Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233382e302f32342d3234203d3e203332373830.roa
File:                     3139392e3138382e3233382e302f32342d3234203d3e203332373830.roa (raw, json)
Hash identifier:          gq3sRgWl5GUjWJKwD78JL3x1/kY6X+4NjTHm9GooBFg=
Subject key identifier:   58:D6:06:19:7F:70:C3:D7:01:7E:F2:A4:60:FB:7B:85:B1:F2:D2:2C
Certificate issuer:       /CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
Certificate serial:       29E885FA5DC505B35AF06FE00A8588ABCED40927
Authority key identifier: CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233382e302f32342d3234203d3e203332373830.roa
Signing time:             Thu 15 Oct 2026 20:36:20 +0000
ROA not before:           Thu 15 Oct 2026 20:31:20 +0000
ROA not after:            Thu 14 Oct 2027 20:36:20 +0000
asID:                     32780
IP address blocks:        199.188.238.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 10:23:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e8:85:fa:5d:c5:05:b3:5a:f0:6f:e0:0a:85:88:ab:ce:d4:09:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
        Validity
            Not Before: Oct 15 20:31:20 2026 GMT
            Not After : Oct 14 20:36:20 2027 GMT
        Subject: CN=58D606197F70C3D7017EF2A460FB7B85B1F2D22C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2c:a9:29:06:18:b2:57:de:c3:6e:e5:d3:78:
                    d5:19:21:23:d4:e7:f2:3a:60:4a:95:50:77:bf:a0:
                    4d:d3:23:34:1d:7e:c0:ed:54:45:0f:c4:59:d9:04:
                    cd:6d:9f:02:02:59:a9:00:54:df:f2:74:f4:00:5a:
                    c7:a0:45:98:a3:74:be:59:4f:90:0e:f8:5a:58:36:
                    23:a8:57:20:cb:e7:82:1f:bf:c9:57:ba:77:72:4a:
                    8b:29:0a:18:57:1a:7a:27:5f:2a:8c:97:8b:26:ea:
                    1f:69:c9:76:2b:9f:64:48:14:78:a1:c8:c3:f0:e9:
                    0c:7e:8d:a7:ad:3c:c9:1f:45:28:10:89:95:c8:0b:
                    de:30:1f:3a:87:c6:7d:f7:89:11:cf:1f:6f:38:0e:
                    11:fa:60:3b:14:39:be:6e:8c:55:64:23:05:46:6c:
                    18:0a:88:c7:ed:ee:c4:63:5f:13:1c:f2:25:4a:20:
                    2a:ed:7a:82:21:a9:15:61:50:50:f1:d3:24:fc:f8:
                    bd:2c:02:fc:83:7c:61:81:ec:e7:8d:fc:5c:bf:ab:
                    b3:8f:a1:3e:b7:cc:14:f4:99:3b:cd:96:ea:93:fc:
                    7d:86:82:71:1a:aa:92:cf:ed:2a:13:e2:e2:cd:f7:
                    2c:02:e1:1b:e5:c2:63:21:cc:c1:b3:2f:b5:14:97:
                    73:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D6:06:19:7F:70:C3:D7:01:7E:F2:A4:60:FB:7B:85:B1:F2:D2:2C
            X509v3 Authority Key Identifier:
                keyid:CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/3139392e3138382e3233382e302f32342d3234203d3e203332373830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:2d:19:d7:fd:00:ff:06:ba:38:2f:19:2e:79:b6:71:34:df:
         1b:5d:eb:5e:25:f1:f4:87:13:9f:7f:21:fb:f6:b1:02:1a:8a:
         2e:3a:52:db:a2:ca:30:dc:df:f4:9e:6e:d9:19:eb:68:ca:98:
         ed:80:a1:22:c6:8c:d0:d1:f9:fb:56:9c:1e:da:60:07:71:64:
         ff:25:a3:08:f9:77:f3:44:b4:03:cf:eb:97:3e:a4:1f:65:12:
         fd:fc:a3:64:76:d5:8a:2f:ef:14:c9:ad:cb:12:a6:34:fe:7c:
         0b:52:d3:1a:90:49:3b:a5:31:9b:ac:ff:81:73:14:04:1b:b4:
         2c:e4:63:32:6f:94:3f:56:44:37:52:e7:53:7e:2f:00:99:b2:
         68:ae:77:2c:7c:fa:5c:76:08:78:de:0e:07:60:06:6b:69:22:
         9e:0c:e4:f2:c2:1b:c2:9c:d3:cf:88:54:8b:9f:3c:20:8f:15:
         8b:6d:e1:8a:c3:23:80:01:ad:70:f3:25:7b:c6:4f:96:bb:ef:
         67:0f:84:1e:81:1c:52:8e:ac:6e:b1:e4:bc:14:08:b7:1a:41:
         69:cb:19:57:64:f2:32:a1:f3:bd:a5:58:30:2c:49:58:ae:ad:
         d3:31:9b:4a:0a:9b:9d:ac:7d:1f:49:ea:b6:09:fe:ff:c8:78:
         fa:8e:d4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:03:50 2026 by rpki-client