Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20383334.roa
File:                     3137322e39392e32322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          uNLztjke5lfSwJMwx4pejC5HBde0jTqrvWBxjypfUws=
Subject key identifier:   CD:C8:B2:2B:1E:47:2E:2D:52:0A:2D:80:F8:8D:0B:C5:81:B5:03:8D
Certificate issuer:       /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial:       20E660F166B36B68FED4F07B7F397B492D776EE9
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20383334.roa
Signing time:             Sat 27 Jun 2026 01:23:43 +0000
ROA not before:           Sat 27 Jun 2026 01:18:43 +0000
ROA not after:            Sat 26 Jun 2027 01:23:43 +0000
asID:                     834
IP address blocks:        172.99.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 29 Jun 2026 16:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:e6:60:f1:66:b3:6b:68:fe:d4:f0:7b:7f:39:7b:49:2d:77:6e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
        Validity
            Not Before: Jun 27 01:18:43 2026 GMT
            Not After : Jun 26 01:23:43 2027 GMT
        Subject: CN=CDC8B22B1E472E2D520A2D80F88D0BC581B5038D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e4:6e:e7:61:c7:41:e0:b4:f9:22:5f:80:fd:
                    80:e8:46:a5:9a:ae:fa:1a:e7:cc:a6:f9:e0:39:37:
                    52:7d:d9:c6:d6:f7:90:be:8f:2a:3b:bc:fe:ed:3a:
                    d4:6c:dd:b5:9e:05:8e:7a:e0:41:df:71:4f:b4:9d:
                    c9:46:51:c7:2e:ce:98:4e:f4:5a:56:55:92:6a:ac:
                    95:5a:0a:65:ae:eb:87:5d:e2:c2:3b:74:ed:ec:0e:
                    b6:63:d4:19:52:78:4e:c4:0b:b6:71:34:66:41:8b:
                    fc:ea:4f:86:c0:68:63:b8:0b:4d:31:72:ed:a1:56:
                    d5:1f:a7:a2:14:f9:c7:f5:cc:81:a6:38:f7:17:b4:
                    58:9f:ba:32:6a:c9:48:20:19:b9:5e:22:9e:72:c7:
                    91:ed:23:f3:1b:4e:f1:56:cf:b4:08:4a:88:3e:ad:
                    ef:1f:3a:ae:62:c6:52:7e:59:b0:5d:e4:8f:16:71:
                    d8:ec:fb:68:31:21:c9:11:55:6b:2c:1a:fd:0b:ae:
                    12:77:e4:9d:2b:1a:4f:af:82:1e:a5:c3:0e:c2:07:
                    95:57:f9:70:9c:98:13:0b:c9:49:8f:2c:eb:e1:39:
                    f1:62:19:d3:53:70:50:23:05:3b:e6:e1:44:e4:3a:
                    0c:3b:e5:1e:95:5e:ef:65:36:f9:c1:e8:aa:66:0e:
                    f4:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:C8:B2:2B:1E:47:2E:2D:52:0A:2D:80:F8:8D:0B:C5:81:B5:03:8D
            X509v3 Authority Key Identifier:
                keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:ab:3d:27:a3:e5:9a:48:ea:15:41:55:f0:9c:c2:27:b9:b9:
         3f:d1:98:a2:a0:43:c6:07:3e:c2:7a:2a:fd:1b:94:9e:7a:0c:
         bd:fa:d5:43:65:2d:f6:97:e5:9e:35:2a:b1:ea:15:d9:08:71:
         9d:ed:eb:c7:c8:64:39:c1:ad:89:16:39:f4:bf:93:b1:2e:f5:
         cc:09:d6:15:55:a1:bc:c3:f9:85:d9:46:88:8d:ce:b0:01:43:
         1b:01:d2:43:ac:0d:13:92:02:40:a8:7f:65:88:78:ef:cf:df:
         92:1d:9c:bb:f8:ba:e8:f8:4f:1b:62:fb:b3:ef:97:a0:50:80:
         11:64:80:6f:a7:9f:e9:4a:ad:73:2e:2a:0d:19:d2:24:82:84:
         64:02:63:b1:a6:8a:e5:af:c7:14:c9:28:d7:3a:39:2b:12:9a:
         07:e7:cc:01:9f:c8:5c:fe:ae:31:46:8b:cb:bb:6a:b2:93:0c:
         28:63:fd:36:2b:81:e7:b9:8b:7c:f6:95:4b:e5:46:c6:54:1b:
         aa:eb:51:40:14:b4:42:8b:06:66:8f:6b:a2:b1:d7:83:4e:7c:
         23:c4:e1:a8:ca:b9:99:c9:c6:b6:43:7b:c5:15:2f:a7:dc:bf:
         14:e9:8d:9d:ed:6c:ff:42:c0:41:aa:a4:44:82:54:9b:18:ae:
         d3:24:46:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:01:05 2026 by rpki-client