Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e203236303432.roa
File:                     3230392e38372e3136382e302f32342d3234203d3e203236303432.roa (raw, json)
Hash identifier:          /Ttc8M9Do6Q+NYd5cRvU9SBCrcMyXcNJgKaf9Sbg84s=
Subject key identifier:   FC:8D:B6:9A:95:05:26:39:32:BC:E4:B5:10:29:D9:20:CD:E9:3A:DD
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       716500800577B034CECB226CB2A0FF6F2992D503
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e203236303432.roa
Signing time:             Fri 20 Mar 2026 15:14:24 +0000
ROA not before:           Fri 20 Mar 2026 15:09:24 +0000
ROA not after:            Fri 19 Mar 2027 15:14:24 +0000
asID:                     26042
IP address blocks:        209.87.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 19:56:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:65:00:80:05:77:b0:34:ce:cb:22:6c:b2:a0:ff:6f:29:92:d5:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Mar 20 15:09:24 2026 GMT
            Not After : Mar 19 15:14:24 2027 GMT
        Subject: CN=FC8DB69A9505263932BCE4B51029D920CDE93ADD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:da:37:32:7e:4b:fb:f5:1c:18:bd:ca:68:19:
                    62:ff:30:85:cc:33:78:66:1a:e5:a8:e1:c3:3e:c5:
                    06:36:6d:1a:48:70:20:85:e8:ea:a8:7e:30:7b:92:
                    f5:c5:df:45:4e:c8:df:4d:f9:31:9a:51:6c:e9:79:
                    7c:c5:ec:43:8f:ca:8f:65:ad:c2:77:10:1b:c9:e1:
                    ed:ec:2c:c4:3b:7c:fe:fe:26:e8:f3:1e:fe:f9:76:
                    fe:22:e2:ee:d0:57:d7:87:d0:7b:9d:91:4d:6b:68:
                    44:a8:40:22:c6:f6:78:97:e1:f5:36:92:03:b8:60:
                    d3:51:9d:d5:e1:0a:57:8e:a5:75:13:3c:3a:74:08:
                    3b:a5:52:29:09:ab:c7:5c:aa:2c:90:10:57:9e:28:
                    d8:68:ad:01:a4:4c:cc:ea:71:b5:5f:be:18:33:15:
                    fd:87:45:33:78:66:12:54:43:d3:01:3e:8a:66:f0:
                    47:6e:7a:23:e9:1c:da:82:c4:95:58:ac:59:cc:d6:
                    7a:f1:df:ae:ce:c6:99:0e:02:f2:44:a0:64:12:91:
                    a7:0e:a9:b4:9c:18:eb:81:62:81:12:93:8e:6b:1d:
                    ee:65:44:59:23:d1:4c:c8:6b:cc:08:32:4d:29:eb:
                    a3:ae:69:5e:98:86:18:1d:30:af:05:48:05:b3:34:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8D:B6:9A:95:05:26:39:32:BC:E4:B5:10:29:D9:20:CD:E9:3A:DD
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e203236303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:ff:f8:9b:d9:8b:a5:cb:72:1d:91:e1:06:d2:90:b9:bd:b4:
         18:b3:0e:d0:87:cd:25:67:d1:20:56:06:7f:be:98:9e:c5:d0:
         d8:42:ba:dc:e3:e6:b8:31:0b:41:5a:89:e4:78:da:36:41:2b:
         10:da:39:3a:18:95:ed:3e:0c:ef:9e:2a:43:f1:36:57:d2:9f:
         3c:2b:d8:6b:94:41:bd:a9:70:f2:1e:4e:37:10:d8:2a:2b:a9:
         13:44:87:b2:c0:dd:93:6a:87:29:13:0b:73:73:29:f2:aa:60:
         9a:de:d9:09:3c:67:36:a7:31:33:a0:df:02:15:e2:a4:71:ff:
         80:6e:90:bb:9f:c2:ad:f6:e2:cd:21:68:7b:63:2c:9c:36:e3:
         a5:da:90:c7:94:c6:99:3c:04:92:91:3d:46:70:85:0b:c1:91:
         0d:61:68:fb:98:10:90:84:73:95:1a:9a:e0:b9:d7:79:3e:80:
         75:35:8a:06:85:0f:5d:ea:7b:34:6e:6e:66:c0:03:cb:21:b8:
         f4:ff:fe:17:ff:a1:84:ea:fa:8a:7d:2e:e0:4c:df:aa:8e:a1:
         84:bf:79:31:02:cb:99:45:3f:83:4a:05:5e:30:d8:e2:4d:82:
         6d:b9:dd:6f:13:47:40:aa:68:ea:f0:0f:3c:f1:c1:cb:bf:48:
         d7:fd:cb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:03:14 2026 by rpki-client