Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32342d3234203d3e20383334.roa
File:                     3231362e3132322e3132322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          dbVGbnmUwxZi002V3q5kSPSIxXv9cTMjUiSUPS+7iVA=
Subject key identifier:   6E:B4:E8:C8:9F:BE:06:99:1A:82:F6:0D:A0:ED:1C:C7:F4:A9:BA:58
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       7FB458CC387ACAB0EADB324F092D91534CE42E00
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32342d3234203d3e20383334.roa
Signing time:             Wed 14 Oct 2026 00:02:36 +0000
ROA not before:           Tue 13 Oct 2026 23:57:36 +0000
ROA not after:            Wed 13 Oct 2027 00:02:36 +0000
asID:                     834
IP address blocks:        216.122.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 12:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b4:58:cc:38:7a:ca:b0:ea:db:32:4f:09:2d:91:53:4c:e4:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct 13 23:57:36 2026 GMT
            Not After : Oct 13 00:02:36 2027 GMT
        Subject: CN=6EB4E8C89FBE06991A82F60DA0ED1CC7F4A9BA58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3d:52:ad:8b:75:23:3f:a1:b9:ed:18:0f:83:
                    2d:e7:c9:91:80:58:20:8a:57:32:f9:a2:77:b3:52:
                    80:65:58:61:b3:c6:bc:a7:e5:8f:72:d6:52:b1:b3:
                    4f:ff:b9:ba:90:2a:d6:2c:55:f8:12:6b:13:99:e3:
                    96:5a:f4:6b:c0:57:10:1b:51:86:f2:d4:f2:78:b6:
                    6a:82:03:72:16:9c:31:08:53:a2:95:cb:6f:a8:74:
                    ac:d8:10:2b:fe:0e:34:0c:68:3c:8c:55:a7:20:95:
                    8d:24:c5:a2:5d:da:2a:20:0d:cb:58:0b:10:5e:86:
                    ed:bc:8d:44:ae:a3:5e:c6:b2:a2:98:5c:ce:a9:60:
                    55:b1:11:55:3a:87:81:e8:af:67:98:86:e4:e2:54:
                    37:0a:41:99:4c:8a:02:7f:7a:22:59:4b:bb:71:79:
                    3a:46:08:4d:59:19:b2:53:62:ab:9b:7e:86:cc:de:
                    0d:ab:c8:e9:58:57:da:ec:29:22:39:04:68:f8:8a:
                    30:9d:b8:d8:cb:51:3d:76:9e:6f:f1:d3:a3:e5:fd:
                    b3:a3:76:bb:56:14:23:de:0a:db:2a:96:8d:9a:4a:
                    d3:ad:52:c1:4e:55:97:d0:a9:c7:a0:43:f8:4f:4b:
                    57:61:80:96:fe:74:70:6f:76:c7:8d:1a:be:02:6f:
                    e2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:B4:E8:C8:9F:BE:06:99:1A:82:F6:0D:A0:ED:1C:C7:F4:A9:BA:58
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:e7:b7:84:6d:31:c0:25:12:34:9a:18:36:5f:b3:30:b5:27:
         3e:5b:5d:7d:01:f1:31:57:72:1d:27:9d:14:23:53:20:f8:fb:
         58:81:7d:4c:fa:68:86:b6:73:fb:66:7c:33:ef:98:ea:85:8d:
         ba:00:ec:26:51:44:c7:d2:d6:ce:fa:c1:d4:6f:7d:ef:16:82:
         6f:27:00:3e:4a:72:0d:7a:e5:93:03:e2:ed:e6:83:10:54:05:
         2c:19:2f:d2:f8:65:5d:f2:b8:0d:30:d3:48:44:70:fe:5e:ff:
         fd:d1:ae:50:58:4c:b2:76:55:b7:6b:52:f3:e1:bc:51:90:5c:
         8d:03:c9:aa:b1:d6:4f:0b:43:38:2a:b8:ec:ed:81:f8:de:3b:
         21:05:7a:83:3f:1c:9b:56:6d:aa:1f:91:18:f5:63:8c:0a:b8:
         01:74:fc:7b:0d:8f:d9:9b:ad:72:4c:f0:04:2a:0b:02:de:88:
         b9:8e:99:2a:cc:9d:86:5f:04:eb:0b:bd:42:69:fe:a5:89:6e:
         30:05:5f:4a:47:7d:77:23:bd:b6:13:f8:68:5e:cf:43:76:18:
         55:85:a9:3e:85:d1:09:1b:a2:ea:c1:be:ee:96:df:75:f1:5e:
         8a:5d:5d:e8:a3:88:bc:61:82:7b:a7:72:3e:be:75:52:a3:39:
         eb:81:7d:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:36 2026 by rpki-client