Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e203633303235.roa
File:                     3231362e3135312e3136302e302f32342d3234203d3e203633303235.roa (raw, json)
Hash identifier:          SXsYIAVvO1OKiw0giRJ4Kw2OaTh7xctFNaPyj6bv28s=
Subject key identifier:   A7:55:56:51:EE:30:C6:93:56:F7:5B:41:53:A7:B5:2F:7E:9D:D6:7C
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       1E9B72B293A730AC1605E08F6AEE02D04F4D109D
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e203633303235.roa
Signing time:             Tue 21 Apr 2026 10:34:52 +0000
ROA not before:           Tue 21 Apr 2026 10:29:52 +0000
ROA not after:            Tue 20 Apr 2027 10:34:52 +0000
asID:                     63025
IP address blocks:        216.151.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 11:19:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9b:72:b2:93:a7:30:ac:16:05:e0:8f:6a:ee:02:d0:4f:4d:10:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Apr 21 10:29:52 2026 GMT
            Not After : Apr 20 10:34:52 2027 GMT
        Subject: CN=A7555651EE30C69356F75B4153A7B52F7E9DD67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:88:2f:8b:07:00:2d:4c:8e:75:25:b3:7b:
                    39:a9:78:38:e9:57:e3:e0:72:ad:b5:ad:16:ec:7e:
                    0d:63:2f:57:99:cf:c1:18:af:e9:e5:85:13:47:03:
                    31:92:42:94:ca:6c:91:74:2d:bc:46:13:cc:db:f6:
                    9d:02:1e:69:0d:31:12:10:b1:30:dd:ab:0e:4b:8c:
                    a9:24:69:59:ed:7c:bd:0e:d6:95:6d:28:96:29:85:
                    07:57:6c:df:28:82:bb:58:fc:cc:d1:7b:e1:1c:54:
                    9e:0f:43:ba:cc:4b:74:78:93:c8:95:b4:d1:35:13:
                    a9:d2:5d:41:b9:26:aa:00:a0:84:fd:3a:5d:e4:a8:
                    0d:53:2a:d7:77:97:c9:58:5e:61:d9:07:a9:0b:ba:
                    b0:d6:85:72:84:6f:c5:bf:fe:4b:25:e5:0d:8f:f8:
                    56:49:e9:69:2d:35:7d:69:38:25:c7:81:c4:33:f9:
                    9e:a8:2e:6e:dc:06:be:e3:93:2c:53:aa:c1:d5:d6:
                    42:18:74:7f:4d:77:43:b3:c0:e5:2d:16:a6:bd:03:
                    32:d8:9d:c9:d8:0d:ad:11:33:5f:b2:64:ba:ad:a0:
                    7a:be:b7:32:85:a5:58:01:57:f0:0f:ce:e4:2b:d2:
                    79:0b:6a:51:7d:84:5d:e0:73:99:dd:a8:0b:0d:f0:
                    b9:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:55:56:51:EE:30:C6:93:56:F7:5B:41:53:A7:B5:2F:7E:9D:D6:7C
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136302e302f32342d3234203d3e203633303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:b2:f7:8f:a9:70:c2:ff:f8:2e:ca:fe:f7:9f:fb:cb:52:
         e8:a4:a3:71:ed:c4:b1:b1:70:0d:2a:64:f0:3f:05:7a:0d:ab:
         8f:ab:79:3f:5c:e8:d6:52:9b:0e:e6:6f:f6:62:0e:70:03:4a:
         ce:24:13:52:8c:d1:9a:b6:ed:d3:dd:c6:0d:1c:da:fb:c5:eb:
         0d:65:62:ff:51:5b:2a:f6:54:bc:72:ab:6c:a2:e8:8b:80:07:
         fd:30:97:d6:c2:86:8d:7e:c2:88:d9:e2:0f:7d:e6:77:ce:c9:
         e6:d0:44:3c:13:49:d8:e3:1a:4c:3c:2a:0f:fb:72:17:b7:17:
         7f:93:e4:27:03:84:d2:45:81:4a:6b:2e:55:6f:1e:51:fa:ab:
         7a:ca:bb:31:a6:e8:ea:6f:bc:30:56:cd:56:f3:df:96:24:c6:
         d9:08:64:51:8d:5c:80:d2:46:89:56:3e:23:13:8a:97:1d:33:
         d2:e3:8d:a6:e3:e9:ed:50:dd:e7:35:8b:41:5d:f4:01:e5:c8:
         f2:78:97:99:55:b6:34:27:62:35:11:70:ae:1f:28:a6:dc:ab:
         83:0a:28:97:15:88:8b:13:52:70:45:7a:01:d2:dd:af:a7:27:
         ae:0d:57:84:1d:40:3c:37:20:8d:bc:33:c2:b3:74:f2:35:ca:
         59:81:2e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:50:45 2026 by rpki-client