Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231352e302f32342d3234203d3e203134363138.roa
File:                     3130342e3134352e3231352e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          bnk5DwL8S6N4fPah/CBumvGKQ3e55XlE1vGU2UjpXbo=
Subject key identifier:   CB:4E:72:61:0E:3C:21:EC:C8:DC:2E:F3:2C:89:72:58:5F:7D:5A:08
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       42C66DCC5801EFCD9824AF6A0EA808405C7E9F40
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231352e302f32342d3234203d3e203134363138.roa
Signing time:             Thu 25 Jun 2026 14:13:18 +0000
ROA not before:           Thu 25 Jun 2026 14:08:18 +0000
ROA not after:            Thu 24 Jun 2027 14:13:18 +0000
asID:                     14618
IP address blocks:        104.145.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 10:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c6:6d:cc:58:01:ef:cd:98:24:af:6a:0e:a8:08:40:5c:7e:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun 25 14:08:18 2026 GMT
            Not After : Jun 24 14:13:18 2027 GMT
        Subject: CN=CB4E72610E3C21ECC8DC2EF32C8972585F7D5A08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:0a:91:be:d1:73:b6:4f:7f:1f:62:c4:91:
                    1f:a2:ad:1f:77:a9:d3:c0:4b:e7:f0:d1:66:46:72:
                    57:a6:42:52:c3:c7:94:26:f0:39:be:1d:c1:82:28:
                    13:a4:d5:e6:dc:a6:c3:51:fd:95:27:38:b4:b1:7d:
                    2d:3c:8e:78:d4:2e:9e:a1:e1:93:26:ec:1b:57:9c:
                    67:7b:23:5d:7a:6b:a8:cb:9a:2f:3a:0c:64:36:50:
                    d1:dd:68:ee:30:52:f4:70:e2:47:fa:d2:62:3b:58:
                    a2:85:b3:62:44:da:03:a7:fe:41:17:96:57:42:3d:
                    d2:27:87:b9:1f:01:5e:ee:91:f5:74:7e:27:fa:e7:
                    fe:ba:46:d5:b4:13:6b:3d:f6:bd:cf:ce:b7:38:d3:
                    8b:31:a7:3b:f7:05:bf:2f:a3:33:57:09:66:7d:44:
                    fd:49:35:62:27:25:0b:bf:18:c2:ad:22:15:d9:41:
                    c1:67:65:41:f7:39:2d:a2:45:83:ce:d0:b5:c1:7d:
                    0e:65:c6:d9:84:6a:dd:d7:61:6a:cc:6c:2d:41:99:
                    b2:be:f5:42:f0:5e:76:26:07:7b:17:59:ed:4e:d3:
                    e6:e1:de:eb:6a:01:01:57:9c:a9:76:5b:2b:8b:05:
                    ab:77:16:a9:bd:6e:02:88:8d:71:07:f7:25:c5:5a:
                    55:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:4E:72:61:0E:3C:21:EC:C8:DC:2E:F3:2C:89:72:58:5F:7D:5A:08
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231352e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:77:b7:57:98:4b:76:0b:2d:2c:b6:1d:66:6f:9a:04:6e:ac:
         e8:06:f8:48:6c:2c:e5:2b:4d:c2:7a:f1:1e:98:e8:7c:2c:73:
         61:1d:82:d9:4a:90:99:7c:0d:cb:fb:0e:74:00:04:b6:ff:c4:
         1a:69:16:ef:9c:96:80:0f:bd:2b:82:4d:08:f6:33:25:0d:6d:
         c3:ed:8c:34:29:01:95:78:bf:96:77:f6:87:38:ca:d0:bd:8f:
         31:f8:2a:35:af:78:1b:b5:e4:84:9e:84:e0:9c:89:be:ba:a2:
         c1:73:51:86:10:da:0b:93:30:76:75:3f:ea:70:48:1a:ac:c0:
         52:ef:38:52:be:54:59:a1:5e:2c:f9:ae:12:11:b1:a4:87:ae:
         7d:24:50:30:25:f8:2e:28:bb:c1:72:b5:2b:9c:80:79:7f:73:
         89:4b:bc:54:fc:07:ee:c2:1e:9f:a1:b2:6b:e7:48:bb:d9:00:
         cd:48:9a:44:eb:d1:b9:d0:92:88:7c:3e:06:e9:d9:a4:f5:81:
         2b:d7:fd:64:93:0d:bf:90:56:32:61:f0:5a:18:7a:fe:e6:ca:
         72:b6:7f:9d:78:df:21:c4:56:61:19:df:82:bf:a6:25:7d:1e:
         69:8d:46:5f:fb:26:01:35:de:76:e8:45:52:3d:ba:3b:ee:a5:
         20:c5:01:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:06:47 2026 by rpki-client