Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131362e302f32342d3234203d3e203436343735.roa
File:                     3134312e3139352e3131362e302f32342d3234203d3e203436343735.roa (raw, json)
Hash identifier:          nWEFEEgiaF7F/CKkqT5ioF5y69bsqzbweL+j7ZUtNjM=
Subject key identifier:   48:AB:81:2E:42:79:DB:C6:DB:6B:54:C8:04:99:63:C4:E4:85:B0:78
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       7E026A5E57875FA806E514255A15D8AD0BEC9FF4
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131362e302f32342d3234203d3e203436343735.roa
Signing time:             Wed 11 Feb 2026 00:55:55 +0000
ROA not before:           Wed 11 Feb 2026 00:50:55 +0000
ROA not after:            Wed 10 Feb 2027 00:55:55 +0000
asID:                     46475
IP address blocks:        141.195.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Feb 2026 22:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:02:6a:5e:57:87:5f:a8:06:e5:14:25:5a:15:d8:ad:0b:ec:9f:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Feb 11 00:50:55 2026 GMT
            Not After : Feb 10 00:55:55 2027 GMT
        Subject: CN=48AB812E4279DBC6DB6B54C8049963C4E485B078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:cb:22:f3:c0:0a:3b:ea:54:b7:24:b4:09:3a:
                    c6:e6:42:3a:95:9e:af:43:83:d2:75:9b:77:6f:05:
                    d2:6a:fb:a6:71:e8:f7:37:88:c0:4c:42:ac:dc:e3:
                    38:a4:11:40:18:f4:07:01:7a:fc:4f:4b:80:e7:53:
                    ab:25:4f:a3:80:08:17:8b:ef:ea:7d:ac:81:cf:7f:
                    8c:fd:d2:ae:00:6b:f6:b2:d5:8a:5f:2b:b1:af:56:
                    23:b1:c8:7f:dc:15:4e:10:87:7e:e0:35:72:51:16:
                    6c:69:61:41:af:04:6c:a3:6f:7f:a8:41:6d:15:55:
                    61:ca:c4:28:ea:4d:33:96:0a:4e:1c:00:fd:c0:2d:
                    3b:d5:ce:7a:a6:d0:3a:e7:f5:01:1b:ca:22:d3:65:
                    16:24:9e:85:59:b6:0f:58:f3:f8:71:09:1d:19:f9:
                    06:13:4f:f6:ca:6e:91:0d:d2:1c:40:2f:d6:f7:5a:
                    c1:67:bc:a8:f3:2c:a0:9d:16:a9:24:89:cd:d8:c1:
                    b5:00:bd:8c:7a:73:32:dd:7c:85:18:ba:b5:f6:ba:
                    d4:ff:07:5c:c1:b8:7e:05:1b:a6:c7:6c:1a:ef:ed:
                    c2:4a:d3:6b:1f:0c:fa:95:38:c5:af:8f:a0:6f:fd:
                    6f:b7:a7:f2:77:e7:b7:d6:d2:13:f3:67:fc:05:f6:
                    78:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AB:81:2E:42:79:DB:C6:DB:6B:54:C8:04:99:63:C4:E4:85:B0:78
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3134312e3139352e3131362e302f32342d3234203d3e203436343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:d4:57:42:df:56:d5:34:91:47:a0:86:62:4b:ff:79:a6:73:
         fb:17:64:3a:34:01:79:ae:26:51:43:21:0c:12:e2:38:6d:48:
         ee:fc:0a:0c:3c:2d:50:c6:ff:09:de:6c:f8:0e:d0:c4:b7:c3:
         d5:67:38:5d:28:ab:7c:9c:08:fa:26:7e:da:27:d7:e3:d8:65:
         ea:af:e6:d8:9b:e2:89:de:f9:f5:35:a5:64:38:69:61:d3:6f:
         25:00:ef:a2:39:17:1e:7b:03:b1:95:25:0f:00:5d:fc:28:c0:
         83:42:58:d6:78:b7:a3:e3:51:a4:e2:db:0f:cf:f0:a4:d1:03:
         da:b8:95:c7:89:61:74:90:ee:8c:68:30:ab:78:59:6c:47:6f:
         a3:56:6d:d0:8d:9b:3a:81:79:79:fc:63:e4:b7:56:b4:4d:40:
         14:57:b6:b7:ea:5b:bb:16:b7:c2:b2:ec:f0:cf:b9:f6:7a:36:
         b6:07:4e:38:f3:29:ca:42:77:f5:81:ed:4c:a3:be:44:74:9a:
         76:03:3d:a4:2e:8c:51:3a:77:bf:be:2b:d2:68:36:4f:1f:b8:
         40:5c:19:c7:4c:c7:e0:c1:1e:2f:8e:84:b2:e4:89:4c:a4:21:
         ba:9a:8b:d3:ee:29:52:7a:4b:14:20:3d:d4:73:cf:18:5d:25:
         44:18:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 27 01:55:48 2026 by rpki-client