Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e332e302f32342d3234203d3e203334393237.roa
File:                     3139322e3230382e332e302f32342d3234203d3e203334393237.roa (raw, json)
Hash identifier:          X3U2rOvmR81LGjU+3Xgb42htUn/FUvmRWHUK8OxSbJc=
Subject key identifier:   CE:E0:0F:E3:6F:0A:81:0C:1C:93:BA:9A:E3:05:C5:97:A0:75:78:FB
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       79765EEF08639BB376989F30472A793940E7EB12
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e332e302f32342d3234203d3e203334393237.roa
Signing time:             Sat 18 Apr 2026 10:35:59 +0000
ROA not before:           Sat 18 Apr 2026 10:30:59 +0000
ROA not after:            Sat 17 Apr 2027 10:35:59 +0000
asID:                     34927
IP address blocks:        192.208.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 28 Apr 2026 01:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:76:5e:ef:08:63:9b:b3:76:98:9f:30:47:2a:79:39:40:e7:eb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Apr 18 10:30:59 2026 GMT
            Not After : Apr 17 10:35:59 2027 GMT
        Subject: CN=CEE00FE36F0A810C1C93BA9AE305C597A07578FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:88:99:93:e3:f9:45:d0:fe:1f:97:af:d3:5a:
                    a6:56:b9:00:db:db:a9:67:18:c5:58:04:c3:d5:d1:
                    07:49:6c:d6:79:3f:55:65:2b:5a:a1:3c:97:f0:7d:
                    d1:ea:ed:45:03:b7:2a:8e:f2:af:5d:db:6f:b3:7c:
                    48:a4:c0:da:14:0f:21:91:f4:6d:f7:23:c8:53:ba:
                    f1:96:b5:ee:cb:98:36:16:e3:1b:6e:d0:6a:07:6d:
                    78:c9:3a:60:28:c5:ec:dc:91:0b:e4:dc:56:a6:ab:
                    10:c9:2e:64:1c:4a:d3:23:c9:6d:94:b2:3d:79:33:
                    f2:bc:ba:47:ee:f7:b6:a2:41:2e:23:ae:f7:4e:c7:
                    51:5d:9d:76:98:a0:d9:78:85:25:9d:d6:93:63:d3:
                    8a:c7:76:51:61:df:13:b8:61:8f:72:bb:67:11:03:
                    f6:a1:4b:b6:e8:fe:ae:5b:96:61:c2:4d:a0:52:55:
                    b1:97:43:c6:3f:8a:8b:b5:03:f5:fb:c8:ff:d1:ed:
                    28:0b:74:bc:3e:b6:cd:a0:2e:ef:29:b8:52:1d:fd:
                    c3:d2:71:78:6b:ac:96:b7:4d:63:f3:84:7f:1a:05:
                    9d:0d:f8:2f:1d:42:ac:ee:cc:06:ac:24:1e:07:0b:
                    81:8e:d4:1e:f6:fb:93:dd:ec:84:03:d3:a0:5f:21:
                    8b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:E0:0F:E3:6F:0A:81:0C:1C:93:BA:9A:E3:05:C5:97:A0:75:78:FB
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e332e302f32342d3234203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:b7:65:61:2e:ac:b2:b2:f3:a0:b9:11:10:d1:ae:99:c3:c3:
         d0:ca:4a:db:43:51:0c:67:c4:4d:be:0e:2c:f0:c9:c6:84:35:
         d7:64:7a:b3:a7:20:e5:8d:9c:b2:a9:3e:85:47:1e:6c:a7:d5:
         93:c6:59:5f:bc:59:8a:38:71:e3:f1:38:d3:29:89:c6:77:12:
         44:df:6e:c5:f5:69:67:df:61:be:75:69:b3:50:ac:80:34:71:
         4e:b7:8a:4a:08:da:11:86:c3:b4:d9:c6:02:4f:ed:e2:2f:39:
         0f:ce:61:18:51:b5:ae:14:6e:23:03:c3:3c:8a:a1:fd:ad:8e:
         e3:f9:df:ac:70:20:c9:e6:aa:a3:c8:39:c2:c8:30:e1:b1:4d:
         99:3e:0a:9c:53:01:32:23:4f:07:b4:df:97:37:ad:03:53:cc:
         5b:b6:19:c2:09:11:f6:6d:dd:40:e3:28:2e:47:c1:b4:db:24:
         cc:f8:15:c2:72:7d:7c:83:5c:e3:42:59:0e:51:14:58:de:43:
         aa:e8:b8:e3:22:5e:8a:1d:30:a2:7c:33:d0:00:fd:82:84:11:
         00:eb:ad:55:6a:c7:c1:35:02:18:a5:d4:68:ab:56:b9:a0:42:
         42:e9:6c:31:b1:39:0e:11:b3:39:dc:69:18:d4:08:c5:c8:27:
         98:69:72:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 13:59:52 2026 by rpki-client