Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e203239383032.roa
File:                     3139322e3230382e352e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          Vp6unT/na3RMhtXVUoMHMgtAIbxY4QJfnh6jZff8glE=
Subject key identifier:   05:A6:6A:84:61:31:A2:D3:9A:F3:F6:CD:2E:B9:65:20:8A:99:06:EF
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       064F1F51A7A8AD9BADC93F614DB5794A73DB4B6A
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e203239383032.roa
Signing time:             Wed 07 Oct 2026 10:05:04 +0000
ROA not before:           Wed 07 Oct 2026 10:00:04 +0000
ROA not after:            Wed 06 Oct 2027 10:05:04 +0000
asID:                     29802
IP address blocks:        192.208.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 27 Oct 2026 09:18:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:4f:1f:51:a7:a8:ad:9b:ad:c9:3f:61:4d:b5:79:4a:73:db:4b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Oct  7 10:00:04 2026 GMT
            Not After : Oct  6 10:05:04 2027 GMT
        Subject: CN=05A66A846131A2D39AF3F6CD2EB965208A9906EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:16:ad:7f:dc:7f:a0:45:3a:b1:ef:e5:18:96:
                    e7:95:ed:f6:d8:1e:83:55:e4:82:75:a2:ff:ee:a2:
                    2c:97:8c:15:cd:c2:69:16:48:9e:4c:9d:fd:47:64:
                    35:f0:5c:a6:18:1e:14:91:55:e4:e8:5a:cd:73:97:
                    d1:1a:d8:ef:a0:58:d9:67:aa:f5:b9:a2:13:bc:08:
                    c6:e7:21:ad:05:1d:fa:97:d3:70:fa:ff:d9:5f:4c:
                    b6:1d:f2:a6:3c:de:e4:c1:79:3b:d6:1d:10:d7:93:
                    2f:58:da:a1:20:a8:ba:0b:39:95:b8:04:65:70:63:
                    3d:13:93:4c:3f:9a:e1:77:d8:11:12:81:4f:fa:71:
                    7f:6b:13:e4:a0:e7:c9:b3:66:d6:8c:8d:26:98:19:
                    f5:d2:ea:2b:78:8f:10:8d:92:fd:b3:b0:ec:5e:ab:
                    04:55:16:83:a4:fe:a4:dc:3f:e8:77:8a:b4:98:cf:
                    e3:85:2e:95:90:29:33:73:dd:45:7e:4a:26:9b:bd:
                    51:9b:43:ca:ca:02:27:5f:50:d2:60:44:da:6f:be:
                    34:bb:7e:ce:29:f1:6e:e4:1f:51:13:26:96:de:e0:
                    67:12:ec:1f:77:39:27:4a:96:93:3b:d1:3b:f0:a3:
                    98:26:37:f9:f8:38:1f:f5:fa:27:61:d1:2d:6c:29:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A6:6A:84:61:31:A2:D3:9A:F3:F6:CD:2E:B9:65:20:8A:99:06:EF
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e352e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:17:00:1b:a8:96:c1:6c:f3:b1:99:2e:f8:b7:0d:ec:1b:f6:
         1b:03:a5:a5:d3:ae:45:b7:08:a8:98:9e:21:c6:73:32:75:6b:
         43:c4:bc:23:64:6c:95:cd:49:0e:35:d2:f4:76:ce:a5:89:29:
         d7:99:cc:a6:ad:fe:ce:99:7b:b4:74:82:11:a8:4d:d3:0a:dc:
         72:ca:3e:5e:2f:c3:71:0c:10:b9:ae:5e:49:bb:2d:46:d1:38:
         55:1d:76:97:3b:1a:5d:2d:b6:70:b5:76:03:8b:76:3d:c6:77:
         d6:ba:be:03:50:66:f0:f7:2d:31:13:b4:56:0e:35:5f:75:52:
         fc:5c:70:0e:ce:d1:5d:06:3a:6b:bb:f4:2a:89:39:00:04:53:
         b9:17:e5:bc:64:5d:59:c7:f8:64:43:d2:7e:2a:6d:e2:63:07:
         f2:8d:ae:af:7c:eb:ab:17:ba:29:d5:e3:98:e0:c8:14:ee:7b:
         aa:a0:4d:37:a4:67:63:cc:5d:79:2f:62:e0:db:69:06:1f:7f:
         75:e0:5f:d0:6a:2d:d7:e5:d7:dd:ca:13:96:a9:5c:a1:4c:72:
         1c:cd:38:62:3e:fc:43:8d:2b:0f:b7:07:bf:46:e6:df:63:be:
         74:68:3e:4c:57:15:bb:9f:b6:ea:93:ba:25:ba:2a:0b:73:86:
         80:5f:38:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 01:33:18 2026 by rpki-client