Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e2032393134.roa
File:                     3133302e31322e3130322e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          uCaQjEj1BDCNxatZc7mEptwKI4+3c+47lmOnXLDXaoc=
Subject key identifier:   8B:4A:3E:F5:6F:BC:79:3D:CE:1A:39:86:09:25:19:F2:09:6C:7D:14
Certificate issuer:       /CN=a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9
Certificate serial:       3D64CC3DE4AE1D0EA1ED5594E029B03F481E516F
Authority key identifier: F9:36:A5:92:1A:43:1C:86:8B:B8:EA:81:0B:82:9F:BC:C1:8C:4B:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e2032393134.roa
Signing time:             Fri 22 May 2026 21:20:35 +0000
ROA not before:           Fri 22 May 2026 21:15:35 +0000
ROA not after:            Fri 21 May 2027 21:20:35 +0000
asID:                     2914
IP address blocks:        130.12.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.crl
                          rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 May 2026 15:34:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:64:cc:3d:e4:ae:1d:0e:a1:ed:55:94:e0:29:b0:3f:48:1e:51:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9
        Validity
            Not Before: May 22 21:15:35 2026 GMT
            Not After : May 21 21:20:35 2027 GMT
        Subject: CN=8B4A3EF56FBC793DCE1A3986092519F2096C7D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:71:0f:23:67:80:f8:2c:da:55:25:0e:29:94:
                    12:9f:b8:ad:42:29:a1:59:f4:53:d1:32:0c:13:0c:
                    e7:f4:de:c3:73:23:1a:b1:a6:0c:3f:31:cc:1e:7f:
                    6d:26:f8:30:b9:17:a3:a6:2e:41:1c:96:69:eb:20:
                    a7:50:56:a0:bc:ee:a2:bb:5d:41:01:10:83:de:19:
                    60:71:a2:a9:17:c2:5e:05:76:c1:21:61:b9:c5:7d:
                    67:6d:b0:00:b0:6a:dc:77:aa:40:8e:06:33:7a:5a:
                    d1:0d:30:78:c3:f8:04:05:77:9f:e8:27:7f:13:d2:
                    06:df:0d:f2:7e:19:aa:b3:05:16:83:48:13:9c:c2:
                    bf:80:c4:18:e8:b2:60:5a:18:c9:a6:4b:b0:53:64:
                    3f:22:0c:fc:bb:b6:ae:8b:bb:96:f1:7d:f9:36:e0:
                    5d:ee:5a:5d:07:a2:35:e8:59:e0:6b:68:68:50:db:
                    cf:c4:56:ed:41:7c:68:51:81:96:f5:a9:f5:53:db:
                    81:91:eb:93:a0:b6:85:ec:c1:8f:2c:ac:62:9d:2e:
                    d6:55:f8:b7:8f:d4:5a:51:89:93:dc:fe:ad:4d:8d:
                    a0:6f:06:36:ff:f7:5b:d3:ed:4f:d5:bd:b6:0f:bc:
                    d2:6b:a0:5e:72:0e:76:90:f1:03:9b:7b:f4:d5:a6:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:3E:F5:6F:BC:79:3D:CE:1A:39:86:09:25:19:F2:09:6C:7D:14
            X509v3 Authority Key Identifier:
                keyid:F9:36:A5:92:1A:43:1C:86:8B:B8:EA:81:0B:82:9F:BC:C1:8C:4B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/F936A5921A431C868BB8EA810B829FBCC18C4B7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/607f812123a64e5680ddacfb09155b9b/0/3133302e31322e3130322e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.12.102.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:15:eb:63:fb:a8:06:19:28:b8:cc:31:6a:67:ee:ca:ae:1d:
         fb:6c:17:b7:01:e8:8e:96:c0:7b:5d:61:a5:b3:f0:d5:53:73:
         d7:3b:4c:c7:c1:7a:1c:7d:d3:97:59:80:13:27:41:05:b8:e8:
         f5:ad:05:ad:1b:26:85:f6:68:8c:7c:34:17:25:4a:7d:70:e9:
         36:13:65:67:a3:03:ed:5e:f0:22:06:ec:d1:e5:10:d9:4e:92:
         a6:80:3a:91:7d:de:c1:cd:ce:4d:1b:4b:65:73:d2:0d:7c:6a:
         0f:26:fb:4b:57:4e:53:b7:b4:b6:c2:43:dd:a3:bf:9e:4b:e7:
         01:da:d1:ff:56:48:e4:f6:0a:c2:cf:32:80:00:17:25:3b:35:
         8c:11:31:a6:82:45:61:a3:20:33:46:f8:ab:3e:5c:31:08:93:
         f4:cf:1b:91:03:3c:39:d6:ea:fc:9b:09:e9:11:2f:9c:f7:f4:
         4e:ff:61:c8:13:16:71:a4:60:80:e3:1a:74:43:24:e6:3e:fb:
         81:5b:e4:4b:a8:6c:e4:97:05:3a:2f:b8:a0:81:f2:db:75:f4:
         02:be:0e:61:0e:23:d5:8d:b1:e2:99:ba:1c:7f:22:b3:a4:02:
         75:73:2e:94:e8:43:3d:46:e6:56:1a:4f:29:d2:12:0e:97:57:
         54:1c:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 17:46:21 2026 by rpki-client