Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132352e302f32342d3234203d3e20383334.roa
File:                     3231362e3132322e3132352e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          bRdbD3SS1uojylurc/Yt2vV88zrKNT+7VkeLg/nJhrI=
Subject key identifier:   2D:9A:09:81:51:85:29:E9:34:46:DD:8E:C6:3A:DF:43:7A:06:87:F9
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       6092C4146CD06F02C642555DB0303266123C6B7F
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132352e302f32342d3234203d3e20383334.roa
Signing time:             Wed 07 Oct 2026 06:10:38 +0000
ROA not before:           Wed 07 Oct 2026 06:05:38 +0000
ROA not after:            Wed 06 Oct 2027 06:10:38 +0000
asID:                     834
IP address blocks:        216.122.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 12:13:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:92:c4:14:6c:d0:6f:02:c6:42:55:5d:b0:30:32:66:12:3c:6b:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Oct  7 06:05:38 2026 GMT
            Not After : Oct  6 06:10:38 2027 GMT
        Subject: CN=2D9A0981518529E93446DD8EC63ADF437A0687F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:85:46:3c:1c:54:8d:e1:51:ae:57:fc:34:0c:
                    96:f3:30:67:8e:af:31:c3:2d:4e:91:90:30:5c:87:
                    5f:27:46:86:df:10:1a:26:76:33:37:6d:21:fc:f9:
                    e3:17:3f:0b:d1:4b:76:b1:2a:d8:39:b9:86:6c:a8:
                    5d:38:9c:a8:f4:4f:7d:43:e2:cc:07:29:70:1d:65:
                    30:88:0f:d5:9f:08:4f:ec:21:c5:1d:9d:0f:ef:bc:
                    32:9d:7b:21:59:cd:6f:4d:cf:1f:dc:63:bb:7d:93:
                    78:ee:b9:61:3f:9d:3c:3d:fb:b7:41:18:e5:b4:2a:
                    3b:02:64:00:93:40:e6:1a:2c:44:f1:61:0b:53:a6:
                    97:01:54:44:b1:e3:07:cb:21:0f:af:bb:b6:37:c8:
                    06:3f:02:20:fa:c8:b0:1c:31:21:de:a2:48:56:e2:
                    cf:4c:df:76:6c:59:bb:72:b9:e0:bc:96:c3:d3:5d:
                    76:55:d0:89:0b:2e:9d:df:91:a0:c5:c1:05:c6:e5:
                    a7:9c:4b:5a:d3:cb:ec:91:54:5c:22:a0:45:3c:91:
                    22:a9:cb:e4:7d:e2:35:80:e2:fa:06:9e:df:4a:f4:
                    cd:a0:8c:b2:fd:96:b5:01:63:ef:d3:f9:45:0e:cd:
                    5c:9b:57:8e:0c:48:76:fc:36:fc:77:67:58:5b:d4:
                    89:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:9A:09:81:51:85:29:E9:34:46:DD:8E:C6:3A:DF:43:7A:06:87:F9
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132352e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:6e:3e:e4:c0:0d:87:fa:2a:95:fa:dc:aa:ec:88:0a:87:74:
         3a:06:de:10:3b:8a:3e:ee:1b:4d:24:37:95:63:5b:03:17:fd:
         2a:85:5e:97:b5:0c:70:d8:94:25:bd:af:61:aa:24:aa:5a:4f:
         fe:7f:5b:b4:8a:f5:c1:fb:db:2f:29:9d:b4:e1:9b:8d:02:66:
         62:cc:77:ab:d3:d4:2f:53:d5:b6:12:d1:cf:63:d0:e8:ec:34:
         96:3f:b7:86:ec:43:3a:e3:6e:02:93:93:c2:05:36:15:e3:90:
         d8:ec:ed:40:e1:c7:5c:2b:32:db:b7:fc:34:8b:c6:38:3d:b1:
         01:8e:9f:40:58:6d:79:26:29:bc:fa:15:1c:5b:23:5c:62:7e:
         bd:eb:76:b3:b6:16:30:25:54:26:5d:22:e5:bc:94:f7:5c:69:
         8b:d0:2f:f0:80:16:ab:45:64:3c:fd:fb:1c:74:77:68:26:13:
         47:06:db:b4:a1:49:53:15:84:c0:e1:81:c0:27:0c:0f:7b:de:
         b1:f6:f5:fc:96:c3:38:b9:dd:2f:38:87:c8:a7:b3:b1:ad:74:
         de:1a:26:89:d6:bd:28:85:4c:97:0e:d0:48:fe:84:03:a2:37:
         8d:4c:9f:ad:15:f2:6d:d4:27:4c:90:5f:eb:2a:3d:8d:79:8c:
         64:d7:71:1d
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUYJLEFGzQbwLGQlVdsDAyZhI8a38wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjYxMDA3MDYwNTM4WhcNMjcxMDA2MDYxMDM4
WjAzMTEwLwYDVQQDEygyRDlBMDk4MTUxODUyOUU5MzQ0NkREOEVDNjNBREY0MzdB
MDY4N0Y5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4VGPBxUjeFR
rlf8NAyW8zBnjq8xwy1OkZAwXIdfJ0aG3xAaJnYzN20h/PnjFz8L0Ut2sSrYObmG
bKhdOJyo9E99Q+LMBylwHWUwiA/VnwhP7CHFHZ0P77wynXshWc1vTc8f3GO7fZN4
7rlhP508Pfu3QRjltCo7AmQAk0DmGixE8WELU6aXAVREseMHyyEPr7u2N8gGPwIg
+siwHDEh3qJIVuLPTN92bFm7crngvJbD0112VdCJCy6d35GgxcEFxuWnnEta08vs
kVRcIqBFPJEiqcvkfeI1gOL6Bp7fSvTNoIyy/Za1AWPv0/lFDs1cm1eODEh2/Db8
d2dYW9SJ1wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFC2aCYFRhSnpNEbdjsY630N6
Bof5MB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzEzMjMyMmUzMTMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzODMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYen0wDQYJKoZIhvcNAQELBQAD
ggEBAJ5uPuTADYf6KpX63KrsiAqHdDoG3hA7ij7uG00kN5VjWwMX/SqFXpe1DHDY
lCW9r2GqJKpaT/5/W7SK9cH72y8pnbThm40CZmLMd6vT1C9T1bYS0c9j0OjsNJY/
t4bsQzrjbgKTk8IFNhXjkNjs7UDhx1wrMtu3/DSLxjg9sQGOn0BYbXkmKbz6FRxb
I1xifr3rdrO2FjAlVCZdIuW8lPdcaYvQL/CAFqtFZDz9+xx0d2gmE0cG27ShSVMV
hMDhgcAnDA973rH29fyWwzi53S84h8ins7GtdN4aJonWvSiFTJcO0Ej+hAOiN41M
n60V8m3UJ0yQX+sqPY15jGTXcR0=
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:20:36 2026 by rpki-client