Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20323039383838.roa
File:                     3230382e39312e3138392e302f32342d3234203d3e20323039383838.roa (raw, json)
Hash identifier:          hcIH6T+bLy0ZHu6DZYemmtCUKuUm8G1N2rzd6iz0V0s=
Subject key identifier:   00:ED:A8:04:92:C6:55:43:77:42:8E:EA:AC:13:37:A0:7A:50:31:E2
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       572CD550D2BCD3969B850ECA3F88C92AC00BEB31
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20323039383838.roa
Signing time:             Thu 30 Apr 2026 15:59:32 +0000
ROA not before:           Thu 30 Apr 2026 15:54:32 +0000
ROA not after:            Thu 29 Apr 2027 15:59:32 +0000
asID:                     209888
IP address blocks:        208.91.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 May 2026 08:32:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:2c:d5:50:d2:bc:d3:96:9b:85:0e:ca:3f:88:c9:2a:c0:0b:eb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Apr 30 15:54:32 2026 GMT
            Not After : Apr 29 15:59:32 2027 GMT
        Subject: CN=00EDA80492C6554377428EEAAC1337A07A5031E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fe:ee:87:69:ae:6a:82:83:32:19:2a:67:3b:
                    3f:af:de:35:f1:5b:20:59:8a:38:61:99:ac:89:74:
                    bf:a5:19:11:ae:de:03:d1:73:2d:fb:82:36:05:f3:
                    0f:f0:c7:7e:d3:fd:4f:ce:dc:30:50:15:53:89:81:
                    f4:ae:6d:db:4b:72:3c:bb:8c:2d:4b:83:91:c7:c5:
                    47:45:78:6e:79:7e:1e:be:17:aa:08:e6:c4:af:c7:
                    97:a1:07:9d:eb:1b:56:4e:bb:81:2b:2f:77:5e:b9:
                    9b:2d:93:4a:21:25:10:69:0b:01:01:cf:d5:46:29:
                    fb:5c:e3:50:60:4f:77:32:a2:68:26:f6:b1:46:e0:
                    1b:e7:a8:23:26:73:66:21:77:cf:07:7a:95:29:d3:
                    e9:5f:a3:f5:34:a6:42:0b:64:38:8a:77:83:9e:31:
                    04:d3:51:34:57:d3:bd:69:a7:cd:e7:4a:db:73:75:
                    b9:ac:d1:5f:14:a4:16:b8:e7:79:e8:45:a7:38:26:
                    ed:82:92:99:f5:96:b7:6f:2e:c7:17:b0:10:4a:fa:
                    c7:4d:18:5b:8c:97:bf:11:ea:f3:7e:74:b6:d1:9d:
                    47:a3:14:c4:bd:19:94:44:c8:5c:a8:54:8b:ec:fb:
                    20:0f:67:e0:77:90:9a:41:c4:79:c9:f0:67:c8:59:
                    70:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:A8:04:92:C6:55:43:77:42:8E:EA:AC:13:37:A0:7A:50:31:E2
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3138392e302f32342d3234203d3e20323039383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:47:49:86:0b:70:d1:16:8d:5a:d1:f3:06:b7:6d:61:f5:ab:
         3d:05:f0:c4:6f:41:f6:50:49:1c:ff:f4:ae:3f:fb:f5:c6:54:
         b1:57:a5:1f:1b:05:34:02:56:6f:de:69:99:8f:a5:cf:94:44:
         04:63:3e:9f:6a:9b:96:f0:a2:5f:d0:13:3c:15:36:8a:8d:ad:
         45:1d:22:de:94:96:02:7e:b3:44:70:ac:d7:c9:4f:c9:4b:b8:
         60:ee:f6:69:da:a8:10:7e:f9:50:4d:10:b4:e1:5e:3b:e4:56:
         37:db:db:0d:58:44:fe:80:21:9d:51:68:f6:b1:48:c1:61:59:
         5d:d0:4a:0b:fe:d9:9d:dd:42:d4:9c:93:a7:9a:92:f3:34:99:
         f5:64:0d:86:5d:bd:5c:40:a0:52:88:de:46:70:2c:53:14:1e:
         e7:c4:3c:be:53:f0:b9:20:1b:5c:53:49:0d:f8:cc:7e:bd:b2:
         f0:d4:54:cb:4d:42:46:f4:8f:f2:0e:2c:b2:2c:1d:ad:c5:3b:
         31:0b:36:2e:24:25:a8:c5:b5:7c:e6:8b:78:54:51:8a:00:b4:
         0d:a4:d5:0a:ad:db:57:db:db:92:2e:67:54:fc:50:3e:ec:bf:
         e0:dc:55:d6:c6:52:f4:26:32:54:2e:b3:73:77:82:95:1f:d3:
         1e:cd:80:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 02:40:34 2026 by rpki-client