Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e2037303138.roa
File:                     36392e3136362e3230352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          k7ENtJFR3n9+sOF93x/z2Y/l+gisShYpnu1nzizGATM=
Subject key identifier:   F4:9A:39:85:94:18:3B:AB:B2:0F:10:6E:F2:78:5A:ED:1B:0E:FC:B9
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       3258E10F79E77AD831B6BFE5677D66EF956B3264
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e2037303138.roa
Signing time:             Thu 19 Mar 2026 18:35:54 +0000
ROA not before:           Thu 19 Mar 2026 18:30:54 +0000
ROA not after:            Thu 18 Mar 2027 18:35:54 +0000
asID:                     7018
IP address blocks:        69.166.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:58:e1:0f:79:e7:7a:d8:31:b6:bf:e5:67:7d:66:ef:95:6b:32:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Mar 19 18:30:54 2026 GMT
            Not After : Mar 18 18:35:54 2027 GMT
        Subject: CN=F49A398594183BABB20F106EF2785AED1B0EFCB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:27:f6:09:70:3b:e6:00:b6:16:e8:16:fd:92:
                    71:3a:c9:3d:62:b7:d4:53:ed:67:a5:ef:ef:6b:23:
                    75:8e:9d:01:20:c5:b7:5a:d6:0e:51:c5:f0:13:1a:
                    59:08:88:11:e7:2e:61:41:e0:4b:f7:1d:ea:b5:9e:
                    14:d3:9b:97:09:03:09:24:47:e4:f7:48:ae:eb:fb:
                    ca:0e:f4:fc:87:42:ad:53:08:33:10:e1:e8:4a:6c:
                    25:b3:04:0b:bb:78:5c:85:0f:b2:80:5b:ce:84:a5:
                    3f:bc:e8:1e:76:d6:0d:d8:5f:d0:66:79:29:27:50:
                    d8:80:1a:86:d4:80:a6:d1:92:ab:e1:31:38:71:4f:
                    71:c8:99:e6:f5:68:95:7d:13:1d:00:ec:71:2d:48:
                    37:3c:9e:07:4d:85:ae:16:bf:26:d2:f2:a9:fa:e8:
                    74:02:59:dd:92:39:92:b6:c7:89:c6:26:d3:86:fb:
                    42:db:d0:88:75:32:5e:61:8f:0f:d5:17:60:ce:38:
                    01:a6:db:4c:5e:e5:8f:fc:3a:e2:bd:d8:f2:59:43:
                    82:c4:66:0a:b4:c9:9d:7f:f9:41:de:a1:d1:73:f3:
                    26:ea:0d:1a:cc:49:a9:d3:b6:62:1f:45:a3:6f:da:
                    97:9f:1e:c9:a6:9e:16:17:2d:fe:59:91:ff:8f:ee:
                    9a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9A:39:85:94:18:3B:AB:B2:0F:10:6E:F2:78:5A:ED:1B:0E:FC:B9
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3230352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:80:9b:09:9a:42:52:f5:bc:3e:a2:28:82:ab:72:a8:44:af:
         03:40:9c:6a:47:fa:75:7f:c2:14:7a:a2:41:4c:8f:36:03:4d:
         f6:55:94:90:85:3a:ea:68:5d:1b:f5:b8:bc:e5:e8:d4:69:cd:
         cc:48:f1:f9:95:ca:aa:2f:ff:42:eb:5b:ae:d8:c2:fa:c8:30:
         42:0f:0a:35:5d:bb:72:4c:78:1e:52:76:34:a9:6b:d3:f0:31:
         ff:e2:47:8c:99:bf:16:12:3a:92:a8:c0:1e:ed:b0:69:f9:68:
         f5:95:69:73:b7:b1:1d:43:80:ad:8d:28:05:f8:bf:44:4d:7b:
         b2:82:ea:7e:98:a6:0f:07:eb:e1:3a:91:b1:47:66:80:de:64:
         2f:11:c8:1a:89:68:72:97:1e:ea:f2:0b:d1:69:af:ac:cb:d7:
         10:4e:99:88:c5:df:e8:69:6a:fe:f4:9e:8d:69:dd:c9:60:bd:
         d3:92:69:59:04:30:58:38:b8:9f:b3:1c:05:4a:49:46:44:fd:
         9e:49:e2:f4:0f:8e:95:48:35:2b:9c:28:11:55:2b:11:7d:30:
         32:df:e4:31:be:62:f4:a2:1b:43:ef:5e:29:7e:95:24:93:4c:
         c6:20:dd:10:ba:02:cd:6c:0d:08:bb:64:77:66:ab:49:bd:8a:
         23:8c:7e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:13:21 2026 by rpki-client