Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32332d3234203d3e20323039323432.roa
File:                     3139382e3137372e35362e302f32332d3234203d3e20323039323432.roa (raw, json)
Hash identifier:          FA1LxmdWmZf6aEjh6d18NJxMraxRku4gUi2zGXoViWs=
Subject key identifier:   B3:26:76:FE:F1:0A:2B:6E:CC:9C:C3:21:4C:A2:38:AE:91:A7:C4:E3
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       4D4B5CA178D5D0200954A449B03E4479C1052C3C
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32332d3234203d3e20323039323432.roa
Signing time:             Mon 16 Mar 2026 14:35:54 +0000
ROA not before:           Mon 16 Mar 2026 14:30:54 +0000
ROA not after:            Mon 15 Mar 2027 14:35:54 +0000
asID:                     209242
IP address blocks:        198.177.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 15:49:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:4b:5c:a1:78:d5:d0:20:09:54:a4:49:b0:3e:44:79:c1:05:2c:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Mar 16 14:30:54 2026 GMT
            Not After : Mar 15 14:35:54 2027 GMT
        Subject: CN=B32676FEF10A2B6ECC9CC3214CA238AE91A7C4E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2d:de:a5:b0:67:09:db:7d:88:55:21:c5:17:
                    4a:fe:a3:a4:16:ab:bd:01:1a:75:d4:4f:46:c7:0b:
                    f2:68:cc:8c:d4:13:0d:e5:99:24:73:9b:18:0f:fd:
                    93:3a:86:10:e2:0a:b8:da:35:68:b9:0b:97:f4:c4:
                    20:af:1f:b4:51:9d:d4:d0:0c:51:94:b4:00:57:44:
                    00:15:d0:03:c6:89:4a:eb:99:25:24:2d:a6:e6:8f:
                    ce:ae:58:ce:7b:f0:d5:da:c9:42:93:60:82:76:fd:
                    9d:5d:e3:55:20:ae:ef:54:75:fc:40:c1:92:85:65:
                    3a:3e:98:e8:d2:2a:e2:a4:da:37:22:e0:65:13:92:
                    e4:d0:08:92:5b:12:c2:10:38:91:9e:1f:64:15:2d:
                    89:24:9d:d5:a9:fe:98:1d:10:af:3a:18:38:ed:42:
                    fd:dc:5c:8f:fb:0d:ee:b6:59:ef:dc:f5:6a:83:4d:
                    3f:6b:27:2b:a4:7c:bb:67:56:c6:49:30:0d:15:c8:
                    6b:6b:b6:9c:72:d7:82:6c:cb:d4:cc:36:82:95:c6:
                    a2:3e:c6:64:d1:a0:e1:9b:fc:2a:d6:8d:0e:24:a5:
                    bc:b1:53:02:f4:82:c6:37:40:34:9c:14:22:98:80:
                    e6:ce:85:08:cf:7b:20:e0:4f:31:50:c3:1f:f8:cf:
                    ab:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:26:76:FE:F1:0A:2B:6E:CC:9C:C3:21:4C:A2:38:AE:91:A7:C4:E3
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32332d3234203d3e20323039323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:d4:b1:55:ce:73:66:22:1f:c3:f7:76:42:97:e4:ac:c2:db:
         5c:df:90:fc:24:f3:20:c0:a9:cc:e1:9d:50:4c:3f:24:e8:2f:
         bc:0c:f4:84:80:ad:cd:4f:dd:17:05:e2:f6:da:5d:18:96:17:
         d2:13:95:3b:43:3f:3f:77:b9:1c:81:86:b9:c8:a5:6f:98:8e:
         d7:d4:3e:46:b1:96:7a:90:e2:3d:2f:2c:88:bd:50:16:5a:c7:
         3f:78:9e:d9:5f:5d:55:75:f8:b9:e4:2a:29:2e:36:bd:f5:cf:
         ef:31:3b:70:fa:5b:ff:b2:5a:a3:82:c6:7a:0c:91:57:6c:f0:
         d5:9b:7a:60:bf:10:6a:a6:59:1a:60:14:3f:11:46:a8:8b:86:
         43:f6:ea:b0:f5:13:0e:ad:4b:32:2f:21:5a:bb:77:50:30:27:
         13:20:64:0f:0c:62:21:2e:3c:21:ef:38:4f:2b:c8:a0:0a:fa:
         14:46:e5:75:ea:4d:c9:3f:8e:92:b2:0e:d9:9c:b3:d6:26:1c:
         d4:7d:0c:a1:fb:d8:6a:cc:15:71:e0:ac:a8:87:94:ac:e5:04:
         a0:5b:13:e4:a7:96:76:16:a4:a9:52:38:ae:24:5a:4f:ba:16:
         51:b9:00:f4:8e:bc:04:86:93:aa:9e:24:2c:74:50:bc:85:f1:
         de:74:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:14:21 2026 by rpki-client