Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132332e302f32342d3234203d3e20383334.roa
File:                     3231362e3132322e3132332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          L56UZ4Pndt93Hwqa7m8gn8HvP2D+MB7V9khImtiojQA=
Subject key identifier:   B5:7D:E6:11:95:A8:25:CD:2A:50:56:BA:52:6D:19:48:57:11:BA:C0
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       4866D482D56CF8A935B992ADE8F2D0166ACB2738
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132332e302f32342d3234203d3e20383334.roa
Signing time:             Thu 25 Jun 2026 12:03:19 +0000
ROA not before:           Thu 25 Jun 2026 11:58:19 +0000
ROA not after:            Thu 24 Jun 2027 12:03:19 +0000
asID:                     834
IP address blocks:        216.122.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 04:37:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:66:d4:82:d5:6c:f8:a9:35:b9:92:ad:e8:f2:d0:16:6a:cb:27:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun 25 11:58:19 2026 GMT
            Not After : Jun 24 12:03:19 2027 GMT
        Subject: CN=B57DE61195A825CD2A5056BA526D19485711BAC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:63:9d:7f:1c:2a:09:98:b0:57:8e:00:b4:32:
                    7e:df:be:7b:94:37:48:08:1f:8c:6a:6d:41:1d:5e:
                    e4:9a:3e:ce:f4:f5:6f:39:ec:bf:44:a8:55:c8:31:
                    40:b4:4f:29:50:85:39:9f:ce:2e:7e:5a:b4:74:45:
                    0b:62:03:20:d8:48:9d:2f:b7:5b:12:d7:91:55:ae:
                    3c:06:c1:4d:2d:c2:24:26:32:25:e5:6b:ad:12:25:
                    60:43:6a:80:8d:83:5d:ff:cb:e4:e0:80:e0:4c:3b:
                    68:f5:95:31:b3:cd:7c:40:de:19:1b:b6:d1:30:e7:
                    a3:2f:a9:78:c7:5d:44:05:00:e2:65:1b:15:62:b9:
                    a9:c8:40:70:79:73:92:4f:88:c3:c2:a8:3d:c0:b6:
                    97:be:a9:1a:c8:00:03:0d:dd:2b:9c:90:f5:ff:39:
                    3f:a6:c4:1a:ff:b1:3f:8b:3b:c1:c0:66:e9:a6:2e:
                    b1:e1:28:f9:ce:54:9a:ae:b8:6a:37:65:47:ab:52:
                    3a:90:55:4e:d2:94:0b:ae:87:a8:9c:88:35:21:63:
                    59:be:30:d3:ff:d6:46:40:fa:fa:76:6a:03:c6:eb:
                    4e:46:c1:80:38:95:dc:50:4f:d6:fe:e2:ae:88:24:
                    43:1f:ef:cd:a6:c3:8e:da:e2:ee:09:1f:15:49:7e:
                    57:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:7D:E6:11:95:A8:25:CD:2A:50:56:BA:52:6D:19:48:57:11:BA:C0
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:bb:ea:2a:05:28:a4:b9:d7:6d:5d:c5:61:60:5f:90:ae:be:
         9f:b5:fc:a8:22:e5:e9:1e:83:f7:6a:cd:10:56:b2:94:14:a5:
         7b:39:7c:72:bf:e5:a7:37:cb:42:9b:61:b2:c1:e8:d2:f3:96:
         d2:78:8f:be:5a:7b:9f:cb:53:54:6d:b3:b1:ba:06:1b:e5:e0:
         1f:bf:ed:4c:56:15:d6:64:ae:2e:bd:44:3d:8a:cd:1b:78:af:
         b5:a8:02:b0:83:c6:51:d4:37:85:c2:8d:64:96:c7:d9:b4:24:
         62:03:c1:95:da:b9:d5:fe:ee:11:00:58:aa:ce:99:fc:2a:3b:
         b4:a3:5a:fb:cb:b0:62:75:9c:bf:c0:c5:4d:b5:19:05:6c:84:
         0e:36:0d:ea:bb:a9:af:bc:3f:a7:3c:e6:4d:76:33:f6:ea:10:
         bc:08:b9:af:38:33:a4:ee:c2:be:c1:52:d0:17:94:4f:92:59:
         52:98:bf:bb:7e:49:75:58:62:5c:3d:60:87:35:2e:aa:bc:71:
         f2:3b:2a:1a:0e:49:1b:5c:cb:e2:fc:fd:6d:88:fd:73:2d:58:
         e5:fd:90:2a:b2:20:0a:03:85:c4:28:da:a2:32:45:f0:ed:f1:
         a6:74:2e:7c:01:40:f4:72:6c:20:ff:8e:e7:be:74:7e:5e:d0:
         71:52:17:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 09:59:51 2026 by rpki-client