Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa
File:                     3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          qgNEkwdlC795E0/L7UTmMT51Ld7VqwLmLmGPTbBaDTo=
Subject key identifier:   6E:37:3F:D1:54:47:B6:31:4E:29:C5:37:31:75:67:0A:46:4D:88:91
Certificate issuer:       /CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
Certificate serial:       0528C240B5E4D57A5EE332426D29E910E29A8E
Authority key identifier: BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 06 Oct 2026 19:36:20 +0000
ROA not before:           Tue 06 Oct 2026 19:31:20 +0000
ROA not after:            Tue 05 Oct 2027 19:36:20 +0000
asID:                     14618
IP address blocks:        104.254.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/52a24bfe-7695-456c-8b3d-349b37b047d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:31:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:28:c2:40:b5:e4:d5:7a:5e:e3:32:42:6d:29:e9:10:e2:9a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd
        Validity
            Not Before: Oct  6 19:31:20 2026 GMT
            Not After : Oct  5 19:36:20 2027 GMT
        Subject: CN=6E373FD15447B6314E29C5373175670A464D8891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5c:a8:03:2d:b5:bb:6a:dc:a5:d0:ae:11:f9:
                    8e:09:7f:f9:4f:15:4d:7a:f8:9d:31:1e:4f:48:e9:
                    54:06:94:f5:01:da:26:43:be:cc:16:26:8b:31:9c:
                    60:5e:d4:c6:03:62:a9:e5:89:e8:c5:e2:81:c7:38:
                    24:2b:0f:c0:df:37:98:65:0c:72:0e:54:da:72:86:
                    e8:e4:7c:94:e6:63:d3:ec:c0:54:30:64:fc:e5:01:
                    a3:e9:1b:54:3c:04:77:c4:eb:77:c8:2d:c9:4f:f5:
                    09:36:e7:f8:cf:8d:6e:a3:06:e6:10:af:29:52:c2:
                    b1:c9:f3:1e:1b:81:da:a2:01:ce:b8:d1:cf:79:75:
                    a4:25:63:06:0f:e7:ba:26:f7:e0:90:81:1e:f8:a6:
                    9e:bc:c1:7e:c3:95:17:66:e2:00:aa:fa:da:6c:9d:
                    6f:0e:e2:96:27:fd:44:4e:46:e5:d0:cc:67:70:1e:
                    2d:1a:c4:bf:e1:d3:44:c3:ff:8e:21:7b:4a:cb:9d:
                    a9:89:46:50:e4:d9:21:50:9c:ac:e2:12:fb:49:b3:
                    bd:fe:e5:60:4a:38:83:4c:e2:ab:44:12:b0:73:6e:
                    4b:a7:aa:18:bc:55:21:a1:95:99:19:a9:c1:88:bb:
                    90:d3:5b:66:26:29:de:09:50:8a:9d:60:47:5e:11:
                    95:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:37:3F:D1:54:47:B6:31:4E:29:C5:37:31:75:67:0A:46:4D:88:91
            X509v3 Authority Key Identifier:
                keyid:BC:DE:2B:00:12:18:FC:CC:04:46:74:45:02:EC:6F:A5:C9:85:F4:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/BCDE2B001218FCCC0446744502EC6FA5C985F46B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/52a24bfe-7695-456c-8b3d-349b37b047d3/f832b107355da27671d2b5322edd41212fc6b822b0b01da1fd.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8ce9defe018e32d777fb1b63/0/3130342e3235342e3139322e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.254.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:52:3a:02:61:eb:29:5d:cf:0f:29:89:ce:85:eb:f7:e0:b5:
         2b:ff:e8:17:9c:2e:95:38:71:31:cd:7d:47:d8:90:70:91:fd:
         6c:db:b3:6e:12:cf:23:53:45:cb:28:c4:65:24:ad:bc:b9:a3:
         1d:55:00:0f:ee:88:17:82:d0:81:66:50:1b:1d:4e:96:e0:49:
         e9:5b:12:35:c6:0d:75:10:c2:77:83:95:e8:6f:cf:88:0e:eb:
         c8:30:57:f0:e9:d4:6f:6e:2e:1b:c7:0a:cd:8f:f9:0e:1e:c6:
         a4:e7:73:a7:ad:e4:98:62:c7:6e:e1:7e:15:e5:39:cc:7b:99:
         c4:6a:7c:9e:76:bf:e0:4c:80:f3:5a:1b:d2:55:99:12:b2:30:
         25:4c:fe:74:04:20:d4:b5:47:7a:58:b5:95:eb:27:46:7d:87:
         43:20:7b:e9:ae:56:78:a9:2a:ef:00:24:0f:22:91:52:1d:c1:
         33:33:a1:cb:e1:85:74:2c:87:b3:82:9e:49:66:02:b5:d4:74:
         f6:70:a6:f3:54:6f:a8:37:17:ff:66:a0:9e:c9:c9:1c:5b:d3:
         9e:68:79:e5:87:85:e5:36:c4:c3:b4:2c:10:f8:3f:e9:4a:31:
         0a:4c:0d:6c:80:f1:0b:34:2f:2a:ba:3c:e8:87:7f:f0:1e:bf:
         7a:90:55:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:58:54 2026 by rpki-client