Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32342d3234203d3e203137313339.roa
File:                     3230352e3133342e3232342e302f32342d3234203d3e203137313339.roa (raw, json)
Hash identifier:          edWBbbAEU+uGDr3ENTuIx9WJbFuurX83z1gEpH7Juuk=
Subject key identifier:   DD:0B:26:4A:79:C1:C0:23:77:62:72:D6:49:0F:19:33:E8:5A:EF:9F
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       637CA783BB8E2481F9156BB0D719F97D5C021CD0
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32342d3234203d3e203137313339.roa
Signing time:             Sat 13 Jun 2026 06:36:06 +0000
ROA not before:           Sat 13 Jun 2026 06:31:06 +0000
ROA not after:            Sat 12 Jun 2027 06:36:06 +0000
asID:                     17139
IP address blocks:        205.134.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:7c:a7:83:bb:8e:24:81:f9:15:6b:b0:d7:19:f9:7d:5c:02:1c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jun 13 06:31:06 2026 GMT
            Not After : Jun 12 06:36:06 2027 GMT
        Subject: CN=DD0B264A79C1C023776272D6490F1933E85AEF9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:35:e6:0f:af:37:de:ba:0b:f5:62:a8:ab:58:
                    94:88:3c:0e:a6:b0:f4:fd:3a:28:ad:42:dd:cf:14:
                    ac:76:cc:b2:9a:f1:80:2a:30:97:54:26:36:29:8c:
                    cc:b9:d9:73:7b:82:d9:ac:24:6a:69:7f:75:4a:28:
                    99:d8:4d:38:9d:21:52:7c:e0:06:c3:57:af:0d:a8:
                    df:35:ae:64:51:c9:3e:ea:02:5a:cf:0f:c9:ab:62:
                    dc:a5:f1:2e:f5:2f:38:1d:8b:46:42:ea:1e:7b:e8:
                    42:55:f1:3c:b3:ad:47:2d:8b:cf:38:ac:2c:03:29:
                    66:54:a4:62:e5:8c:1f:7e:da:e6:a5:26:3d:f1:0b:
                    bf:d5:ac:62:e7:23:81:1a:91:33:b9:f3:a5:b4:d0:
                    cc:9f:73:a2:54:b0:02:43:1b:29:97:03:58:a0:88:
                    13:23:87:53:23:80:cb:5d:60:93:b3:42:ab:59:de:
                    4a:cd:77:e7:d7:19:94:09:65:94:e5:33:e9:cf:9d:
                    b8:b7:14:02:db:18:83:da:21:ba:25:23:6c:f5:47:
                    12:0d:6b:44:1e:fe:4e:ad:a4:b6:fb:a4:8d:60:86:
                    81:07:0c:62:cd:20:af:6e:4a:91:65:df:71:b4:ec:
                    e5:8f:be:90:e3:11:21:75:0c:06:19:72:4b:90:09:
                    b6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0B:26:4A:79:C1:C0:23:77:62:72:D6:49:0F:19:33:E8:5A:EF:9F
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3230352e3133342e3232342e302f32342d3234203d3e203137313339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.134.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:57:bb:2e:86:2b:b8:a9:43:cd:7e:86:db:72:6e:02:81:72:
         a5:bd:90:03:55:4f:08:f4:ed:e4:7b:6d:be:8d:37:53:39:b8:
         89:63:77:e7:95:4e:e5:e2:93:ad:07:b2:be:9c:8e:ae:bd:f0:
         d5:92:df:99:6c:31:ba:f8:bb:48:6a:55:78:d7:ff:44:d4:24:
         c8:7e:dd:c1:b8:64:df:bf:97:84:18:bd:23:9b:ed:6e:32:33:
         48:45:d4:b9:c3:07:5d:58:70:c4:41:01:9d:66:40:ce:d0:0a:
         20:69:de:69:3e:6c:e4:5e:6b:6f:64:05:6c:db:05:7c:6a:01:
         5c:e1:d7:ad:56:7d:df:f1:63:a9:6e:d7:fb:d9:99:db:aa:a8:
         29:fb:ac:43:e6:ba:84:26:74:71:f8:0c:fa:86:b1:39:bc:d7:
         d7:f2:52:2f:52:23:82:43:77:8d:f2:46:c8:2e:d2:34:ec:7f:
         58:9d:64:3b:86:c1:2f:eb:9f:93:24:d5:8e:63:10:d0:e7:93:
         00:76:2d:e9:1c:8f:4b:65:62:63:4c:43:40:c1:1d:56:eb:ef:
         93:ea:75:56:96:4a:b0:66:9c:77:f7:ff:5b:cc:9a:41:7d:f8:
         01:2c:a4:ae:0e:da:90:e9:6b:76:c7:fa:24:d4:64:50:a1:aa:
         20:67:1d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:35:58 2026 by rpki-client