Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e2038323230.roa
File:                     3137332e3234372e3232352e302f32342d3234203d3e2038323230.roa (raw, json)
Hash identifier:          zz5wSlkepuniaqkm5FpK4aZP3glEwVjY/r0K3VpNdws=
Subject key identifier:   F1:67:62:F1:B7:D2:57:EA:CF:03:01:44:1D:30:35:28:43:F2:60:DA
Certificate issuer:       /CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
Certificate serial:       6A3D7EE23DE8F8955823AE2E0C33C7BE93EED251
Authority key identifier: DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e2038323230.roa
Signing time:             Fri 03 Jul 2026 06:07:59 +0000
ROA not before:           Fri 03 Jul 2026 06:02:59 +0000
ROA not after:            Fri 02 Jul 2027 06:07:59 +0000
asID:                     8220
IP address blocks:        173.247.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/293fb15b-5a85-4abe-bd24-232a114ae490.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:25:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:3d:7e:e2:3d:e8:f8:95:58:23:ae:2e:0c:33:c7:be:93:ee:d2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181
        Validity
            Not Before: Jul  3 06:02:59 2026 GMT
            Not After : Jul  2 06:07:59 2027 GMT
        Subject: CN=F16762F1B7D257EACF0301441D30352843F260DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:50:25:e4:7c:f6:78:14:d5:e9:6c:25:d6:b7:
                    65:b8:89:b3:02:d3:4f:7b:0b:26:dd:2f:32:99:62:
                    37:52:10:e5:16:1f:ce:3c:61:fd:ba:9c:6b:26:45:
                    27:46:38:6b:5f:20:b6:8b:b9:a7:3f:52:53:77:9d:
                    93:80:30:d9:6e:ba:c1:e3:19:4a:88:d7:2e:c6:b0:
                    21:71:ac:6b:8d:ee:28:c1:ce:1b:71:c4:05:a5:a5:
                    e1:26:67:4b:73:09:08:ef:b8:1c:81:cc:9d:e1:19:
                    fa:ea:7d:31:eb:f2:71:ec:98:57:3f:65:18:e9:4a:
                    42:15:98:0b:6c:46:9e:bd:1c:3b:2f:c0:d8:58:dc:
                    2b:d1:4e:7c:1d:e1:33:52:98:4c:82:16:dc:86:83:
                    5c:e5:1b:40:14:c7:08:6e:f9:b7:02:eb:e1:c5:05:
                    e1:0a:fe:16:ab:8b:25:76:27:bd:e8:c2:c8:1c:50:
                    d0:fc:6b:c5:63:06:ae:ab:94:26:42:5f:00:1d:13:
                    88:d9:b0:b8:75:d9:ec:5b:d7:3b:bd:15:12:12:1b:
                    1d:9f:2c:1c:41:b0:d3:d0:ee:9b:3f:63:11:c1:99:
                    c6:ae:94:17:de:c5:52:82:62:09:50:43:85:2d:b5:
                    8e:9f:12:67:98:8e:1a:c4:39:8f:91:19:89:a3:81:
                    fa:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:67:62:F1:B7:D2:57:EA:CF:03:01:44:1D:30:35:28:43:F2:60:DA
            X509v3 Authority Key Identifier:
                keyid:DA:12:C7:A0:0C:0A:00:30:81:08:65:1E:D5:6F:20:1D:22:B7:BE:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/DA12C7A00C0A00308108651ED56F201D22B7BED9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/293fb15b-5a85-4abe-bd24-232a114ae490/fb5ab1cb30ef338a72d59352b137ba006cc55910b1730a5181.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8f0b806c018fa5136e29184a/0/3137332e3234372e3232352e302f32342d3234203d3e2038323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.247.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:cc:f3:dd:3e:76:b0:7d:48:92:5a:17:f4:dd:22:4b:f7:44:
         0a:fa:16:b8:74:9a:b5:35:97:ad:71:20:36:66:fd:3f:cf:06:
         e9:33:68:89:db:04:40:06:57:a9:3a:cf:63:06:d3:3e:15:25:
         aa:b6:2b:5a:f7:e0:f6:71:f9:ff:23:70:de:a9:d0:08:c3:7e:
         3b:d9:22:25:99:69:ba:d4:00:54:9c:b9:38:4d:61:f7:f8:7d:
         eb:54:16:19:69:a5:84:24:7f:b2:46:f8:ae:54:f6:42:ab:31:
         6e:9e:2c:77:7d:be:13:71:23:47:ea:0a:2d:d6:86:40:18:c3:
         68:2b:b9:ee:0d:8c:67:8d:21:9f:f8:66:cd:eb:43:04:93:57:
         04:f7:fb:1e:34:c9:bb:6b:46:aa:2e:75:e4:df:74:fc:7c:15:
         e4:ba:fa:ef:b4:c2:28:e3:ee:de:b2:a1:f0:75:de:fb:43:b0:
         4c:b8:8c:1b:7f:f9:0e:6c:63:4b:86:7d:4d:d8:92:0d:02:96:
         a8:6d:03:90:49:36:27:cc:e2:f1:e9:b6:36:9d:71:eb:3d:77:
         ec:18:0b:b0:c4:b3:10:eb:06:78:ac:74:d8:3d:1d:85:35:6f:
         4e:01:31:f3:59:5f:d6:25:b9:af:38:53:8d:74:65:37:c2:12:
         29:f5:fa:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:39:34 2026 by rpki-client