Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3231332e302f32342d3234203d3e2032393134.roa
File:                     36392e3136362e3231332e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          0f1oHGWacN8DfV17pvc0J0WYA52dmkshcRj4BwTlnws=
Subject key identifier:   3F:E5:9B:2A:10:A9:50:16:67:D0:03:82:DD:62:31:92:CA:EC:0E:0D
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       2EAFC9546004E59C795A522479B33D4CED4A6896
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3231332e302f32342d3234203d3e2032393134.roa
Signing time:             Tue 24 Mar 2026 14:27:21 +0000
ROA not before:           Tue 24 Mar 2026 14:22:21 +0000
ROA not after:            Tue 23 Mar 2027 14:27:21 +0000
asID:                     2914
IP address blocks:        69.166.213.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 10:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:af:c9:54:60:04:e5:9c:79:5a:52:24:79:b3:3d:4c:ed:4a:68:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Mar 24 14:22:21 2026 GMT
            Not After : Mar 23 14:27:21 2027 GMT
        Subject: CN=3FE59B2A10A9501667D00382DD623192CAEC0E0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:92:b1:ac:20:bf:46:ff:fb:af:56:76:eb:58:
                    ab:75:c2:eb:ad:cc:32:99:b4:06:2f:d2:69:9a:17:
                    74:56:db:13:64:f0:89:86:6c:94:07:79:a6:10:f7:
                    60:b0:38:e2:fb:9a:a6:d9:b8:41:88:b2:02:91:1e:
                    e6:1e:ae:21:87:d7:52:b3:fd:49:86:d3:af:c6:d7:
                    b6:a4:02:b7:59:3b:bb:26:58:bc:36:6b:73:31:8f:
                    7f:f8:44:c6:32:79:17:75:dd:a3:61:33:c1:2e:81:
                    c4:e0:12:16:b2:f5:71:1d:d7:74:b0:68:26:6f:76:
                    aa:68:e5:de:41:b7:87:e2:f8:1b:f8:49:22:57:9b:
                    39:0d:26:2c:41:e4:73:9c:b3:8c:be:ff:13:3d:0c:
                    09:26:54:db:95:0a:65:1a:8c:72:19:a2:d5:09:18:
                    63:f4:70:5c:70:70:0a:40:ac:4f:56:b6:92:40:d4:
                    80:e0:29:ad:64:29:7d:45:1e:f9:4d:b2:e5:56:be:
                    1a:04:d5:da:ed:2b:30:01:12:52:54:72:4a:21:f6:
                    45:6c:f0:14:43:83:08:99:5a:cc:ca:5e:77:a1:cc:
                    9c:d6:30:04:16:b4:19:73:e3:7c:e6:70:2d:e0:f1:
                    ba:5d:c2:d4:00:c5:f9:8e:0c:ed:ed:dc:ec:1f:ba:
                    58:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E5:9B:2A:10:A9:50:16:67:D0:03:82:DD:62:31:92:CA:EC:0E:0D
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3231332e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:c9:d7:b5:93:50:31:5a:34:19:62:9c:3b:d6:08:3f:c6:7b:
         81:3e:a5:1e:09:86:8f:2f:8b:43:ba:c7:60:3f:f5:b3:cf:92:
         89:ac:df:f0:ea:bf:a3:46:7a:16:21:15:1b:7e:11:75:ef:2e:
         89:56:31:0b:f1:ef:72:de:92:ca:dd:29:fe:0d:b0:c6:f3:e0:
         0a:b9:26:2a:71:f5:ac:c8:96:40:15:d9:d1:86:2f:9e:69:d5:
         2b:8a:8d:c8:a8:f8:14:e5:31:ab:b5:c8:34:5b:5c:19:07:8b:
         57:cb:f7:62:59:23:fc:7d:40:82:cb:2a:75:8d:1c:a0:a0:77:
         ee:ea:37:60:84:bb:18:39:c4:e3:ee:5f:14:59:cf:ca:48:f8:
         6a:75:5d:28:32:a9:0a:43:7d:42:59:d8:58:6f:95:75:41:71:
         b1:fd:13:d0:da:c2:64:ef:ca:f4:fc:ee:78:6f:c2:6c:02:df:
         e1:ad:92:06:6b:31:d1:80:2b:6a:cd:84:93:f9:96:ce:91:5b:
         4a:4b:e7:59:9c:be:60:48:93:e5:38:e2:27:79:15:57:0f:57:
         88:52:0b:a2:06:5e:b5:58:16:7f:e7:4f:45:c5:29:5f:61:11:
         ed:ed:c4:df:80:66:3e:6d:b7:aa:54:3a:6d:34:a7:f1:9f:1c:
         75:1a:66:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:30:43 2026 by rpki-client