Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323138383239.roa
File:                     3139322e3230382e352e302f32342d3234203d3e20323138383239.roa (raw, json)
Hash identifier:          EmHVrhb4+f1oLxphuCp7nn0w+CaMGOEvUarXVzOTBEU=
Subject key identifier:   E9:55:26:7E:3F:87:BC:03:4C:55:4C:8E:52:F2:14:92:CA:85:A2:2F
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       6D8750D5A091BCDFB6220F653567E00C3CDAB026
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323138383239.roa
Signing time:             Sat 05 Sep 2026 06:59:11 +0000
ROA not before:           Sat 05 Sep 2026 06:54:11 +0000
ROA not after:            Sat 04 Sep 2027 06:59:11 +0000
asID:                     218829
IP address blocks:        192.208.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Sep 2026 06:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:87:50:d5:a0:91:bc:df:b6:22:0f:65:35:67:e0:0c:3c:da:b0:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Sep  5 06:54:11 2026 GMT
            Not After : Sep  4 06:59:11 2027 GMT
        Subject: CN=E955267E3F87BC034C554C8E52F21492CA85A22F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e2:6d:34:1e:de:6f:07:c5:ee:b8:10:6e:1c:
                    32:e5:04:df:ac:19:69:6a:c6:ee:3d:6e:36:7d:aa:
                    31:bd:7e:3c:f8:03:25:53:33:80:1d:f7:47:dd:fa:
                    ea:ec:4b:94:83:d6:01:7c:54:62:c8:cc:11:fd:05:
                    19:60:5d:f7:94:c6:a2:9a:94:00:05:e2:27:4a:68:
                    9a:f4:85:3b:87:e0:57:16:df:87:86:96:0b:dd:f8:
                    52:7b:39:79:3d:7e:62:ec:80:f4:fc:dd:42:09:97:
                    30:50:5e:51:40:b7:31:c5:7e:cd:31:b1:b9:7d:8d:
                    b8:a0:7f:62:87:df:ce:d2:65:26:3a:28:40:98:fd:
                    a4:b5:3e:bf:0d:b6:8f:74:ad:03:b5:4c:2f:03:b7:
                    68:7a:45:a0:9d:c0:15:ea:25:17:bf:a8:47:b6:3c:
                    2e:a8:27:44:66:3a:d2:06:bd:50:46:5b:a2:b8:83:
                    20:8d:d1:a1:79:05:6f:35:db:77:85:e9:d4:20:c6:
                    c9:53:d4:0f:b8:f2:c7:8d:96:85:f1:89:72:d4:2a:
                    00:90:f9:12:ed:b4:c8:34:26:b2:01:9d:b8:d1:d5:
                    d1:6e:92:04:e9:ca:b0:5b:41:4b:fc:3f:95:67:db:
                    a4:e4:bd:b4:7b:b8:14:62:9d:08:b1:d4:8a:51:0e:
                    7e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:26:7E:3F:87:BC:03:4C:55:4C:8E:52:F2:14:92:CA:85:A2:2F
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e20323138383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:45:ab:ce:af:dd:c9:e3:5e:80:11:9e:20:f4:98:d3:09:04:
         a5:fb:fe:6c:7c:35:61:5c:6b:9e:31:2e:66:2d:c1:38:90:ed:
         3a:c9:6c:b3:55:c6:d3:87:69:46:06:94:c2:b7:ae:53:2c:c4:
         bf:9a:a9:31:ae:22:5a:ea:e1:0b:92:72:44:fe:74:82:9e:f1:
         ae:5c:a6:3a:95:1a:ef:9d:19:7b:fc:39:e3:e9:36:3c:17:66:
         6b:df:20:68:90:5c:d8:f7:96:23:45:7f:c8:0f:41:99:60:44:
         20:53:d4:af:c5:dc:1c:26:7d:ee:a7:3d:aa:ef:0d:7f:7d:6f:
         b2:fd:3d:48:83:66:42:3c:8e:d1:7f:05:4c:88:c2:39:ac:2f:
         4e:58:b8:19:11:6a:36:ff:f4:12:c2:66:9a:4a:07:f7:c5:17:
         09:32:2c:dd:0f:35:b3:93:ad:e3:87:b2:65:c1:e8:b3:68:db:
         81:f9:7b:8a:f8:69:4d:4a:90:07:7b:51:c7:2a:9a:46:cc:e5:
         a6:f2:e4:81:ac:e5:c5:de:64:14:f4:3a:49:c7:f8:6a:f3:3e:
         99:11:dd:9d:82:c8:91:05:d0:ed:02:79:80:23:cd:08:82:d3:
         9d:ce:7e:40:df:ba:87:68:45:a4:8a:5a:e6:30:56:07:d5:35:
         d1:42:4a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:22:32 2026 by rpki-client