Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31322e302f32342d3234203d3e20323134343833.roa
File:                     3136322e3232312e31322e302f32342d3234203d3e20323134343833.roa (raw, json)
Hash identifier:          Llu7whEGijZ8GUc7iv/HkXS8L+mOhKSd4gKLNVh7uzk=
Subject key identifier:   70:FD:B1:50:5A:95:82:E5:8B:FF:AC:11:A4:6B:C5:C6:A4:F1:50:27
Certificate issuer:       /CN=9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e
Certificate serial:       422E35F6677597A0B7CEADE0B8C75F945382AD3D
Authority key identifier: EE:2E:BA:7A:2F:07:A4:74:7A:75:EB:84:07:67:ED:C1:2A:E9:E9:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31322e302f32342d3234203d3e20323134343833.roa
Signing time:             Fri 28 Aug 2026 22:01:06 +0000
ROA not before:           Fri 28 Aug 2026 21:56:06 +0000
ROA not after:            Fri 27 Aug 2027 22:01:06 +0000
asID:                     214483
IP address blocks:        162.221.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.crl
                          rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2e:35:f6:67:75:97:a0:b7:ce:ad:e0:b8:c7:5f:94:53:82:ad:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e
        Validity
            Not Before: Aug 28 21:56:06 2026 GMT
            Not After : Aug 27 22:01:06 2027 GMT
        Subject: CN=70FDB1505A9582E58BFFAC11A46BC5C6A4F15027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:58:9e:5e:88:56:0d:25:d3:65:be:ee:ea:
                    68:8a:0d:93:51:fd:fa:31:4d:b5:8a:06:6c:ca:47:
                    e4:2a:03:4e:02:cf:11:f7:1e:6c:f5:c9:67:17:41:
                    f2:17:dc:30:46:0b:e3:5e:b4:10:f6:e4:95:13:56:
                    66:4a:fc:66:5e:38:b3:66:92:07:a2:6c:57:4a:a2:
                    c2:f1:82:e2:5c:b1:27:da:56:79:9d:31:bd:d8:02:
                    ae:2c:bb:af:8b:51:ed:e4:7b:9c:56:0b:56:f2:00:
                    ed:f6:68:c9:0d:1c:d9:8f:52:31:55:ca:ec:52:59:
                    ab:1a:5e:8b:2d:58:d6:74:33:2b:63:c1:91:8c:8a:
                    64:ea:bd:c9:84:9c:15:0e:25:a1:89:52:dd:7a:75:
                    3e:b1:c0:59:ef:b4:d5:73:d9:0d:a8:01:7f:28:dc:
                    cd:df:ea:e1:ba:ee:26:88:1e:8a:77:95:3f:ab:6a:
                    ce:70:50:95:83:87:a4:3d:b9:61:bd:ce:ca:7f:51:
                    6d:44:ad:3a:e0:77:55:08:77:54:11:35:98:12:a9:
                    58:cb:36:90:a8:96:6c:b8:c3:96:49:a1:44:0e:47:
                    d9:bd:d3:96:c9:88:f1:30:09:4d:f0:25:17:13:dd:
                    67:dd:e6:f7:40:20:64:c1:45:60:f9:14:ac:d9:86:
                    e2:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:FD:B1:50:5A:95:82:E5:8B:FF:AC:11:A4:6B:C5:C6:A4:F1:50:27
            X509v3 Authority Key Identifier:
                keyid:EE:2E:BA:7A:2F:07:A4:74:7A:75:EB:84:07:67:ED:C1:2A:E9:E9:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31322e302f32342d3234203d3e20323134343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:00:fd:49:56:1b:58:ad:40:13:86:f3:a8:54:48:69:72:46:
         dd:3b:57:4b:dd:f2:f0:4d:99:d9:e6:e8:e3:64:e1:52:08:83:
         9e:e7:36:4a:1b:d1:06:3a:58:0c:1b:86:4e:7f:70:86:61:31:
         01:e1:ff:34:25:e7:60:ee:b8:92:7f:06:26:d0:17:52:01:3e:
         d2:4a:a9:d6:61:a0:72:84:b0:aa:bd:7d:83:1c:42:f4:11:e0:
         a3:46:9b:f2:2f:82:e9:91:56:03:4b:8b:d6:d9:14:ec:9b:bc:
         36:e2:8b:2d:d3:42:02:29:a4:07:11:a0:ec:fa:06:17:57:7a:
         09:72:a6:d2:90:f9:ba:73:51:3c:e0:32:98:bf:b4:46:60:2c:
         10:81:97:e3:37:78:0c:ab:33:f9:2c:ef:d8:7d:d8:31:2d:17:
         54:48:fd:96:f3:80:36:5b:0a:58:dd:de:d1:33:e2:27:b7:43:
         7c:07:d0:ee:f5:6b:8c:85:e7:13:96:8b:8f:94:2d:17:d7:2a:
         38:3e:f2:96:28:64:32:97:69:68:e0:50:92:d5:03:25:aa:2b:
         eb:b1:57:40:0e:ab:31:be:b2:36:3e:92:4d:f6:20:66:38:50:
         a5:cd:3a:98:a9:0d:7c:82:5e:14:40:71:ee:42:62:fb:8e:bf:
         51:39:18:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:49:27 2026 by rpki-client