Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e203230343733.roa
File:                     3139392e34382e3234322e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          OAA2mlkpHpsh4KgcqslY87El3wbbat1WUtoipMyanO8=
Subject key identifier:   2E:DE:32:CF:95:56:6E:65:33:25:2A:B4:50:80:60:D7:A3:2C:89:B8
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       31563F8AA3B9800A46F74FFA7F243CBC113F912B
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e203230343733.roa
Signing time:             Sat 23 May 2026 19:18:07 +0000
ROA not before:           Sat 23 May 2026 19:13:07 +0000
ROA not after:            Sat 22 May 2027 19:18:07 +0000
asID:                     20473
IP address blocks:        199.48.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 01:13:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:56:3f:8a:a3:b9:80:0a:46:f7:4f:fa:7f:24:3c:bc:11:3f:91:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: May 23 19:13:07 2026 GMT
            Not After : May 22 19:18:07 2027 GMT
        Subject: CN=2EDE32CF95566E6533252AB4508060D7A32C89B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:56:1d:2e:27:21:5c:8e:4a:ac:66:e0:93:cd:
                    61:60:30:0c:08:be:ca:14:7e:53:72:e3:bd:7f:ff:
                    fe:81:27:3f:4d:d4:02:0f:d7:4c:ac:45:c9:b5:2c:
                    2b:46:b8:9d:7d:24:71:2b:e5:6d:a7:0e:82:a3:4b:
                    7a:c3:fe:09:4e:a9:72:89:c6:a6:0e:b5:1c:ef:80:
                    f1:c4:f7:16:76:9b:a8:9f:6f:c1:aa:11:99:e0:c7:
                    b4:ef:21:df:3a:2b:4a:54:8e:5d:e4:33:ce:3a:ad:
                    c9:33:6b:14:99:05:b6:ae:f1:a3:32:dc:f6:b5:6c:
                    f9:76:f3:b3:f6:7e:2f:75:bc:95:c1:95:7a:55:56:
                    27:93:43:5a:95:dc:46:5a:15:98:2f:60:a9:38:34:
                    50:31:15:76:1d:e5:b0:88:bf:bc:d4:de:33:54:64:
                    53:83:16:78:34:f8:58:8b:02:46:21:15:7b:82:af:
                    74:09:70:d3:43:c0:8e:3a:ce:9e:3b:02:52:1f:03:
                    4c:e2:66:4e:83:e0:5a:f7:3a:27:35:b5:2f:c3:ea:
                    92:76:2f:9a:13:df:38:57:dd:2a:bb:0d:5a:02:de:
                    43:86:83:7e:bf:2a:a3:f5:18:25:c7:d7:2c:6d:92:
                    00:a9:eb:00:61:17:41:86:71:ab:4e:a5:6a:55:31:
                    9b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:32:CF:95:56:6E:65:33:25:2A:B4:50:80:60:D7:A3:2C:89:B8
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:96:21:5b:e2:24:f2:98:f0:14:03:03:5c:56:2b:4a:ff:eb:
         8a:4c:ee:0a:3f:a0:0d:22:50:9d:eb:70:f9:43:92:47:0f:13:
         57:3f:11:2d:cf:33:ba:e6:20:4e:c4:80:19:c0:7e:a1:91:ba:
         8b:50:14:02:df:a2:60:ee:43:d9:dd:ba:73:02:bd:2b:df:4b:
         b8:46:b6:39:53:53:ad:36:d2:8e:23:56:ba:84:19:46:b6:00:
         86:97:80:e6:2a:a8:c1:76:10:d8:eb:16:49:07:4d:0a:6c:f8:
         5f:63:a2:14:e9:48:5f:03:99:86:7b:9b:2d:5c:50:ab:b7:8d:
         a3:43:8f:06:92:51:6f:97:f3:42:76:f1:30:5e:e6:ea:bb:25:
         6f:92:3f:88:24:b2:0a:b0:d1:89:83:bd:45:5e:dd:ab:19:66:
         de:86:c9:ae:45:71:10:46:33:7b:fc:85:de:12:94:02:40:17:
         01:e5:dc:8e:5d:68:d9:4c:bc:39:fd:20:ca:b1:6c:ad:a9:b0:
         33:54:85:3e:66:1f:b6:58:9c:a0:34:4c:e4:df:c3:ab:57:95:
         35:f7:cf:9c:10:c1:60:08:38:d6:58:5c:3f:da:97:e5:5e:60:
         34:2c:5b:f6:8e:d6:b7:27:b9:8a:a9:2d:51:f5:cf:30:62:48:
         ff:fc:ad:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 14:34:33 2026 by rpki-client