Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231352e302f32342d3234203d3e203136353039.roa
File:                     3130342e3134352e3231352e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          NZrHcdhrn2mjfkajdEfbB5/SnCoj4lWW8MKkgfxwPs4=
Subject key identifier:   93:5D:54:BC:27:23:72:5E:2D:A9:0A:84:DD:02:2D:B3:12:2B:FB:C1
Certificate issuer:       /CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
Certificate serial:       24B5C99F144C4857FF2CC5EEF636424A95C12F8F
Authority key identifier: 40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231352e302f32342d3234203d3e203136353039.roa
Signing time:             Thu 25 Jun 2026 14:13:18 +0000
ROA not before:           Thu 25 Jun 2026 14:08:18 +0000
ROA not after:            Thu 24 Jun 2027 14:13:18 +0000
asID:                     16509
IP address blocks:        104.145.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl
                          rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 10:53:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b5:c9:9f:14:4c:48:57:ff:2c:c5:ee:f6:36:42:4a:95:c1:2f:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd
        Validity
            Not Before: Jun 25 14:08:18 2026 GMT
            Not After : Jun 24 14:13:18 2027 GMT
        Subject: CN=935D54BC2723725E2DA90A84DD022DB3122BFBC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1e:b6:ab:18:01:cb:d2:96:f6:57:d6:cf:2f:
                    4a:c9:b3:2e:e6:d1:94:d4:d2:a2:6b:50:64:12:70:
                    40:2f:a4:06:d7:e7:88:f6:0b:4c:c5:b5:13:a5:f1:
                    4e:82:4d:48:8f:ad:f8:fd:ee:51:e7:c9:23:a9:f2:
                    e3:d2:9e:c0:1d:e4:f0:97:3a:a8:8c:06:c1:df:50:
                    84:74:34:06:3a:30:c3:d8:82:a1:56:87:72:85:15:
                    ee:b6:e9:47:b4:3c:44:40:4d:02:46:a5:3f:5c:ba:
                    d7:b8:77:a9:0c:2c:ea:65:ad:5f:8c:06:03:42:12:
                    0a:1f:ef:11:72:ba:ce:69:e4:d1:6a:5d:b4:cc:b2:
                    a6:0a:4d:ab:fa:95:b2:63:92:fd:90:b6:35:0e:25:
                    91:2c:5f:39:1c:c6:e6:76:b7:47:31:9e:34:da:75:
                    37:94:25:02:c1:64:a3:50:81:bc:00:55:7e:4a:d6:
                    5a:d0:0c:b6:22:19:c5:8c:03:36:a0:60:76:71:7e:
                    9c:03:e7:73:48:09:b5:fa:a7:44:c6:f8:67:c3:f7:
                    30:67:96:47:d0:21:58:ac:4e:fa:ba:aa:f4:22:e4:
                    3e:5c:14:20:94:6b:6b:d0:c7:5a:5a:c3:ce:d0:6a:
                    e5:ab:5c:e4:8e:a5:50:28:06:2a:c9:87:c9:49:a6:
                    44:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:5D:54:BC:27:23:72:5E:2D:A9:0A:84:DD:02:2D:B3:12:2B:FB:C1
            X509v3 Authority Key Identifier:
                keyid:40:23:B3:F7:32:22:19:25:40:CC:DC:31:67:1C:85:06:63:31:DD:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/4023B3F73222192540CCDC31671C85066331DDA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/edcfe8d3-6af9-4d60-8e96-f6dfb455361c/e7a8edd9d495cce4627b5f94452dfbace6549b9f64d4bcfcbd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/33830346191241ceb6929c4f6912ef91/0/3130342e3134352e3231352e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.145.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:49:b3:76:02:81:e9:0b:a0:48:f5:d1:44:55:f2:7a:7f:18:
         ea:d1:78:69:23:de:fb:69:66:cc:4e:a6:c2:9f:62:f0:1f:ad:
         13:f0:40:f4:82:bb:e0:57:c7:ae:64:c3:c4:cd:4a:8b:69:46:
         b0:eb:bf:ab:43:21:7f:3a:f3:e1:ac:85:c8:5e:2c:3c:c4:82:
         e8:62:b8:b8:0d:51:00:71:ff:45:13:87:3b:4c:56:02:e5:0e:
         50:9d:bb:42:b7:76:69:13:d2:6b:01:88:9a:75:c3:fe:bd:cc:
         9e:66:96:9d:ff:c6:c2:dd:e7:72:c5:e3:3a:b7:6b:4d:b4:1d:
         39:4c:42:a9:6f:0a:86:c0:8d:1c:42:70:9a:4e:41:c0:76:e4:
         69:de:36:a9:f9:f6:4b:d2:ab:c4:fd:b9:9e:dc:87:95:65:1e:
         01:fc:b3:c6:8c:7e:f7:da:87:be:a9:27:3c:46:48:3d:f1:bf:
         0d:ab:13:f3:17:b9:5b:89:d4:6d:36:80:84:f8:40:46:e4:d7:
         0f:35:49:2e:68:af:a1:f8:3c:76:01:49:02:ba:6e:0b:75:fc:
         75:69:28:02:19:7c:25:3f:d9:34:9e:ba:dd:31:c4:f2:f2:01:
         ef:50:b5:3c:8a:84:f9:76:a2:bd:e1:c6:c5:d4:34:f5:ee:45:
         5c:15:9b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:06:21 2026 by rpki-client