Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323131343430.roa
File:                     36392e3136362e3232392e302f32342d3234203d3e20323131343430.roa (raw, json)
Hash identifier:          pDY29a3QSn6EOxzHbHVGN8uq2yxpA/wfH3LyLvNKPmU=
Subject key identifier:   2C:26:A6:3B:C1:01:BB:1E:BC:52:12:A1:64:67:60:9D:C2:07:8E:6D
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       75F762A3684189B9F73ADCEC5AF5A9E20616800E
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323131343430.roa
Signing time:             Fri 24 Apr 2026 12:36:00 +0000
ROA not before:           Fri 24 Apr 2026 12:31:00 +0000
ROA not after:            Fri 23 Apr 2027 12:36:00 +0000
asID:                     211440
IP address blocks:        69.166.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 16:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:f7:62:a3:68:41:89:b9:f7:3a:dc:ec:5a:f5:a9:e2:06:16:80:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: Apr 24 12:31:00 2026 GMT
            Not After : Apr 23 12:36:00 2027 GMT
        Subject: CN=2C26A63BC101BB1EBC5212A16467609DC2078E6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ee:39:c5:78:c1:06:e6:cc:49:67:fa:2a:81:
                    c0:67:03:61:42:b2:a3:e4:ed:be:48:d5:2f:54:c7:
                    62:da:97:ec:91:1c:a7:e9:35:8b:a9:ed:22:5a:7c:
                    ce:0e:b2:22:e7:a5:12:a1:28:a7:1c:3b:ed:43:97:
                    45:13:63:e5:47:db:a0:01:ee:63:a5:fd:ac:84:e9:
                    a5:b2:de:4a:6e:b3:20:19:ae:39:06:99:1c:33:62:
                    1b:16:37:54:06:43:cc:fe:c8:85:ea:13:10:0b:2f:
                    d0:64:bf:9b:a1:68:09:75:5e:4b:4b:19:6b:79:46:
                    ee:94:77:a0:b5:8f:50:09:70:aa:60:db:b3:a0:07:
                    8c:4f:98:62:e0:e9:4a:72:08:4a:d8:db:17:b4:4a:
                    72:ee:8b:fa:d7:4b:95:e0:52:c1:ba:11:06:17:62:
                    1d:95:be:b4:db:a4:c2:a1:a7:a8:97:26:0c:aa:47:
                    a0:78:c7:ae:4d:e1:0e:f6:52:77:33:ed:97:43:bc:
                    44:71:72:67:33:35:82:7b:10:78:43:c0:46:ad:04:
                    5f:dd:08:95:8d:7d:37:07:98:99:24:67:60:f9:79:
                    6d:1f:87:15:d1:52:8b:f3:fd:3e:f7:be:ab:d9:72:
                    1e:86:3f:a0:92:ac:d7:55:5f:f6:a9:9e:39:44:be:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:26:A6:3B:C1:01:BB:1E:BC:52:12:A1:64:67:60:9D:C2:07:8E:6D
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3232392e302f32342d3234203d3e20323131343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:05:21:d2:1f:12:b9:25:f2:9a:e0:63:cc:49:8a:15:61:07:
         e8:05:7b:e1:c9:e2:7a:36:49:fd:b1:2a:20:71:3f:bf:b7:df:
         4b:7f:a0:0e:5b:5f:7b:c3:dd:1f:41:d8:2d:ae:ed:de:ff:77:
         5d:c6:c6:8e:50:ff:85:48:9a:a4:12:82:d7:14:28:96:53:a4:
         b5:35:38:26:1c:2d:13:95:9f:b4:a9:d9:a5:8c:d9:fb:85:c2:
         87:eb:83:71:7c:91:a9:e6:f1:c1:cb:37:ec:e2:cb:80:99:af:
         2c:1a:c1:34:33:cb:5a:b2:34:ab:2f:58:17:11:94:54:04:d2:
         58:36:ef:97:9a:f7:19:ce:37:d0:20:db:44:9d:59:0b:04:45:
         b7:f5:2f:84:25:01:2d:c2:24:0c:e0:80:20:de:24:22:8f:3d:
         3b:de:9c:ca:3f:5e:ee:f0:ed:d7:bb:8f:8b:40:c7:e5:2f:82:
         b1:51:91:4d:c2:85:bc:eb:ba:60:25:3c:8e:29:60:0a:f8:48:
         24:49:db:8d:f3:3a:67:b3:43:d7:78:72:25:b5:76:6b:2b:0a:
         51:ce:80:c8:c9:25:1d:77:5e:6f:33:06:f1:5e:32:ec:4e:f3:
         a8:8f:98:86:f5:df:ed:a7:73:35:d5:6d:4e:3a:ae:9d:c2:b6:
         b1:da:b4:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:42 2026 by rpki-client