
         a2:22:10:a3:11:06:f9:5e:87:5c:5a:e8:11:e4:60:88:b7:49:
         c5:d4:94:a2:e5:b9:a4:be:1b:df:b4:f0:02:75:15:24:fa:5c:
         c9:72:33:62:4b:f3:70:d5:00:61:92:ed:4a:a1:bd:77:d2:56:
         20:92:68:f2:31:13:ec:5f:29:fd:3c:ef:97:51:78:7e:ca:8a:
         eb:cf:08:a4:9f:e8:7e:44:1d:1e:da:93:a0:ab:05:41:09:54:
         9e:fb:44:48:8a:b1:ef:fe:1c:13:8b:86:e7:7e:b9:19:89:35:
         ab:44:2b:58:42:ec:1d:e4:0f:37:ab:20:1a:01:f1:21:0e:4e:
         60:cb:c7:fe:01:9a:28:3d:59:47:d6:c8:6c:d7:90:90:39:2e:
         cc:25:ff:8b:e5:94:1e:a7:96:a3:09:31:b1:64:bb:9c:9a:96:
         6d:4c:da:31:7f:fd:34:3c:35:c8:60:3c:e0:ea:30:10:4c:13:
         48:7c:fa:b2:1d:8e:b0:df:cd:7e:22:2f:2d:47:5c:66:fe:48:
         2b:e4:b2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:09:23 2026 by rpki-client