Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32312d3234203d3e20383334.roa
File:                     3231362e3132322e3132302e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          JnPy2mTs92Mr7cYfju8ViZoj2LaMczN/fe3kFgTUgfc=
Subject key identifier:   7B:74:9D:15:2C:FA:D8:6F:F4:6A:31:BE:44:49:60:1B:C5:6A:25:D3
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       497493DD10D775AA096EC935CA2D1F53F7041ADE
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32312d3234203d3e20383334.roa
Signing time:             Thu 05 Mar 2026 00:07:44 +0000
ROA not before:           Thu 05 Mar 2026 00:02:44 +0000
ROA not after:            Thu 04 Mar 2027 00:07:44 +0000
asID:                     834
IP address blocks:        216.122.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Mar 2026 19:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:74:93:dd:10:d7:75:aa:09:6e:c9:35:ca:2d:1f:53:f7:04:1a:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Mar  5 00:02:44 2026 GMT
            Not After : Mar  4 00:07:44 2027 GMT
        Subject: CN=7B749D152CFAD86FF46A31BE4449601BC56A25D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:28:44:32:19:f9:c3:42:a9:83:de:79:19:
                    b2:8c:f6:49:3a:7a:55:76:d7:14:b2:a1:61:c4:6a:
                    1c:a7:2a:e8:60:f9:d1:e0:3c:81:34:0e:7a:30:c2:
                    fe:d7:aa:1a:4d:df:3a:e7:50:3a:53:6d:1f:50:ba:
                    9a:d5:50:25:b0:34:a4:00:b0:51:bd:91:1c:e5:22:
                    00:42:f5:68:47:a2:3c:7e:30:23:c3:e1:48:2d:07:
                    3f:55:ef:27:c7:26:69:17:e2:e9:df:e3:b7:89:6d:
                    39:9e:d5:2a:a0:74:20:b6:8e:71:ad:7d:8c:c7:bf:
                    94:28:c9:bf:c4:ca:a9:0b:bd:e8:f2:57:4a:75:f0:
                    bb:f1:13:ba:31:9a:69:2a:df:a6:80:23:74:31:78:
                    60:6e:01:99:82:f2:b1:b9:5d:2a:6b:0f:a1:57:4a:
                    9b:45:3b:f7:a3:4c:ff:62:09:06:7f:2e:c4:cd:ae:
                    ff:82:41:24:cb:2f:66:38:45:78:e4:df:3d:e2:98:
                    19:d9:3d:e4:12:b2:fe:69:f5:45:10:89:e2:35:fe:
                    98:4b:59:4f:45:88:09:4d:eb:8c:de:b7:f2:3e:7d:
                    50:af:a0:37:dd:79:e7:8f:2e:4f:fb:47:c0:9a:64:
                    59:82:8d:ae:52:c9:e1:28:89:9e:9c:6e:c8:e3:89:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:74:9D:15:2C:FA:D8:6F:F4:6A:31:BE:44:49:60:1B:C5:6A:25:D3
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:54:b4:f7:3c:fa:98:73:90:1b:33:16:af:c7:f9:73:96:
         b1:ae:6e:c0:2b:1e:1e:59:11:af:62:11:41:ec:8b:c8:5a:39:
         64:64:b1:4b:40:4d:46:ed:b3:00:21:58:84:3c:a1:b0:a0:82:
         bb:51:4a:e4:93:c7:25:81:7f:b5:e5:45:e4:de:cb:2f:d9:4e:
         7d:05:28:b1:55:94:ac:e1:e2:9c:c8:db:dd:8e:9a:e8:bf:c0:
         94:0b:d0:21:ff:30:d2:d0:c5:41:75:56:e1:1a:f8:c3:0a:c5:
         8d:c1:37:84:de:5f:5c:a7:ef:92:88:60:95:af:4d:7e:32:c0:
         50:07:e7:cd:85:10:53:7a:ec:f0:0b:a6:04:dd:35:82:69:3e:
         6a:9b:6a:ad:bf:16:67:29:28:d0:40:0d:77:58:28:85:2d:fb:
         e5:86:bb:e2:1f:c6:71:06:f0:e2:7d:e2:38:b3:b4:3b:f7:ad:
         68:27:a3:06:bc:00:e4:49:3f:27:2f:a8:94:5c:3f:5a:ed:91:
         ae:4d:3f:58:3d:39:3e:c7:69:3f:b9:74:bc:d8:ce:ef:1b:ea:
         04:7c:45:6f:9e:67:ba:51:3a:0a:dd:fa:f3:9c:09:a4:eb:8e:
         56:e1:3f:03:db:cf:ac:28:68:03:dd:ff:dd:24:05:40:36:ef:
         2d:b3:9a:fc
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUSXST3RDXdaoJbsk1yi0fU/cEGt4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjYwMzA1MDAwMjQ0WhcNMjcwMzA0MDAwNzQ0
WjAzMTEwLwYDVQQDEyg3Qjc0OUQxNTJDRkFEODZGRjQ2QTMxQkU0NDQ5NjAxQkM1
NkEyNUQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N0oRDIZ+cNC
qYPeeRmyjPZJOnpVdtcUsqFhxGocpyroYPnR4DyBNA56MML+16oaTd8651A6U20f
ULqa1VAlsDSkALBRvZEc5SIAQvVoR6I8fjAjw+FILQc/Ve8nxyZpF+Lp3+O3iW05
ntUqoHQgto5xrX2Mx7+UKMm/xMqpC73o8ldKdfC78RO6MZppKt+mgCN0MXhgbgGZ
gvKxuV0qaw+hV0qbRTv3o0z/YgkGfy7Eza7/gkEkyy9mOEV45N894pgZ2T3kErL+
afVFEIniNf6YS1lPRYgJTeuM3rfyPn1Qr6A33Xnnjy5P+0fAmmRZgo2uUsnhKIme
nG7I44nKbwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHt0nRUs+thv9GoxvkRJYBvF
aiXTMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzEzMjMyMmUzMTMyMzAyZTMwMmYzMjMxMmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAPYengwDQYJKoZIhvcNAQELBQAD
ggEBAGuSVLT3PPqYc5AbMxavx/lzlrGubsArHh5ZEa9iEUHsi8haOWRksUtATUbt
swAhWIQ8obCggrtRSuSTxyWBf7XlReTeyy/ZTn0FKLFVlKzh4pzI292Omui/wJQL
0CH/MNLQxUF1VuEa+MMKxY3BN4TeX1yn75KIYJWvTX4ywFAH582FEFN67PALpgTd
NYJpPmqbaq2/FmcpKNBADXdYKIUt++WGu+IfxnEG8OJ94jiztDv3rWgnowa8AORJ
PycvqJRcP1rtka5NP1g9OT7HaT+5dLzYzu8b6gR8RW+eZ7pROgrd+vOcCaTrjlbh
PwPbz6woaAPd/90kBUA27y2zmvw=
-----END CERTIFICATE-----
Generated at Sat Mar 7 13:00:36 2026 by rpki-client