Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3133312e3134332e39342e302f32342d3234203d3e203436343735.roa
File:                     3133312e3134332e39342e302f32342d3234203d3e203436343735.roa (raw, json)
Hash identifier:          dVptQr87GeI7WFd1Ok8ttKhOVMFk9UuEfSY7l6tWA38=
Subject key identifier:   5A:7D:B3:26:09:13:6D:C9:2A:5B:70:AC:FA:79:CE:B7:CB:28:F0:F6
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       2F669E912A807BBF8FDCC7C0357D4EE0EF00B9DE
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3133312e3134332e39342e302f32342d3234203d3e203436343735.roa
Signing time:             Tue 21 Apr 2026 20:46:32 +0000
ROA not before:           Tue 21 Apr 2026 20:41:32 +0000
ROA not after:            Tue 20 Apr 2027 20:46:32 +0000
asID:                     46475
IP address blocks:        131.143.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Apr 2026 21:54:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:66:9e:91:2a:80:7b:bf:8f:dc:c7:c0:35:7d:4e:e0:ef:00:b9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Apr 21 20:41:32 2026 GMT
            Not After : Apr 20 20:46:32 2027 GMT
        Subject: CN=5A7DB32609136DC92A5B70ACFA79CEB7CB28F0F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:45:3e:38:92:24:97:7f:a9:72:e4:6e:32:b5:
                    e2:2b:b4:98:56:8d:61:d4:09:7a:a7:3e:f0:a7:5b:
                    e6:78:e3:12:59:72:b6:37:62:12:9b:94:49:80:19:
                    e9:5f:5b:1c:a3:2d:0b:05:10:30:e9:bf:93:26:cc:
                    2c:cf:0b:b2:9e:be:da:3c:45:c3:00:c7:cb:04:b2:
                    87:39:e1:5a:84:e4:d6:6e:f3:16:db:f5:9b:fc:51:
                    8b:b6:08:0f:62:7a:78:07:83:ac:1b:30:6b:3f:73:
                    47:9a:56:3a:01:10:ca:18:fe:1c:33:54:65:ed:72:
                    ab:25:f4:70:18:45:76:6e:41:dc:29:f1:98:6a:33:
                    8d:67:04:22:fc:24:87:61:de:92:44:ff:00:1d:d9:
                    70:58:10:e5:37:ba:1c:40:e5:bb:76:10:93:10:14:
                    15:2b:a8:68:a7:e5:8c:0d:cf:a0:86:93:fb:bc:83:
                    8a:6b:17:6a:3a:a7:e4:f4:01:b1:42:fb:b0:e2:de:
                    92:e0:75:e5:33:8e:b1:d0:4c:f3:f5:17:80:23:60:
                    93:93:c3:cd:3a:a7:1e:71:65:a8:ed:11:1e:f5:4d:
                    c5:08:47:89:4c:39:3a:b0:da:ae:12:df:bb:9b:b7:
                    4e:97:64:3e:47:40:9b:b1:86:5f:4c:43:a1:67:f9:
                    4f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7D:B3:26:09:13:6D:C9:2A:5B:70:AC:FA:79:CE:B7:CB:28:F0:F6
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3133312e3134332e39342e302f32342d3234203d3e203436343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:8a:49:ea:62:ef:7b:65:47:bc:0b:4b:66:66:d1:9b:c1:70:
         af:e3:aa:17:bb:a4:02:19:8f:f2:97:2a:fe:07:1c:88:b5:46:
         d2:9e:e3:b8:03:0b:26:98:e2:14:df:62:4c:8e:80:65:d2:c6:
         3b:d1:f2:5e:1b:3d:7b:c0:12:b2:46:0b:72:3f:a4:bc:30:f3:
         70:79:5a:7d:34:4b:dd:78:e6:d6:cd:f1:e1:e7:67:1c:54:17:
         62:72:10:de:06:37:0b:d5:60:89:c4:7c:5d:1c:16:d2:5c:1d:
         8c:f8:45:d1:9a:d0:b5:a0:7c:24:3c:eb:f1:dd:b3:97:a9:e7:
         c3:4b:8f:10:02:fc:51:fe:0b:2e:e9:5a:18:f6:a7:ac:5c:82:
         fe:40:0c:e1:c7:cd:b1:da:64:f7:ac:d5:5a:96:53:b6:e6:0d:
         d1:77:61:0b:68:21:2b:ae:6a:d9:7f:a8:bf:69:a3:e1:30:19:
         5f:dd:13:d4:d5:79:5c:85:59:5c:bc:ea:e5:fc:1c:7b:1c:85:
         6b:84:05:22:f6:d5:21:1b:da:e8:01:2d:6d:5c:73:2c:16:48:
         81:a8:41:b4:79:ea:22:56:80:ff:1e:df:94:49:37:62:64:27:
         3b:a1:d8:00:ae:3a:04:09:80:3a:fd:c1:1c:f8:fe:13:b3:4d:
         08:ff:fc:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 06:32:30 2026 by rpki-client