Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa
File:                     3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa (raw, json)
Hash identifier:          cHb/MI+rnPU7UvMcBMHq4rhj/Fv4llHEbF0EwpopSS4=
Subject key identifier:   21:C8:60:05:32:C2:DA:54:DE:93:6F:7F:54:97:27:D0:6D:D9:1A:CB
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2ACF0C3BC6F77EE5CED8F15A434AAD06DFD7F3B3
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa
Signing time:             Mon 03 Aug 2026 13:36:10 +0000
ROA not before:           Mon 03 Aug 2026 13:31:10 +0000
ROA not after:            Mon 02 Aug 2027 13:36:10 +0000
asID:                     46537
IP address blocks:        216.247.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:37:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:cf:0c:3b:c6:f7:7e:e5:ce:d8:f1:5a:43:4a:ad:06:df:d7:f3:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug  3 13:31:10 2026 GMT
            Not After : Aug  2 13:36:10 2027 GMT
        Subject: CN=21C8600532C2DA54DE936F7F549727D06DD91ACB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:61:dd:1f:ab:04:d8:9c:2f:c7:eb:11:a4:9e:
                    26:a8:7b:76:a5:19:a5:e0:37:8a:4a:5b:90:38:79:
                    ba:1e:85:d4:db:c5:1f:a5:03:1e:3e:0a:de:e7:2d:
                    ad:9a:5e:7b:be:71:39:a2:22:e0:df:74:55:82:ad:
                    fb:57:d1:ec:de:6e:ae:7b:43:5e:87:36:0d:50:bb:
                    24:77:bf:bc:31:15:5d:cb:6e:00:d3:95:b0:18:6a:
                    35:93:8f:87:79:be:4e:3b:49:9e:d9:6a:c1:2e:3f:
                    34:ef:48:16:02:94:be:0a:14:80:70:63:1c:4c:a6:
                    47:67:cc:70:2d:41:e8:37:a9:2f:6d:a6:9f:d3:3b:
                    bb:90:92:c5:e4:4b:d0:04:f1:f8:27:00:57:f3:a9:
                    8e:8b:1a:f9:9d:76:07:1e:9d:8f:f8:76:72:f1:09:
                    12:6e:c3:f9:72:ef:5f:ba:7e:5b:55:8f:34:e7:f5:
                    2e:8e:c7:74:99:23:9b:84:24:e4:10:bd:86:d3:f4:
                    a8:35:5d:35:13:70:d6:b2:fb:5e:52:03:26:82:60:
                    da:8e:be:96:9d:9d:f6:73:2e:26:18:a5:a8:d6:cd:
                    a5:7f:6f:d8:49:4f:67:b4:8c:0c:1d:10:54:6c:4a:
                    50:2f:e1:2a:23:a6:72:c6:b2:60:51:7c:bc:33:ec:
                    93:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C8:60:05:32:C2:DA:54:DE:93:6F:7F:54:97:27:D0:6D:D9:1A:CB
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:c6:b0:82:1a:94:83:d8:11:28:fe:42:69:b6:d6:11:dc:6f:
         a0:fa:65:e6:ac:cf:d1:a5:a7:e6:a8:cb:9d:19:5e:8e:4b:be:
         c7:c3:e1:ab:7b:9f:75:15:7d:4f:71:6d:27:5d:2b:fc:c2:90:
         13:0c:19:4c:04:2a:a1:b1:f6:06:5c:17:9c:ee:3f:10:2d:3a:
         52:a4:88:ee:8a:c0:c7:9e:a1:02:c5:f8:00:7a:75:fc:21:97:
         68:19:a7:3a:eb:4c:9c:3c:eb:fb:b2:e5:b7:02:ea:d9:89:e4:
         c3:95:cc:03:c5:9a:c6:c7:7a:0b:cf:4f:a6:8b:29:ba:e5:0b:
         b9:c4:24:70:b7:cc:6d:cf:bf:17:9f:d8:f1:30:31:b1:43:ab:
         a6:7f:e3:ca:5a:84:d3:87:4d:48:50:7f:92:4b:b3:00:85:78:
         79:88:ea:f1:1a:f4:74:43:ab:be:93:2f:5d:e7:4c:70:fd:ed:
         c9:c9:58:d7:ac:fc:0f:44:a1:31:88:db:8f:2e:7e:d1:f5:dc:
         ea:46:82:8c:ef:ae:22:06:21:06:0f:af:d8:e1:49:29:c7:d2:
         cd:6e:39:6c:45:83:8e:6e:96:df:26:46:79:d4:4d:4f:83:4d:
         15:d7:f6:53:c8:7e:ae:96:99:82:4b:dc:34:f8:75:d4:91:95:
         d2:99:23:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:13:30 2026 by rpki-client