Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32362e302f32342d3234203d3e2037303239.roa
File:                     3136322e3231372e32362e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          LMb2yDcUTxLjQJTkvsfYOdEczrjWYQS1I4rBSs9VEuE=
Subject key identifier:   13:78:B5:2F:6D:E2:10:03:9C:74:28:0F:08:8F:80:0C:C7:70:4F:C6
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       78FD45A79576806035E7106BBFF5F48FFF7CDD8C
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32362e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 11 Sep 2025 07:29:45 +0000
ROA not before:           Thu 11 Sep 2025 07:24:45 +0000
ROA not after:            Thu 10 Sep 2026 07:29:45 +0000
asID:                     7029
IP address blocks:        162.217.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fd:45:a7:95:76:80:60:35:e7:10:6b:bf:f5:f4:8f:ff:7c:dd:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Sep 11 07:24:45 2025 GMT
            Not After : Sep 10 07:29:45 2026 GMT
        Subject: CN=1378B52F6DE210039C74280F088F800CC7704FC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:52:8b:2f:d2:a6:6b:69:b0:69:bd:a4:76:7f:
                    81:01:f3:bd:36:83:41:72:fe:50:72:fa:d8:54:4b:
                    e6:38:22:7a:e2:c3:17:ca:66:d0:94:f0:7d:bc:c0:
                    a7:2d:b6:2e:0d:eb:57:50:d7:41:19:01:48:57:d2:
                    d4:97:d9:05:07:f2:55:11:e4:fa:76:6f:69:70:28:
                    ba:09:4c:83:9f:c0:42:b4:f1:12:58:21:4b:f9:9f:
                    98:29:0e:4e:59:67:3b:72:c9:b7:5a:1f:af:55:b1:
                    2d:c4:6a:ca:49:a3:5e:c1:88:f5:74:85:b7:ee:c9:
                    ec:79:4a:40:bf:9f:ef:bc:c3:6e:18:59:b5:eb:7b:
                    63:03:f6:5c:7d:0c:78:20:7c:23:3a:5c:f8:9c:3a:
                    50:d2:84:8d:d4:a6:8d:a6:7e:1e:67:3f:df:0f:9a:
                    48:a0:84:77:c5:f9:7a:91:d9:80:24:cb:f7:b6:37:
                    1e:1b:85:e7:77:09:f4:03:1a:b6:26:1d:ff:4b:c4:
                    87:6e:76:80:e8:26:67:98:f9:08:52:2f:cd:ab:69:
                    eb:65:ea:67:fb:07:cd:96:99:db:bc:79:76:29:97:
                    c0:f7:a4:63:19:be:19:89:71:fe:00:73:f5:ff:e9:
                    50:d1:ec:ee:0d:da:5a:a5:a6:48:ab:49:3d:d3:24:
                    95:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:78:B5:2F:6D:E2:10:03:9C:74:28:0F:08:8F:80:0C:C7:70:4F:C6
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32362e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:cb:77:57:2d:a1:76:c7:f1:73:42:53:fb:7d:85:0b:04:10:
         b4:f4:15:88:bf:97:55:02:a3:3a:6d:ea:4d:ef:af:c7:aa:01:
         ac:90:00:13:18:f1:88:9b:89:7a:ab:f1:df:9d:2d:35:12:99:
         80:91:fe:41:18:f3:ad:d5:c7:9b:28:6f:70:0d:4a:0d:70:3e:
         84:54:5f:4f:7e:2a:48:56:76:99:ab:a3:da:d9:af:56:42:30:
         e5:99:b5:b7:40:8d:71:76:7a:52:5f:a2:80:5c:61:89:83:0a:
         55:85:c1:a2:ff:fe:28:a8:40:59:fa:6f:db:6c:d3:d0:e0:52:
         59:9c:fd:de:6e:ee:0e:11:1a:b8:60:c5:9d:94:df:ce:cb:62:
         26:fc:84:2f:6e:7d:b7:27:84:a7:55:27:a8:3d:36:e6:9f:e8:
         a8:78:15:90:e1:8a:de:2a:48:ca:f1:c4:cb:b9:eb:66:ca:64:
         37:d0:dc:90:99:ae:93:fc:84:1c:22:75:a6:2f:45:11:29:00:
         54:11:69:2f:9d:f1:09:e7:d4:d0:43:00:48:8e:a4:45:08:83:
         39:44:73:b3:d1:74:61:39:3d:a6:c8:17:33:18:e1:ec:c1:bb:
         4b:49:c5:89:22:42:3c:9a:7b:b0:ce:f0:9d:47:51:8a:8b:a8:
         b7:de:00:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:29 2025 by rpki-client