Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e20323034393636.roa
File:                     3133302e31322e3130322e302f32342d3234203d3e20323034393636.roa (raw, json)
Hash identifier:          nGMi8mxr7sK/HQHIkez8+8FQAK+UM976BOq5R1WzuIk=
Subject key identifier:   88:98:C3:86:15:E0:32:17:E7:30:9E:AD:A7:9E:23:0D:B0:64:26:AA
Certificate issuer:       /CN=a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9
Certificate serial:       18137005F00161C0DC23B50509B52FC93FE60B6D
Authority key identifier: F9:36:A5:92:1A:43:1C:86:8B:B8:EA:81:0B:82:9F:BC:C1:8C:4B:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e20323034393636.roa
Signing time:             Fri 04 Sep 2026 11:16:30 +0000
ROA not before:           Fri 04 Sep 2026 11:11:30 +0000
ROA not after:            Fri 03 Sep 2027 11:16:30 +0000
asID:                     204966
IP address blocks:        130.12.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.crl
                          rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 14:26:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:13:70:05:f0:01:61:c0:dc:23:b5:05:09:b5:2f:c9:3f:e6:0b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9
        Validity
            Not Before: Sep  4 11:11:30 2026 GMT
            Not After : Sep  3 11:16:30 2027 GMT
        Subject: CN=8898C38615E03217E7309EADA79E230DB06426AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:a4:af:c1:84:2a:92:18:81:1b:53:24:10:3b:
                    83:6d:c3:28:aa:f8:33:fa:fd:03:56:d2:ab:f3:f5:
                    aa:13:02:a2:34:24:a5:f4:46:c6:fe:d6:1c:18:48:
                    fb:08:b1:65:25:33:92:5a:b2:50:14:b1:0d:5e:c4:
                    dd:bf:46:83:22:12:2a:62:bf:19:3a:0d:06:71:51:
                    44:1f:66:1f:0c:9a:ff:50:e0:28:dc:d2:ba:c0:d4:
                    a3:ff:cd:99:82:e8:db:5c:d6:c6:4b:8d:ac:76:0b:
                    30:c3:e0:2e:aa:fa:7e:71:60:a2:bc:5b:99:13:d2:
                    f6:2e:22:01:b0:04:66:0e:7a:32:3a:f9:29:03:c3:
                    ef:c0:0a:7d:8e:24:3b:65:51:e0:7b:8e:e4:37:f6:
                    d7:d6:9e:1b:b1:2b:57:8e:ca:68:46:82:5b:92:48:
                    4a:59:31:cc:bf:a4:54:9e:a5:3b:f0:95:31:3c:5a:
                    2b:83:18:47:a5:07:01:c0:7e:bf:6e:07:72:3b:f9:
                    68:49:f6:4a:34:52:b4:bd:24:bd:3d:26:f5:94:18:
                    44:63:d6:d7:4e:ed:59:b8:77:09:69:27:4d:f6:4f:
                    38:aa:f5:31:2a:da:ef:4d:8f:5d:e1:24:67:66:90:
                    e4:b2:6f:10:a6:fc:bf:ea:7e:72:cb:b9:18:aa:7c:
                    3c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:98:C3:86:15:E0:32:17:E7:30:9E:AD:A7:9E:23:0D:B0:64:26:AA
            X509v3 Authority Key Identifier:
                keyid:F9:36:A5:92:1A:43:1C:86:8B:B8:EA:81:0B:82:9F:BC:C1:8C:4B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e20323034393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:8e:fa:d2:28:94:06:06:81:cf:84:8f:e0:4d:fd:91:d3:4c:
         ac:21:b4:e2:58:c4:4c:7b:e9:bd:43:5f:fb:69:20:21:8a:bc:
         18:3c:41:1a:67:f8:80:52:55:ec:40:c3:85:6a:26:7f:88:b3:
         d2:15:19:6c:80:74:4a:b0:b7:a3:bf:20:81:3b:af:a5:8f:2f:
         a9:4d:de:ae:7a:9c:62:b6:2b:0c:e7:c0:d9:f4:ca:3e:2d:b5:
         2c:fb:2c:21:4f:72:a0:24:ba:82:cb:6e:7d:c4:db:12:e4:f7:
         a4:d0:b0:e1:1e:a0:7e:8d:ca:82:5d:2c:d7:00:ef:3d:bb:97:
         01:3e:8e:60:e8:8c:25:9b:d5:3b:aa:71:1f:e2:89:73:3a:63:
         32:65:ac:37:35:69:4c:0f:2c:a7:77:d6:b0:f7:39:4a:63:ec:
         d3:da:a2:90:58:67:fb:f1:2e:7e:6a:56:98:e5:ab:db:d5:a2:
         a6:da:7b:18:e1:a6:44:35:39:29:f6:e3:6a:95:fd:b3:e5:3e:
         67:d3:09:33:22:8a:70:2b:32:cf:5c:21:c7:85:84:32:7e:e5:
         02:ec:e7:e3:f6:6d:5d:5c:7a:3a:2f:b9:4d:49:de:67:1d:6a:
         90:c5:73:4d:a7:1a:68:b0:10:3a:71:5c:26:88:fe:0e:fe:6b:
         51:ec:c5:0b
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUGBNwBfABYcDcI7UFCbUvyT/mC20wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTQzMWVkZDU2NTYyNjg0ZWNkNGJlODQ4ZDkzZjBiNTg2
ZmY4ZTIwN2ZhNzY3YzZkZDkwHhcNMjYwOTA0MTExMTMwWhcNMjcwOTAzMTExNjMw
WjAzMTEwLwYDVQQDEyg4ODk4QzM4NjE1RTAzMjE3RTczMDlFQURBNzlFMjMwREIw
NjQyNkFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26SvwYQqkhiB
G1MkEDuDbcMoqvgz+v0DVtKr8/WqEwKiNCSl9EbG/tYcGEj7CLFlJTOSWrJQFLEN
XsTdv0aDIhIqYr8ZOg0GcVFEH2YfDJr/UOAo3NK6wNSj/82ZgujbXNbGS42sdgsw
w+Auqvp+cWCivFuZE9L2LiIBsARmDnoyOvkpA8PvwAp9jiQ7ZVHge47kN/bX1p4b
sStXjspoRoJbkkhKWTHMv6RUnqU78JUxPForgxhHpQcBwH6/bgdyO/loSfZKNFK0
vSS9PSb1lBhEY9bXTu1ZuHcJaSdN9k84qvUxKtrvTY9d4SRnZpDksm8Qpvy/6n5y
y7kYqnw8PQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFIiYw4YV4DIX5zCeraeeIw2w
ZCaqMB8GA1UdIwQYMBaAFPk2pZIaQxyGi7jqgQuCn7zBjEt6MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzYwN2Y4MTIxMjNhNjRlNTY4MGRkYWNmYjA5MTU1YjliLzAv
RjkzNkE1OTIxQTQzMUM4NjhCQjhFQTgxMEI4MjlGQkNDMThDNEI3QS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZGUwMjdhMWEtMjY5NS00YzBlLWFlN2QtZTZjYjEw
YWZhMTI1LzQ4ZGI5ZjM3LWViYjEtNGU1OC04MjMyLWZmOWQ5YmNmNWNlYi9hNDMx
ZWRkNTY1NjI2ODRlY2Q0YmU4NDhkOTNmMGI1ODZmZjhlMjA3ZmE3NjdjNmRkOS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS82MDdmODEyMTIzYTY0ZTU2ODBkZGFj
ZmIwOTE1NWI5Yi8wLzMxMzMzMDJlMzEzMjJlMzEzMDMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMDM0MzkzNjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAggxmMA0GCSqGSIb3DQEB
CwUAA4IBAQABjvrSKJQGBoHPhI/gTf2R00ysIbTiWMRMe+m9Q1/7aSAhirwYPEEa
Z/iAUlXsQMOFaiZ/iLPSFRlsgHRKsLejvyCBO6+ljy+pTd6uepxitisM58DZ9Mo+
LbUs+ywhT3KgJLqCy259xNsS5Pek0LDhHqB+jcqCXSzXAO89u5cBPo5g6Iwlm9U7
qnEf4olzOmMyZaw3NWlMDyynd9aw9zlKY+zT2qKQWGf78S5+alaY5avb1aKm2nsY
4aZENTkp9uNqlf2z5T5n0wkzIopwKzLPXCHHhYQyfuUC7Ofj9m1dXHo6L7lNSd5n
HWqQxXNNpxposBA6cVwmiP4O/mtR7MUL
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:41 2026 by rpki-client