Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20383334.roa
File:                     3230352e3231312e3135342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          9y1VeyFM/+dv3h8rWihDDoeQ0CQcRG9kC4Hq13BSgnw=
Subject key identifier:   E5:83:6A:BA:22:0E:24:44:55:7B:5F:6F:54:3B:3B:59:85:81:1D:A6
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       756F8BFC08EEA500917C8513B309C0F9E92D9B36
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20383334.roa
Signing time:             Tue 11 Aug 2026 08:38:07 +0000
ROA not before:           Tue 11 Aug 2026 08:33:07 +0000
ROA not after:            Tue 10 Aug 2027 08:38:07 +0000
asID:                     834
IP address blocks:        205.211.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 13 Aug 2026 21:23:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6f:8b:fc:08:ee:a5:00:91:7c:85:13:b3:09:c0:f9:e9:2d:9b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Aug 11 08:33:07 2026 GMT
            Not After : Aug 10 08:38:07 2027 GMT
        Subject: CN=E5836ABA220E2444557B5F6F543B3B5985811DA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:31:bd:c5:1a:24:15:2d:5e:0c:1b:47:7f:23:
                    b5:a1:88:d2:ac:a8:59:8a:c7:eb:35:b1:ce:58:6c:
                    9c:15:4a:7d:ab:85:c7:86:94:58:01:da:23:b1:96:
                    e4:7f:97:a1:ee:69:e9:79:61:22:78:01:ad:9b:a0:
                    27:a3:f2:cf:22:0d:d6:94:e2:54:36:87:cd:b2:3b:
                    56:07:4e:8e:6b:ca:80:45:fd:50:30:95:99:5c:75:
                    58:bb:7c:ae:f9:51:34:20:ec:23:2a:7f:0f:06:1c:
                    f9:ca:55:4c:c3:1b:95:38:7f:07:44:5f:ea:14:a0:
                    77:54:7b:72:d4:82:dd:a0:0f:64:3e:96:a8:e9:5d:
                    ef:1b:f7:59:e4:e9:6e:2a:ab:47:49:69:e3:2b:7c:
                    de:fe:15:70:d6:c0:67:03:1b:31:83:88:10:6b:30:
                    90:f9:93:df:aa:69:33:db:4d:cf:3f:80:45:4f:9e:
                    6a:29:c7:7d:91:f2:e7:66:88:0f:f6:3a:1f:01:36:
                    d5:e5:ba:b6:42:49:e5:4b:49:d9:68:4f:34:7e:12:
                    ea:6a:6a:0b:8a:05:a2:26:3e:59:84:25:7f:60:90:
                    c0:1f:cc:1f:d6:d3:cd:e2:be:d1:70:9c:ea:1e:38:
                    30:6c:aa:0f:7c:48:be:be:0f:e7:95:44:1e:5a:1e:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:83:6A:BA:22:0E:24:44:55:7B:5F:6F:54:3B:3B:59:85:81:1D:A6
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:22:7a:fc:74:48:fa:99:c7:ec:93:8e:0a:d3:cc:4d:b7:2f:
         bc:ce:51:59:c3:0c:36:a7:b3:13:50:9b:5c:75:a5:cd:e6:1a:
         ac:65:7e:c2:2a:89:f9:85:dc:0d:2b:a8:03:24:58:b3:a1:83:
         d9:32:ad:61:4e:27:30:f8:27:bb:78:c5:0b:8e:c9:7f:1e:c4:
         91:ef:8e:f5:b3:0c:43:18:33:bb:1f:b1:49:a7:6b:9d:f9:58:
         07:3f:84:13:71:21:ad:2a:ad:8f:e9:a2:01:d9:d6:f8:7b:54:
         1b:b3:fa:d7:8f:be:be:74:e3:07:1d:b0:59:62:07:c6:e5:32:
         2a:50:04:48:f4:30:ea:ba:52:ba:a7:e0:57:9b:30:8c:d0:a2:
         d2:38:8a:43:40:5f:59:fc:c5:8f:85:65:25:5a:bf:6d:59:f5:
         62:2e:5a:67:99:ce:d6:95:c5:12:0e:88:67:62:9c:33:e2:c9:
         e5:47:5d:24:87:4a:13:5f:3a:45:f8:63:82:1f:75:ce:0b:af:
         5a:a7:24:47:9b:5f:53:f3:0d:c5:ba:a2:22:57:42:9f:ba:f4:
         a8:d7:83:eb:c6:80:f0:53:8c:a8:e6:cd:0c:e9:7e:d6:91:cf:
         1d:d5:b8:e2:d1:4f:77:28:ce:db:9d:23:15:f4:02:6d:18:34:
         6b:7e:ec:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:20:00 2026 by rpki-client