Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32352e302f32342d3234203d3e2037303239.roa
File:                     3136322e3231372e32352e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          ColumyMlZppp79FH9JXkfO3jFQgvkW0W7wtKHOxm4Jo=
Subject key identifier:   12:18:4E:10:BE:A0:30:27:05:8F:BC:7C:ED:12:FA:A4:75:E4:50:B2
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       247CFAB9FFA67A00565EDA5C87D9B0CDDEB46AF6
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32352e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 13 Aug 2026 07:36:19 +0000
ROA not before:           Thu 13 Aug 2026 07:31:19 +0000
ROA not after:            Thu 12 Aug 2027 07:36:19 +0000
asID:                     7029
IP address blocks:        162.217.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 11:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:7c:fa:b9:ff:a6:7a:00:56:5e:da:5c:87:d9:b0:cd:de:b4:6a:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Aug 13 07:31:19 2026 GMT
            Not After : Aug 12 07:36:19 2027 GMT
        Subject: CN=12184E10BEA03027058FBC7CED12FAA475E450B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:72:a2:6c:95:64:e0:3c:3c:89:6a:9f:b9:5e:
                    47:12:54:26:d2:d1:fc:db:f6:85:43:33:7b:14:05:
                    28:ea:e1:0a:0e:21:f5:f5:ff:c3:5e:fa:ce:b3:04:
                    89:29:2e:94:2f:48:1f:94:59:14:7b:69:1e:44:b4:
                    64:5e:8e:d9:cf:6b:a0:08:f8:68:18:97:57:3e:9a:
                    f0:21:e2:37:d7:ad:19:09:d5:7a:12:02:1c:cd:dc:
                    42:70:ff:cd:f8:94:73:62:3c:59:f0:9a:f3:b1:d8:
                    dc:6c:fb:9a:96:2e:11:cc:6e:a4:06:c5:95:ca:e0:
                    70:b8:22:43:dd:47:58:35:fc:d1:1b:de:38:78:ce:
                    f0:bb:cd:54:9e:47:6e:a3:27:85:3d:c5:eb:e1:42:
                    9f:99:4b:fd:93:02:21:a5:f6:d1:07:f1:e8:db:62:
                    e4:cb:23:09:8a:87:4b:ae:17:1d:31:b3:1e:85:32:
                    48:bd:5c:f2:5a:be:51:e6:01:0e:c1:9b:a1:d6:55:
                    c0:ad:94:ea:4c:98:68:6f:7a:ea:c6:a4:52:be:b6:
                    ff:10:64:4f:b5:6a:18:e5:be:10:57:83:47:95:80:
                    59:f2:1f:af:74:d3:76:0e:15:5e:fe:44:f4:58:9b:
                    a4:d0:53:50:d9:46:76:c6:1b:6b:1b:69:1c:af:66:
                    72:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:18:4E:10:BE:A0:30:27:05:8F:BC:7C:ED:12:FA:A4:75:E4:50:B2
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32352e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:e6:e6:1c:04:59:07:cf:0a:fe:f8:4d:4e:77:27:8e:4a:91:
         6f:f8:a3:63:2b:fa:15:51:58:ac:69:4e:81:48:7e:22:c4:e3:
         04:39:c4:3b:7e:4e:75:15:e2:cb:0f:ab:09:8e:c7:75:9a:c0:
         90:6f:80:2b:74:c6:7c:fd:d8:19:97:63:f5:52:1b:56:35:47:
         fa:1b:3c:bb:71:ac:d4:04:72:f1:b4:9f:3e:55:07:0d:82:03:
         98:d4:b6:13:c2:02:76:30:12:29:34:c1:ea:29:d8:9d:50:11:
         df:01:84:03:27:20:c7:3f:3b:65:df:af:f1:4d:1b:e6:38:71:
         2f:ec:f0:51:e4:ae:4c:67:1e:1b:95:07:4b:ad:3e:e0:91:36:
         06:54:80:01:5d:2c:a5:dc:ec:96:de:82:33:96:39:7d:44:7c:
         70:91:0a:e1:c9:8c:b1:88:2b:9a:73:6e:42:57:80:c6:6e:7b:
         8e:47:ec:c4:3e:be:d4:c0:62:5e:6d:4e:bd:a5:49:ca:4b:b9:
         00:d8:eb:c2:e4:56:7b:d3:a4:30:5a:55:b4:f5:99:bb:33:f6:
         b8:04:e6:6a:e7:57:af:80:00:9d:8b:bd:a6:ce:e4:57:eb:3a:
         0c:8a:71:07:7c:a2:61:11:b2:c0:c4:1c:a3:51:a7:e8:03:04:
         f3:28:3c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:20 2026 by rpki-client