Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32342d3234203d3e20323031333836.roa
File:                     36392e3136362e3233322e302f32342d3234203d3e20323031333836.roa (raw, json)
Hash identifier:          ckpPPreuvTWq9E17vUqjMeXNyZDuPhDHBygs3QDVO2k=
Subject key identifier:   02:D0:71:07:45:56:F5:DA:CB:DB:2F:58:76:49:84:9C:55:05:04:39
Certificate issuer:       /CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
Certificate serial:       1E7E608B77EE716AF3A17BA3551042D3034B879C
Authority key identifier: D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32342d3234203d3e20323031333836.roa
Signing time:             Sat 02 May 2026 11:08:38 +0000
ROA not before:           Sat 02 May 2026 11:03:38 +0000
ROA not after:            Sat 01 May 2027 11:08:38 +0000
asID:                     201386
IP address blocks:        69.166.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 04 May 2026 07:31:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:7e:60:8b:77:ee:71:6a:f3:a1:7b:a3:55:10:42:d3:03:4b:87:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0
        Validity
            Not Before: May  2 11:03:38 2026 GMT
            Not After : May  1 11:08:38 2027 GMT
        Subject: CN=02D071074556F5DACBDB2F587649849C55050439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:0d:a1:28:02:8a:06:0f:0e:da:51:24:34:67:
                    93:6d:ed:f5:f1:a0:fb:e9:ec:b6:63:04:f9:61:6f:
                    fe:d7:a0:91:b2:d1:f0:ce:f7:4d:8b:ca:59:1f:13:
                    49:fb:4a:7a:56:89:26:b3:f7:a3:27:2b:6e:1e:f3:
                    23:ab:49:63:69:43:bf:2d:a8:09:bc:d8:81:e6:d6:
                    35:0a:48:45:13:03:19:30:0c:78:6d:cb:be:d6:9d:
                    7b:e9:c0:04:51:e6:bd:f5:90:ec:b5:71:9e:fc:79:
                    b9:84:df:1e:bc:f0:3c:17:ae:1d:e2:62:1e:63:bf:
                    9f:d8:e1:b8:01:f2:69:1d:45:05:96:96:7c:91:f6:
                    0d:6f:af:73:49:ad:d8:77:e3:96:9d:23:f3:98:a7:
                    6b:c1:45:e6:6a:1c:46:c3:8d:00:b0:e9:09:a7:b9:
                    1f:1f:bd:88:ca:a2:ba:d3:76:60:ac:e6:ba:98:d9:
                    09:eb:75:8a:07:a1:8b:5d:47:6a:e6:91:95:de:70:
                    09:2a:8b:41:b6:7e:76:23:6b:df:a3:95:b9:be:d2:
                    8d:2c:ce:fe:e4:4f:19:6f:85:12:6d:fc:03:09:df:
                    9d:8a:94:fd:f4:51:ba:35:fd:ad:c7:c0:b9:01:cb:
                    a4:75:4d:4c:ab:83:de:8c:21:cc:38:93:79:c9:8a:
                    0f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D0:71:07:45:56:F5:DA:CB:DB:2F:58:76:49:84:9C:55:05:04:39
            X509v3 Authority Key Identifier:
                keyid:D4:08:70:12:75:F2:3C:87:FE:42:CD:6C:42:B2:5D:DB:0E:54:82:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/D408701275F23C87FE42CD6C42B25DDB0E548292.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6154f96b-6b8f-48d4-94bd-ddd2c9fff5ab/0830723f583b3e3d4f0a8c555698d802de065a5da8933998e0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01891c39459b2bea/0/36392e3136362e3233322e302f32342d3234203d3e20323031333836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.166.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:dc:e0:2d:bf:4d:d8:f7:09:62:f8:96:62:90:58:63:ec:6e:
         d6:3d:04:52:1f:7b:af:c8:6b:5a:d2:ba:5c:bc:17:a9:33:03:
         d7:20:d2:d7:56:54:e9:00:1a:41:7f:46:63:9c:57:6d:16:20:
         cb:17:2e:08:4b:5a:6d:70:7f:b3:41:31:7d:17:e2:ba:63:b3:
         b2:93:57:24:39:ac:38:7b:96:c1:a6:54:46:88:6f:c3:d3:7b:
         36:b1:e1:7f:3c:9e:b1:c0:6c:43:bd:75:0d:37:c6:ac:b9:45:
         2b:b0:d3:36:d8:df:94:ed:8b:e9:9c:9b:e5:e1:3f:ab:30:18:
         15:0a:93:ec:d1:52:e9:21:3b:f8:26:8b:39:67:42:ff:e8:8d:
         28:87:a0:fa:15:6a:a1:4d:24:3f:83:92:cf:6c:8a:4b:58:24:
         cd:45:37:0f:9a:31:44:39:1a:b7:98:2f:cc:e3:bf:4b:02:fb:
         21:e1:c5:dc:4e:23:a3:90:c3:f7:e3:f5:83:0e:28:dd:83:ee:
         ff:ad:7c:5f:d4:a8:4b:49:b6:70:45:cf:33:2a:9b:c3:84:11:
         95:0c:2e:92:85:88:fc:50:e9:4f:70:d2:8d:39:e1:c9:ef:e2:
         67:ff:64:4d:3d:4c:b6:1f:33:b0:33:35:57:10:e0:82:bb:ee:
         b2:10:af:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 21:20:38 2026 by rpki-client