Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20323034393636.roa
File:                     3139322e3230382e31312e302f32342d3234203d3e20323034393636.roa (raw, json)
Hash identifier:          Z+PodaGLUMAB5YoL9lriJjckSMPWP0KGxzL1IB8HKj0=
Subject key identifier:   DF:1F:BF:F0:00:A7:90:63:E7:C3:4E:99:AF:72:3D:7E:46:02:C5:80
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       2D7D5BE289F73672B0D69FFE6C9C41B61D9FD308
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20323034393636.roa
Signing time:             Mon 07 Sep 2026 17:08:28 +0000
ROA not before:           Mon 07 Sep 2026 17:03:28 +0000
ROA not after:            Mon 06 Sep 2027 17:08:28 +0000
asID:                     204966
IP address blocks:        192.208.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7d:5b:e2:89:f7:36:72:b0:d6:9f:fe:6c:9c:41:b6:1d:9f:d3:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Sep  7 17:03:28 2026 GMT
            Not After : Sep  6 17:08:28 2027 GMT
        Subject: CN=DF1FBFF000A79063E7C34E99AF723D7E4602C580
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:aa:cd:d3:ce:e5:f2:45:88:a0:53:fa:8f:
                    ed:0e:8b:09:d4:39:7c:8f:bd:74:2c:0e:62:13:4f:
                    6a:40:8c:4f:bf:e3:2c:32:e2:b5:bf:48:dc:96:63:
                    60:52:bd:d3:b7:5f:d9:d6:32:7f:8a:0e:86:8a:93:
                    68:0f:25:3e:b7:5e:0c:b5:d5:04:0e:e8:8e:b1:b8:
                    32:63:de:62:a7:e7:35:11:71:e7:dc:c0:25:67:ba:
                    88:66:38:d8:20:90:76:78:23:bb:d6:dd:ac:e8:41:
                    31:77:93:c3:9e:18:6f:01:ec:ca:56:e2:11:b3:4e:
                    c6:6d:bb:ef:99:89:d1:7a:b9:01:ec:9d:32:ed:79:
                    d4:f4:7c:74:93:1a:20:09:ae:f0:41:bb:67:37:ef:
                    6a:a4:c4:14:2b:99:ea:39:2c:54:ce:2f:ea:fa:fe:
                    78:1c:15:c0:e7:46:a1:db:78:c4:4e:e2:14:ab:a6:
                    e1:c3:90:8d:71:8e:fe:76:27:b2:1c:69:c3:86:0c:
                    a2:1c:ff:52:16:59:f0:0f:e1:f0:9e:f0:80:89:5f:
                    b0:6e:c2:e2:23:57:b3:a4:9c:d9:22:79:8a:85:07:
                    83:76:cf:a3:45:ba:a7:33:bc:62:be:09:fc:e7:39:
                    17:cf:f0:be:ed:6c:5b:76:00:b8:9b:1f:c1:72:14:
                    f5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1F:BF:F0:00:A7:90:63:E7:C3:4E:99:AF:72:3D:7E:46:02:C5:80
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20323034393636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:5c:a4:12:ed:2d:6c:e3:2e:79:b6:be:2f:30:0c:fb:09:04:
         dd:e0:24:ff:b4:a0:3a:82:f7:18:56:60:13:58:59:2c:77:99:
         e1:e2:0c:ad:55:1b:c7:93:10:71:1e:f7:96:ce:84:4a:53:67:
         ba:58:37:27:20:d5:4c:89:73:9c:89:26:27:d0:ef:0a:12:68:
         14:74:77:65:b5:31:b6:a3:f6:ec:cd:79:60:8d:ad:3d:d6:db:
         01:01:78:70:ec:6f:e0:94:4e:d1:0c:a0:90:eb:a0:45:10:92:
         15:4b:1e:59:e0:2f:97:83:c0:b6:55:b6:bf:67:e7:e1:9b:85:
         40:49:26:b2:54:cf:a9:50:05:21:a0:15:dc:80:01:44:8e:f5:
         f8:f7:38:79:2c:b3:2d:8a:ab:6b:41:6c:e3:1f:af:05:43:41:
         82:0e:2c:a9:e4:b6:b9:9a:0a:3b:62:b5:8c:b9:9b:38:ef:c6:
         fe:15:92:99:07:de:5f:f0:db:a2:6e:7f:b0:04:01:25:a9:f3:
         2d:bd:da:52:3f:91:1a:82:4b:97:4b:25:4f:41:51:3a:49:a3:
         3f:97:a4:d4:95:57:da:21:87:31:a3:01:35:41:e2:ad:91:3f:
         d0:ad:73:af:93:f6:7c:30:e7:c8:17:d3:6c:cd:4a:07:29:cf:
         85:cf:89:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:22:32 2026 by rpki-client