Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e2037303138.roa
File:                     3139322e37302e3137362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          JFa7udWbvEPTcZqF42GUShqaFAmQa1SWWp5LIABbKko=
Subject key identifier:   74:1E:37:FA:A8:12:2D:FA:9F:33:7D:AB:06:D9:9E:7B:3F:5F:7A:43
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       7B5F651518A36AC57E92D9F87DA60478616FD058
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 27 Apr 2026 14:36:00 +0000
ROA not before:           Mon 27 Apr 2026 14:31:00 +0000
ROA not after:            Mon 26 Apr 2027 14:36:00 +0000
asID:                     7018
IP address blocks:        192.70.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 20:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:5f:65:15:18:a3:6a:c5:7e:92:d9:f8:7d:a6:04:78:61:6f:d0:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Apr 27 14:31:00 2026 GMT
            Not After : Apr 26 14:36:00 2027 GMT
        Subject: CN=741E37FAA8122DFA9F337DAB06D99E7B3F5F7A43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:09:33:46:23:ab:88:fc:7f:de:2c:66:c1:c4:
                    0e:dd:3d:43:9e:ed:a4:87:da:e0:7c:e3:d7:84:3b:
                    67:b9:b3:07:7f:bb:2b:c7:f0:77:8d:5f:ad:9d:20:
                    fd:51:f7:55:ed:80:02:d1:97:b6:75:ea:1b:ca:e0:
                    41:15:79:a7:5d:ab:92:80:f5:a2:22:75:7d:d4:7a:
                    84:ac:96:e5:b7:7b:53:d6:77:32:f7:10:1e:35:9e:
                    d3:0d:3c:d1:71:fd:d9:92:ac:64:60:78:10:9d:95:
                    e0:92:0f:c3:10:3a:6f:00:f1:5e:a0:2b:e2:8c:77:
                    6c:cc:85:10:12:e4:3a:1e:58:df:77:ab:94:a2:b0:
                    7c:ef:71:91:7a:47:06:c5:f9:cd:5d:67:b0:0b:0e:
                    4f:a6:c0:8b:b4:63:1f:8f:ec:f4:71:a9:88:85:81:
                    46:86:cc:c6:c6:8c:28:d7:53:9b:2c:ef:0b:fa:cb:
                    a6:84:5f:dc:a9:08:23:b1:af:78:12:37:a2:47:67:
                    1e:75:f6:a4:9e:d3:91:ef:b4:cb:c8:9c:3e:3a:2b:
                    ef:07:a7:87:43:49:d1:81:c6:e2:aa:86:4e:1c:7b:
                    b0:99:34:e4:66:4e:83:eb:ca:cb:8a:f4:55:de:3f:
                    73:6a:2a:66:e8:4d:ff:07:3a:14:ea:ba:58:b0:bd:
                    67:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:1E:37:FA:A8:12:2D:FA:9F:33:7D:AB:06:D9:9E:7B:3F:5F:7A:43
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c4:a7:35:64:51:96:1e:70:15:84:2c:14:b8:9c:d0:2c:33:
         92:59:fb:ad:cd:9f:fb:a7:8e:fa:c4:a6:71:b4:6e:0e:71:6a:
         65:87:03:e9:10:e3:b4:37:67:6c:29:3e:6a:67:c1:7b:ae:d0:
         39:27:2d:4e:56:52:4b:c8:7c:4d:65:77:bf:e2:85:d0:28:df:
         73:1f:65:0a:1b:98:43:9c:24:77:08:ac:ec:e5:84:35:eb:c3:
         a6:54:cd:0e:42:32:cb:63:1d:6e:26:8e:af:0e:6d:10:77:6d:
         17:0e:48:29:d0:52:c0:1b:d9:9f:cf:e7:d6:09:fe:c6:18:b1:
         c6:d3:f8:1e:a1:0e:b8:4f:60:4f:a2:f6:33:ab:a0:ce:99:8b:
         dc:4a:15:de:c8:77:6c:91:10:29:0b:ac:69:0c:5b:a4:43:63:
         d8:40:a1:04:b1:fd:73:8c:5a:06:76:72:c4:11:54:26:d4:97:
         57:49:85:30:37:e3:d2:99:0e:d2:16:93:84:c2:25:8d:29:8d:
         84:57:b0:07:8e:cc:e1:d0:94:60:33:1e:e8:33:b8:4a:13:06:
         31:4f:2e:b1:97:53:dd:1b:c3:5a:6e:f8:c2:1b:20:9e:ca:aa:
         41:d0:05:8c:32:25:88:c0:69:ab:6a:32:e9:3f:f4:ac:43:40:
         c3:6f:03:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:19 2026 by rpki-client