Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e20343031373736.roa
File:                     3231362e3135312e3136382e302f32342d3234203d3e20343031373736.roa (raw, json)
Hash identifier:          SiP/pblSuv/jsZG8rDkxFYrAElYn0CLqosI43xGAgSU=
Subject key identifier:   83:5B:95:33:98:23:ED:2C:6A:20:84:A1:EE:62:F4:F3:3E:D9:06:AA
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       1787AE907DF30CD299E9E40A7D422858B4A00EA3
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e20343031373736.roa
Signing time:             Thu 30 Oct 2025 11:52:28 +0000
ROA not before:           Thu 30 Oct 2025 11:47:28 +0000
ROA not after:            Thu 29 Oct 2026 11:52:28 +0000
asID:                     401776
IP address blocks:        216.151.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 04 Nov 2025 09:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:87:ae:90:7d:f3:0c:d2:99:e9:e4:0a:7d:42:28:58:b4:a0:0e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Oct 30 11:47:28 2025 GMT
            Not After : Oct 29 11:52:28 2026 GMT
        Subject: CN=835B95339823ED2C6A2084A1EE62F4F33ED906AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:86:d2:13:db:ff:19:d1:14:65:6c:ac:ae:
                    bb:97:40:29:ae:8e:a2:7d:59:5d:56:39:3e:e6:b4:
                    ba:d5:bd:30:3b:7a:1d:d3:3f:22:b9:9a:d7:e8:6b:
                    d4:8b:11:66:28:09:af:6f:d9:6a:c4:0d:f5:ba:6f:
                    ab:20:73:b2:52:7f:b8:3b:43:e5:a8:ee:82:f1:b4:
                    ae:74:ab:52:b4:f0:b7:3d:02:e4:bc:16:82:9d:48:
                    2a:4b:ef:61:44:ed:e1:b8:c8:d9:17:be:f8:e5:77:
                    f4:c3:7d:96:91:35:8c:12:ea:24:04:e9:15:f8:bf:
                    81:f3:0b:ee:bb:f7:96:b1:94:7e:1f:80:68:87:ca:
                    15:3d:10:50:27:86:7f:26:7b:a7:ea:eb:fe:58:db:
                    2c:d3:9d:4d:df:45:30:3a:f9:6d:90:fe:87:a8:99:
                    97:6c:73:b3:9a:ea:22:38:c3:3b:8d:0d:da:48:34:
                    fd:fa:93:c1:72:3c:fd:f1:dc:cf:3a:8d:e9:60:1d:
                    2a:5f:a9:94:70:4e:27:bc:58:00:67:c2:1b:d9:02:
                    ed:b9:56:f9:2f:d4:e7:40:58:54:fc:fa:a4:db:e2:
                    ae:65:59:61:8b:14:87:18:eb:e8:89:35:3b:50:eb:
                    3f:34:0d:be:ca:a5:d3:2a:bc:32:0a:9f:19:7d:8f:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5B:95:33:98:23:ED:2C:6A:20:84:A1:EE:62:F4:F3:3E:D9:06:AA
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e20343031373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:a5:76:b7:3f:60:e4:b9:f4:48:1d:77:c7:d6:15:d2:a9:02:
         52:22:bf:16:30:57:4d:89:c8:16:83:5d:64:2a:7e:a4:fa:97:
         20:82:5c:fd:eb:83:a1:b0:75:b7:9b:5c:e7:ac:e8:ff:f7:dd:
         26:5d:f6:0a:db:12:03:7e:2d:0f:ed:64:1b:ef:da:33:b0:0a:
         0b:81:24:24:61:14:e0:48:f0:f5:10:c8:e5:2c:92:a0:f0:ed:
         f1:5c:0f:2d:9c:16:3e:9e:09:4e:96:6f:76:15:95:88:49:64:
         a1:35:c0:7a:e9:8a:7c:5c:ef:40:9a:2e:49:c5:ba:7c:fe:dc:
         af:41:4f:cb:4a:3f:32:5e:64:fe:8c:32:82:63:8d:c4:b9:5b:
         45:1e:52:b9:50:f5:c8:49:2e:02:44:94:9f:da:82:b8:8f:d4:
         86:45:51:2b:13:99:e7:26:8b:ea:86:42:7a:dc:39:e6:2f:3b:
         a4:85:18:3b:f7:a6:55:d3:6e:5b:2d:79:fc:89:32:ae:4b:62:
         94:29:b6:71:17:12:14:82:49:2b:29:54:4f:e0:54:78:7d:c3:
         c2:b4:16:6b:90:3d:a1:64:ce:a4:f8:75:e0:f2:64:00:50:c2:
         8e:80:6e:ff:09:21:b1:41:dc:37:b1:5b:19:cd:5d:80:42:46:
         b5:c1:a6:bb
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUF4eukH3zDNKZ6eQKfUIoWLSgDqMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2UyYmI0ZTU2Y2RmZTJmNDBmODI0YWJkY2NkOWI1MjM0
NjZlY2NkZGIzMDZjOTBjNWIwHhcNMjUxMDMwMTE0NzI4WhcNMjYxMDI5MTE1MjI4
WjAzMTEwLwYDVQQDEyg4MzVCOTUzMzk4MjNFRDJDNkEyMDg0QTFFRTYyRjRGMzNF
RDkwNkFBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYGG0hPb/xnR
FGVsrK67l0Apro6ifVldVjk+5rS61b0wO3od0z8iuZrX6GvUixFmKAmvb9lqxA31
um+rIHOyUn+4O0PlqO6C8bSudKtStPC3PQLkvBaCnUgqS+9hRO3huMjZF7745Xf0
w32WkTWMEuokBOkV+L+B8wvuu/eWsZR+H4Boh8oVPRBQJ4Z/Jnun6uv+WNss051N
30UwOvltkP6HqJmXbHOzmuoiOMM7jQ3aSDT9+pPBcjz98dzPOo3pYB0qX6mUcE4n
vFgAZ8Ib2QLtuVb5L9TnQFhU/Pqk2+KuZVlhixSHGOvoiTU7UOs/NA2+yqXTKrwy
Cp8ZfY+sRQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFINblTOYI+0saiCEoe5i9PM+
2QaqMB8GA1UdIwQYMBaAFMOj2Rf0OZvCbApodxgr6jzZ/vQCMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGZkZWQxYTAwMTkwMDZlOTdjYjEyOGVmLzAv
QzNBM0Q5MTdGNDM5OUJDMjZDMEE2ODc3MTgyQkVBM0NEOUZFRjQwMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1L2VmYTAxYWNiLTUxZWMtNDA0OC04NTg5LWQwOTM5MDc5MWFlZC83ZTJi
YjRlNTZjZGZlMmY0MGY4MjRhYmRjY2Q5YjUyMzQ2NmVjY2RkYjMwNmM5MGM1Yi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThmZGVkMWEwMDE5MDA2
ZTk3Y2IxMjhlZi8wLzMyMzEzNjJlMzEzNTMxMmUzMTM2MzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNDMwMzEzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYl6gwDQYJKoZIhvcN
AQELBQADggEBAGWldrc/YOS59Egdd8fWFdKpAlIivxYwV02JyBaDXWQqfqT6lyCC
XP3rg6GwdbebXOes6P/33SZd9grbEgN+LQ/tZBvv2jOwCguBJCRhFOBI8PUQyOUs
kqDw7fFcDy2cFj6eCU6Wb3YVlYhJZKE1wHrpinxc70CaLknFunz+3K9BT8tKPzJe
ZP6MMoJjjcS5W0UeUrlQ9chJLgJElJ/agriP1IZFUSsTmecmi+qGQnrcOeYvO6SF
GDv3plXTblstefyJMq5LYpQptnEXEhSCSSspVE/gVHh9w8K0FmuQPaFkzqT4deDy
ZABQwo6Abv8JIbFB3DexWxnNXYBCRrXBprs=
-----END CERTIFICATE-----
Generated at Mon Nov 3 16:16:08 2025 by rpki-client