Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32332d3234203d3e20383334.roa
File:                     3231362e3132322e3132322e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          LMvcE0/mR8HEeTYGr5sAx/KxRDDPwA6ltXVQ28+9jFc=
Subject key identifier:   44:11:9E:60:23:53:08:1C:DB:D9:B3:88:FF:A9:4D:8C:03:79:35:DF
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       1C3BD96B768455A0E9FE2EA27CC70AF7F692BFE6
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32332d3234203d3e20383334.roa
Signing time:             Tue 04 Aug 2026 01:32:49 +0000
ROA not before:           Tue 04 Aug 2026 01:27:49 +0000
ROA not after:            Tue 03 Aug 2027 01:32:49 +0000
asID:                     834
IP address blocks:        216.122.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Aug 2026 04:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:3b:d9:6b:76:84:55:a0:e9:fe:2e:a2:7c:c7:0a:f7:f6:92:bf:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug  4 01:27:49 2026 GMT
            Not After : Aug  3 01:32:49 2027 GMT
        Subject: CN=44119E602353081CDBD9B388FFA94D8C037935DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2e:97:c3:05:4f:ed:a0:fd:f3:28:75:9b:cd:
                    ae:ad:07:99:82:49:1e:16:fa:ce:01:dc:f0:cf:e0:
                    c2:54:e2:f1:ea:29:89:d5:73:2a:92:0e:06:ac:45:
                    fb:94:c6:b7:b2:3a:a0:3c:a4:7a:6a:c3:1d:1e:f8:
                    7b:b9:34:b8:10:2a:17:85:83:45:e3:01:ae:2a:51:
                    81:1f:48:8d:b0:23:d6:e1:85:63:8b:31:a4:8c:19:
                    d7:c6:11:b2:67:94:e1:5b:b9:02:b1:cc:12:5c:eb:
                    24:39:a7:87:b0:20:39:f6:7a:bd:da:c1:e0:c0:1e:
                    6f:1f:b7:a4:00:6e:8c:5f:14:79:33:9e:94:e0:b2:
                    91:e6:a3:50:05:8c:22:8d:ce:79:92:43:7b:de:ec:
                    fd:17:a3:03:c2:09:42:86:f6:3d:74:bc:f9:39:0f:
                    74:fa:13:de:0e:fc:e2:5d:4f:02:02:fe:d8:68:28:
                    6c:b9:1d:aa:3a:d1:09:c1:81:a3:85:00:20:e4:0d:
                    0c:ca:dc:47:b6:9c:22:cd:be:a9:4e:5b:3a:7a:f1:
                    28:ed:8b:b9:26:f1:fa:c4:69:c6:da:fb:61:39:5e:
                    ad:da:2c:2d:ce:00:90:e4:f7:71:15:b3:5d:ef:0c:
                    3b:05:a8:eb:8c:71:1d:b1:4e:95:2a:a2:79:ee:03:
                    93:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:11:9E:60:23:53:08:1C:DB:D9:B3:88:FF:A9:4D:8C:03:79:35:DF
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:f8:39:66:a7:e0:24:c7:25:56:84:9b:f6:58:0f:c0:e8:4f:
         04:84:a3:f1:63:b0:df:68:0a:c2:50:7c:b8:17:04:57:5d:ac:
         56:79:a7:c8:05:21:62:70:bd:df:09:40:3a:da:86:d1:92:fa:
         12:7c:a6:91:62:b0:3c:3a:87:07:b3:1d:7c:26:bb:bf:8e:04:
         11:6d:b7:16:2b:7d:f1:35:25:fb:97:5c:41:ec:dd:6d:9c:d2:
         06:26:d4:63:ba:10:3b:39:e6:7f:82:da:53:fa:8f:fd:eb:66:
         7b:39:63:b4:23:7e:52:fd:44:13:2c:56:72:6e:11:53:4a:4b:
         e1:0c:58:07:a5:6f:d5:14:2e:af:20:5c:24:7a:43:e7:21:b2:
         c9:ae:57:50:c7:a4:3d:5d:4d:fb:c9:c2:83:35:ec:1c:84:1d:
         7f:66:1b:8d:bb:91:b6:ff:81:88:c3:19:1c:55:63:fd:a8:21:
         da:88:e0:c3:24:bc:8e:fc:50:9d:ef:a5:c4:0b:82:f3:46:47:
         17:dc:35:d4:3e:c9:43:a7:44:d5:e7:d9:54:52:bb:b5:73:fa:
         d2:e8:9e:c4:17:ae:b1:5d:5f:60:00:39:8e:1a:e6:1e:b0:66:
         67:c5:53:f4:22:a9:95:ae:b6:f9:99:33:2d:fa:2d:50:56:73:
         9e:54:48:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:18:54 2026 by rpki-client