Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e20313532363938.roa
File:                     3230352e3233332e3135352e302f32342d3234203d3e20313532363938.roa (raw, json)
Hash identifier:          56F3eDsGVUbVvTRKZEHDLDfh/wev+d9+Fj12DHElAFs=
Subject key identifier:   B6:D5:6C:B7:C5:B1:E5:93:67:6A:AE:2F:90:99:2C:B0:5C:9D:6C:16
Certificate issuer:       /CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
Certificate serial:       195C944C3AC69E1EC3D0FD1210E746100BD08E50
Authority key identifier: 5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e20313532363938.roa
Signing time:             Tue 11 Aug 2026 09:01:51 +0000
ROA not before:           Tue 11 Aug 2026 08:56:51 +0000
ROA not after:            Tue 10 Aug 2027 09:01:51 +0000
asID:                     152698
IP address blocks:        205.233.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/4aae8282-1cad-4073-9d4a-e9484014919e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Aug 2026 11:24:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5c:94:4c:3a:c6:9e:1e:c3:d0:fd:12:10:e7:46:10:0b:d0:8e:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a
        Validity
            Not Before: Aug 11 08:56:51 2026 GMT
            Not After : Aug 10 09:01:51 2027 GMT
        Subject: CN=B6D56CB7C5B1E593676AAE2F90992CB05C9D6C16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:c6:36:e9:2e:5f:2c:5d:65:51:e6:f1:ec:
                    79:f7:96:ba:71:0d:56:86:4e:79:bc:6f:ac:3f:41:
                    bb:b0:38:6e:2c:37:b6:71:ba:f3:bb:11:c8:b7:f4:
                    75:cc:29:93:a5:f3:47:c3:10:82:37:8c:00:32:2b:
                    6a:e3:9e:1a:79:16:e5:9c:bd:b4:16:37:8e:fb:ed:
                    4e:0f:8d:6d:70:b8:06:91:ee:2b:71:18:84:8c:99:
                    e4:ec:94:15:ac:df:de:45:c1:e8:1f:c3:fd:56:5a:
                    5d:21:7a:3a:cd:b4:7c:51:4b:94:53:ae:bc:00:7b:
                    6b:7d:31:54:51:21:ac:6e:8f:ff:93:5f:f1:c2:6e:
                    06:91:f4:fb:0a:e4:7d:e9:56:f7:48:56:18:01:5b:
                    97:3d:72:5d:2d:54:25:d5:8e:a0:ad:6f:14:02:3c:
                    c0:5a:32:e0:cb:1d:c1:30:c6:73:67:27:a4:33:dc:
                    f6:57:a7:7f:aa:cc:45:15:94:9d:60:20:57:bf:1e:
                    03:4c:e5:a1:f1:10:1d:e4:13:e8:9d:6b:70:e1:45:
                    cd:a5:7b:8f:38:2d:1f:c8:a1:58:ca:b6:d2:85:db:
                    2f:0d:7a:e5:d7:77:34:f5:de:67:61:a1:36:5a:57:
                    34:d8:dc:47:ee:92:b7:0e:b8:3e:70:81:25:4e:4b:
                    60:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:D5:6C:B7:C5:B1:E5:93:67:6A:AE:2F:90:99:2C:B0:5C:9D:6C:16
            X509v3 Authority Key Identifier:
                keyid:5A:27:49:11:3C:DE:5D:6C:31:A9:57:81:B9:DE:25:A7:37:46:4F:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/5A2749113CDE5D6C31A95781B9DE25A737464F14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4aae8282-1cad-4073-9d4a-e9484014919e/17a8b1784b410298e378f81793d1f9bc0e9804013ec4c4885a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bcd2702271d05/0/3230352e3233332e3135352e302f32342d3234203d3e20313532363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:97:a3:ab:6a:69:ec:18:6c:7b:d0:5c:03:5d:ba:c3:90:b4:
         ff:eb:94:18:a0:6c:f8:f0:dd:12:99:8d:2d:31:8c:7b:64:29:
         de:60:5b:aa:e0:80:6e:1f:29:f9:5c:fe:62:1d:49:c5:d1:7b:
         5f:7f:91:7b:a7:17:43:89:b9:90:02:38:bc:87:37:86:02:c5:
         73:6a:fc:82:a1:41:1a:0f:21:53:cd:d6:ec:54:6d:69:1f:5c:
         d7:27:3d:03:cf:da:b5:cb:5a:1d:03:3f:3b:88:65:d6:14:8b:
         aa:5c:d1:f9:36:96:7d:5e:fe:04:4f:45:f8:37:0f:a0:03:be:
         ec:bd:7d:33:a9:d6:8a:33:e2:a0:e6:69:b7:e4:97:18:00:25:
         e9:a6:0d:fb:41:32:b1:74:bf:72:62:06:c3:d7:ac:27:68:e6:
         a9:1a:99:bb:c1:17:0a:be:1d:b3:b9:59:bc:cc:48:31:42:21:
         53:29:88:f2:36:b4:7b:eb:3c:4e:60:ba:34:1d:cc:3e:28:02:
         af:9d:a1:9e:bb:12:36:81:39:a2:0c:1b:f0:4e:11:18:52:88:
         bb:a4:01:29:6e:8b:31:63:e1:c6:b0:99:a0:e2:61:9f:d7:50:
         51:ca:b8:27:1f:f5:08:35:14:12:ac:ff:fd:65:f4:51:76:8e:
         bd:45:7d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 03:28:42 2026 by rpki-client