Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32342d3234203d3e20323039383838.roa
File:                     3231362e3132322e3132322e302f32342d3234203d3e20323039383838.roa (raw, json)
Hash identifier:          SQoAozcY11gBoVc9+vM1HQIP2tmhksRVoSsK4MMD6cE=
Subject key identifier:   07:80:9B:4D:83:1C:93:F9:FC:AE:78:E3:FF:D3:61:77:D7:95:0F:4D
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       6AEF4FCD78F09C0D15BFD8602CF3ECA527016785
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32342d3234203d3e20323039383838.roa
Signing time:             Wed 29 Apr 2026 18:15:51 +0000
ROA not before:           Wed 29 Apr 2026 18:10:51 +0000
ROA not after:            Wed 28 Apr 2027 18:15:51 +0000
asID:                     209888
IP address blocks:        216.122.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 09:14:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:ef:4f:cd:78:f0:9c:0d:15:bf:d8:60:2c:f3:ec:a5:27:01:67:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Apr 29 18:10:51 2026 GMT
            Not After : Apr 28 18:15:51 2027 GMT
        Subject: CN=07809B4D831C93F9FCAE78E3FFD36177D7950F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:00:8e:27:19:31:87:a3:49:16:c7:80:72:d2:
                    d9:e0:c2:ef:5a:b1:68:42:d3:f5:74:94:2a:da:2d:
                    76:bb:61:9b:c5:67:8b:1d:d3:36:2b:07:86:16:0b:
                    48:43:1f:d9:56:7e:b2:9a:05:c4:86:17:77:72:e3:
                    db:13:85:50:5b:e1:61:d3:e0:17:77:21:fa:a2:b3:
                    7e:62:6a:9d:05:c4:bb:90:15:3d:c9:38:07:ea:94:
                    84:15:fd:92:61:7f:e6:5d:ee:9e:32:06:9c:c9:25:
                    03:e1:65:21:bd:b5:40:10:a7:26:8a:2e:ab:40:60:
                    ed:92:07:15:f3:c2:78:90:48:ee:7f:ea:b1:7c:1d:
                    fb:b5:80:1f:b8:94:5e:e1:ec:44:f4:8a:af:94:c2:
                    f8:34:e5:fe:f4:12:fc:90:59:2e:6f:4c:58:4a:e3:
                    9e:d5:d5:0b:a7:58:88:29:e0:b6:a9:ea:ed:e9:0b:
                    39:b1:67:ba:49:b4:6d:93:f0:69:b5:4e:f8:d4:11:
                    ac:23:02:10:40:e7:bc:28:2b:90:55:f7:b0:95:d9:
                    f8:31:4d:fa:7d:8c:1d:37:e1:e6:25:d2:2d:ff:3a:
                    99:b4:e5:c2:ee:82:15:0e:7a:55:32:06:e9:07:a1:
                    d0:be:49:f8:b2:a4:f9:d8:71:d6:1b:52:b9:ca:5f:
                    fa:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:80:9B:4D:83:1C:93:F9:FC:AE:78:E3:FF:D3:61:77:D7:95:0F:4D
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32342d3234203d3e20323039383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:5c:f5:97:c5:ec:d1:4d:88:c5:4f:d0:11:cb:5c:9e:17:cd:
         8f:76:96:0f:2d:41:61:fb:a0:20:ad:0f:d1:9d:3f:0a:87:59:
         85:58:a6:07:f9:ce:aa:dd:f9:9d:99:53:7b:de:bd:0e:cf:80:
         4a:57:c4:70:0e:aa:38:81:98:71:21:5f:68:50:57:14:79:da:
         44:fa:b2:b4:d2:b5:38:11:b6:e4:e3:ae:56:21:39:02:10:91:
         9b:9c:4f:0e:74:3e:90:c3:24:be:c5:9f:8a:e3:8f:30:23:a5:
         5e:50:89:65:d0:a2:e6:fe:00:e9:fe:20:99:70:16:85:3e:45:
         e2:7a:71:fb:7d:8d:0b:50:63:3c:c8:92:9e:d6:ad:1a:51:a6:
         60:44:03:79:b9:2e:cc:8e:be:46:47:0c:66:54:2f:e8:91:c1:
         fb:6e:c7:7a:23:0a:d1:48:4d:86:a5:ad:00:ef:a9:16:da:a7:
         93:b6:fa:60:26:ec:2f:dd:fc:e9:f6:76:c3:40:6b:49:58:52:
         0a:82:31:c5:f2:08:b5:93:28:26:4e:62:2a:53:5f:3c:c3:00:
         37:1e:74:1c:ce:e3:bb:ce:27:6e:1f:56:19:ac:5b:6d:bb:62:
         2b:36:cc:43:87:69:67:fb:de:ec:ee:72:3d:d9:df:b2:5b:bf:
         7f:0e:78:14
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUau9PzXjwnA0Vv9hgLPPspScBZ4UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjYwNDI5MTgxMDUxWhcNMjcwNDI4MTgxNTUx
WjAzMTEwLwYDVQQDEygwNzgwOUI0RDgzMUM5M0Y5RkNBRTc4RTNGRkQzNjE3N0Q3
OTUwRjREMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgCOJxkxh6NJ
FseActLZ4MLvWrFoQtP1dJQq2i12u2GbxWeLHdM2KweGFgtIQx/ZVn6ymgXEhhd3
cuPbE4VQW+Fh0+AXdyH6orN+YmqdBcS7kBU9yTgH6pSEFf2SYX/mXe6eMgacySUD
4WUhvbVAEKcmii6rQGDtkgcV88J4kEjuf+qxfB37tYAfuJRe4exE9IqvlML4NOX+
9BL8kFkub0xYSuOe1dULp1iIKeC2qert6Qs5sWe6SbRtk/BptU741BGsIwIQQOe8
KCuQVfewldn4MU36fYwdN+HmJdIt/zqZtOXC7oIVDnpVMgbpB6HQvkn4sqT52HHW
G1K5yl/6iQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFAeAm02DHJP5/K544//TYXfX
lQ9NMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzEzMjMyMmUzMTMyMzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzkzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYenowDQYJKoZIhvcN
AQELBQADggEBADxc9ZfF7NFNiMVP0BHLXJ4XzY92lg8tQWH7oCCtD9GdPwqHWYVY
pgf5zqrd+Z2ZU3vevQ7PgEpXxHAOqjiBmHEhX2hQVxR52kT6srTStTgRtuTjrlYh
OQIQkZucTw50PpDDJL7Fn4rjjzAjpV5QiWXQoub+AOn+IJlwFoU+ReJ6cft9jQtQ
YzzIkp7WrRpRpmBEA3m5LsyOvkZHDGZUL+iRwftux3ojCtFITYalrQDvqRbap5O2
+mAm7C/d/On2dsNAa0lYUgqCMcXyCLWTKCZOYipTXzzDADcedBzO47vOJ24fVhms
W227Yis2zEOHaWf73uzucj3Z37Jbv38OeBQ=
-----END CERTIFICATE-----
Generated at Wed May 6 02:40:34 2026 by rpki-client