Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203632323430.roa
File:                     3230392e38372e3136392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          u2+qGVzfcTeiSOtJ2pPdYxx+ON6WjEmXOORPfvPHYL4=
Subject key identifier:   9C:ED:B0:4F:83:6A:41:5F:EE:ED:15:63:90:E6:1B:84:7B:5B:6E:C2
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       56C2AE9EB0B9FCAA02DEE40496E96E6942BD9152
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203632323430.roa
Signing time:             Tue 12 May 2026 04:36:00 +0000
ROA not before:           Tue 12 May 2026 04:31:00 +0000
ROA not after:            Tue 11 May 2027 04:36:00 +0000
asID:                     62240
IP address blocks:        209.87.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 23:30:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c2:ae:9e:b0:b9:fc:aa:02:de:e4:04:96:e9:6e:69:42:bd:91:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: May 12 04:31:00 2026 GMT
            Not After : May 11 04:36:00 2027 GMT
        Subject: CN=9CEDB04F836A415FEEED156390E61B847B5B6EC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:20:69:a1:06:6c:da:c0:b2:2c:5a:c1:bd:
                    66:1f:87:63:e6:48:7e:4a:bb:d0:6e:be:da:28:18:
                    4f:ab:72:53:26:6a:ad:8c:45:b7:f1:9d:f2:04:27:
                    e1:3f:4d:92:8b:1e:52:10:88:64:e0:eb:e6:ab:11:
                    bd:d1:f1:f4:25:25:a3:d8:10:90:86:9b:13:1a:c7:
                    b6:1e:a9:85:f2:12:79:5e:70:52:67:ad:5d:3a:70:
                    fa:79:51:e8:d7:e4:51:67:cb:63:38:ed:f4:a7:c8:
                    ff:45:87:3d:fa:0d:8e:f7:03:94:2a:79:9a:3a:ba:
                    cc:31:84:66:c2:2a:06:b9:7a:c9:2c:08:a2:91:e8:
                    53:d6:e6:f1:9b:87:b3:2c:bf:a2:d0:8f:f7:f1:f1:
                    c2:0d:8e:1c:59:a6:20:7f:d1:1a:4b:05:42:d0:b4:
                    ec:3f:02:df:cc:d0:54:a3:75:fc:c7:94:aa:68:4a:
                    73:fb:25:3f:64:59:4c:d4:ac:d1:a9:9a:d5:b0:f8:
                    42:53:2c:a4:25:2d:70:94:7c:b6:3e:b2:15:1c:89:
                    1d:df:e7:1c:d9:c6:6c:45:1a:4e:12:86:4d:a1:eb:
                    d7:f6:9c:8a:48:16:46:33:e1:99:ba:22:5c:bc:74:
                    07:d7:fe:a0:8a:4e:45:45:15:3b:61:3c:f7:09:59:
                    37:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:ED:B0:4F:83:6A:41:5F:EE:ED:15:63:90:E6:1B:84:7B:5B:6E:C2
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:6a:9d:29:f4:59:9b:2b:59:04:f4:05:8a:a2:7a:2f:8d:18:
         34:70:d0:79:b1:4d:4b:34:34:b2:fe:70:5e:b4:49:c1:09:16:
         23:66:b3:e0:ae:32:fe:7e:01:1b:69:93:80:42:f2:24:05:8b:
         d4:b0:a2:9f:1b:fc:45:5a:15:4b:42:02:e1:db:96:88:68:05:
         18:1f:3f:f1:86:f7:cf:26:e2:f8:46:65:20:e7:9a:1a:df:d9:
         22:65:ef:2b:9e:e7:f7:c4:a6:15:d5:63:bb:31:6b:51:5a:85:
         fc:86:32:99:30:39:0a:83:ab:36:11:63:f4:c1:ab:47:b5:18:
         c0:d4:f8:a3:27:a3:b0:db:ae:d8:db:a9:34:95:e8:c8:ef:1c:
         de:8c:a6:e9:72:48:e7:39:36:69:20:20:14:4d:d9:be:fd:6b:
         d2:49:df:5b:6e:cd:a9:bd:48:8f:45:4e:3a:ac:5f:c1:a5:1a:
         9a:f3:db:46:8e:0e:f1:84:45:eb:d6:47:6e:dd:49:be:f6:3e:
         15:70:89:7a:c0:1d:45:44:a0:6e:b3:6a:bd:55:68:5b:31:1d:
         35:91:7c:24:34:c5:29:74:27:dc:88:e4:ca:f2:aa:41:eb:3d:
         e2:1e:73:d3:9f:c5:a1:3f:7b:fc:20:21:ad:80:a3:bd:0a:8c:
         c9:25:d9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:08 2026 by rpki-client