Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e203430363736.roa
File:                     3130342e3134352e3230382e302f32342d3234203d3e203430363736.roa (raw, json)
Hash identifier:          A0h8DkUzthO+2OoQejfYpn5ctOzSq02qGsRSPBMrvCQ=
Subject key identifier:   C2:29:B4:03:F9:7E:FF:2E:DC:18:8F:E1:CA:D4:77:74:35:08:89:E4
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       2628F3393B1C0EDB07EB8C6481834CA37174D591
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e203430363736.roa
Signing time:             Wed 13 May 2026 04:28:19 +0000
ROA not before:           Wed 13 May 2026 04:23:19 +0000
ROA not after:            Wed 12 May 2027 04:28:19 +0000
asID:                     40676
IP address blocks:        104.145.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 16 May 2026 11:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:28:f3:39:3b:1c:0e:db:07:eb:8c:64:81:83:4c:a3:71:74:d5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: May 13 04:23:19 2026 GMT
            Not After : May 12 04:28:19 2027 GMT
        Subject: CN=C229B403F97EFF2EDC188FE1CAD47774350889E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:09:6f:17:84:35:d1:2f:17:d9:e2:8d:30:15:
                    0e:1c:0f:4a:69:a0:82:d7:f0:6b:2f:92:17:fa:a6:
                    b2:65:76:80:e3:90:d9:09:74:5f:1e:48:14:6b:a7:
                    e7:38:03:da:5e:a0:0b:14:11:8d:86:b1:70:e1:a1:
                    4b:fa:29:91:d8:72:42:e4:88:e6:2c:3e:2f:1d:51:
                    42:42:3b:7a:6c:f5:01:a3:08:9a:55:e9:71:c2:dd:
                    c4:df:f8:ac:81:6b:36:5c:38:47:50:9c:8f:04:a8:
                    bf:fe:17:2a:80:57:3e:07:cc:b2:58:ad:7e:0d:d6:
                    44:42:d5:62:f8:17:ab:35:d4:1f:22:1b:6d:5e:2e:
                    73:26:5c:38:79:46:bf:80:f0:f5:c2:fa:d1:1e:69:
                    04:bb:0c:58:4b:6c:11:95:84:b4:7e:79:de:62:2d:
                    52:66:ce:9b:8a:7c:c1:60:a3:32:56:b7:16:0c:7b:
                    2f:75:ef:73:38:17:0c:73:68:24:1f:a2:81:25:77:
                    7e:44:14:ed:3d:d9:da:90:dd:a0:aa:53:ee:a0:b2:
                    88:b1:2c:df:e0:84:83:ec:f8:d6:f2:93:fd:88:f9:
                    64:18:f1:09:85:71:8b:01:f2:fd:ee:b5:6d:bd:86:
                    8f:34:14:54:e5:28:fb:cc:b2:fd:3b:17:b6:6b:1b:
                    e6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:29:B4:03:F9:7E:FF:2E:DC:18:8F:E1:CA:D4:77:74:35:08:89:E4
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3230382e302f32342d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:9c:00:dd:0f:00:75:0e:75:a1:5a:e5:2f:9c:bf:8d:17:23:
         e0:85:32:84:bc:1a:69:e1:da:f4:83:c6:88:99:ad:4f:b2:3d:
         8b:d2:bf:d5:2b:41:5b:96:d7:38:cb:78:39:2d:a3:3b:29:db:
         a9:15:a9:9c:ee:e8:16:9a:1f:b4:29:39:d0:83:b6:a4:89:05:
         fa:e8:b8:90:96:fa:74:f3:7a:bd:b6:89:c9:1f:a0:83:b4:d5:
         f1:55:15:d2:d6:59:b9:bc:d0:53:72:5e:78:ae:e3:e3:ed:8b:
         3f:4d:d7:85:81:c1:f3:31:72:ee:82:d4:d4:4c:05:20:fa:35:
         17:8d:9b:09:82:67:25:42:51:1f:07:74:99:a6:18:c3:ff:fb:
         41:3e:93:c9:50:ac:cf:a7:75:f0:68:10:b8:57:32:e3:da:7b:
         bd:06:27:05:e5:a4:11:da:e9:7b:28:32:64:c7:79:70:37:7b:
         61:af:1f:b0:42:7d:45:56:f3:ae:4b:7f:da:4f:08:2a:1c:13:
         0c:fc:2a:7d:83:8e:d6:99:9a:04:1d:63:82:25:16:f8:42:03:
         b0:44:b3:e5:70:83:8f:5c:d6:bb:73:20:5d:86:67:53:fb:44:
         93:0f:64:8b:9f:7b:00:24:5d:61:5a:f1:5e:79:41:9f:2b:dd:
         eb:40:9a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 10:34:50 2026 by rpki-client