Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e2032393134.roa
File:                     3231362e3234372e3131312e302f32342d3234203d3e2032393134.roa (raw, json)
Hash identifier:          MsvjNRNcs+IO/6SU+FnLad/srZWAnCCd6riuKjxVwS8=
Subject key identifier:   34:46:CD:24:38:76:D2:DC:EC:D5:BF:80:F9:0B:85:22:A6:06:56:D2
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       63A80D589F698E3E64FE71EFA647077E2B4D24E5
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e2032393134.roa
Signing time:             Fri 14 Aug 2026 18:25:13 +0000
ROA not before:           Fri 14 Aug 2026 18:20:13 +0000
ROA not after:            Fri 13 Aug 2027 18:25:13 +0000
asID:                     2914
IP address blocks:        216.247.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 22 Aug 2026 11:15:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a8:0d:58:9f:69:8e:3e:64:fe:71:ef:a6:47:07:7e:2b:4d:24:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug 14 18:20:13 2026 GMT
            Not After : Aug 13 18:25:13 2027 GMT
        Subject: CN=3446CD243876D2DCECD5BF80F90B8522A60656D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c7:3c:ce:9b:79:e8:e9:42:d2:51:ef:a1:d1:
                    1d:b4:18:dc:e6:1c:8a:db:99:d1:ba:9a:b5:78:a0:
                    22:f8:cb:08:b3:60:af:3d:68:de:a1:f6:fb:83:e9:
                    30:22:89:5a:81:62:ff:b2:99:f2:1a:5e:29:71:85:
                    9e:fd:da:46:a9:2a:1a:5c:93:53:a7:01:a6:84:ad:
                    43:6d:96:10:22:3c:b6:59:19:91:a3:80:55:38:ec:
                    3f:e9:81:fc:8b:3b:cd:0e:82:c5:ee:22:4e:4f:2c:
                    18:7b:14:06:01:0c:b1:81:40:cb:d8:5f:f6:02:8f:
                    61:41:7c:6c:f8:51:76:69:42:68:b1:79:52:30:56:
                    86:b3:14:77:f3:fb:1e:31:bb:cc:4e:a1:b1:01:1f:
                    a0:c6:6e:3a:98:39:9a:13:77:b3:34:4b:5d:75:a9:
                    fa:da:c8:68:80:e5:80:8e:d6:5d:86:1a:7e:2b:0c:
                    06:21:49:2a:6f:26:36:a3:02:05:21:e7:65:6b:7d:
                    6f:48:1e:64:ba:dd:50:ef:8b:2e:d3:a4:97:b7:96:
                    03:12:0e:9f:a4:07:88:e2:55:9e:78:d6:62:91:d8:
                    f3:be:9d:7f:a8:6c:b3:4f:f2:c5:9b:41:70:6d:1b:
                    f1:1f:3f:14:8b:9b:76:f2:bc:db:9c:cb:d7:16:b2:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:46:CD:24:38:76:D2:DC:EC:D5:BF:80:F9:0B:85:22:A6:06:56:D2
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:7a:dc:ab:39:34:10:bb:a9:a2:d6:43:bb:8b:8d:65:6a:2d:
         ca:48:3c:ca:01:54:97:60:8c:bd:7f:45:d2:da:8c:e4:48:ef:
         cb:ec:de:32:21:dd:40:6c:a6:a2:28:a2:52:56:d7:6c:0d:16:
         9f:7b:28:20:a8:37:11:69:b0:f2:e7:07:da:90:f0:71:10:45:
         d5:07:cf:d1:d2:b1:e3:5c:8a:36:ca:9b:7f:c5:13:3d:8e:c9:
         16:db:34:53:25:85:30:7f:f6:a0:12:5e:e5:b2:14:ba:df:41:
         f5:69:12:84:0b:1b:03:74:b1:c7:4f:df:a2:68:fc:ed:65:38:
         5e:b4:4b:83:cf:be:5b:f4:b1:c2:16:d9:b1:52:fc:99:ac:94:
         5c:bd:ca:73:71:44:0d:c4:76:8b:3a:06:a9:a9:77:aa:8e:06:
         4f:c3:fc:9d:e0:84:7b:19:d7:b4:79:17:df:85:4c:67:f9:bb:
         54:84:c0:65:a8:eb:a7:f8:ec:49:dc:46:09:41:17:ae:a4:36:
         c8:bd:74:73:6b:06:b3:d3:32:fc:3c:a7:5c:4a:37:06:18:31:
         f3:be:e5:6d:66:7e:07:67:cb:b5:e6:ad:fd:b3:0a:45:93:8a:
         98:17:0c:67:a9:fd:13:14:24:f2:18:9e:db:f7:1d:e3:ec:73:
         8d:2b:c3:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 23:24:17 2026 by rpki-client