Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e203239383032.roa
File:                     3139322e3230382e392e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          643o+uKYVxWHpDEpV09cQaz3mcN0bSC6pK6Q/qYHpWo=
Subject key identifier:   43:CB:B7:39:2D:8C:84:AF:A3:EF:57:3A:81:ED:6E:75:5C:15:4F:CA
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       1156A5A95B1C0664C88936192F4F63F0FFE3ADA0
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e203239383032.roa
Signing time:             Tue 03 Mar 2026 16:35:53 +0000
ROA not before:           Tue 03 Mar 2026 16:30:53 +0000
ROA not after:            Tue 02 Mar 2027 16:35:53 +0000
asID:                     29802
IP address blocks:        192.208.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 13 Mar 2026 11:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:56:a5:a9:5b:1c:06:64:c8:89:36:19:2f:4f:63:f0:ff:e3:ad:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Mar  3 16:30:53 2026 GMT
            Not After : Mar  2 16:35:53 2027 GMT
        Subject: CN=43CBB7392D8C84AFA3EF573A81ED6E755C154FCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:80:a0:c9:b1:a1:3b:f3:42:fb:d3:35:53:32:
                    9b:8b:65:a3:7c:83:07:83:f1:1c:d5:3c:8c:b9:9d:
                    23:dc:43:60:f9:84:62:79:b5:f0:28:cf:b2:94:4a:
                    9d:53:d4:2f:fa:f2:a1:7b:de:91:2b:26:ba:b6:3d:
                    45:33:82:aa:d3:ab:64:d5:0d:a4:d7:cc:47:21:8f:
                    91:d0:95:b6:14:ee:fc:97:76:c1:b6:e3:27:71:c2:
                    97:1c:57:67:31:43:6f:81:78:7e:0e:4f:5e:d7:29:
                    86:63:ac:a9:3a:cf:95:50:0e:9e:cd:29:5d:b8:aa:
                    78:59:8e:cf:17:5d:82:4f:06:44:43:79:f3:2e:7c:
                    57:90:b4:98:a5:b6:f5:0f:a1:f2:d5:c9:9f:f6:15:
                    3d:82:c0:ab:0c:9c:12:b8:7d:b0:27:cf:b5:d3:84:
                    78:4d:ec:eb:d6:e0:a9:92:be:12:94:11:29:f5:6a:
                    a2:5a:0b:49:86:bc:88:eb:b5:c0:1d:7d:c8:7f:73:
                    6b:b7:8b:42:c1:3d:5a:6a:b8:94:95:81:d6:92:86:
                    8d:fe:fe:65:f2:a7:b7:f9:76:58:d6:92:3f:96:33:
                    25:2f:4b:d4:e2:a4:96:e8:9a:ca:8a:03:9c:80:7a:
                    3a:9c:fe:65:af:5c:e5:00:42:2e:1c:fb:80:f5:3a:
                    ee:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CB:B7:39:2D:8C:84:AF:A3:EF:57:3A:81:ED:6E:75:5C:15:4F:CA
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e392e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c1:a6:59:d9:6a:a8:21:00:6f:43:82:ea:cb:08:0f:be:fd:
         bb:f3:3c:9e:cd:6f:eb:2f:59:a7:a7:09:a2:c8:4b:fc:ff:5b:
         4b:a5:ef:e8:57:69:99:0f:ab:4d:ca:35:08:d9:e7:eb:c1:fa:
         dc:90:79:03:bd:11:f6:e1:2a:c5:3d:20:ee:9b:e8:cc:9c:30:
         97:7a:c3:39:14:b0:36:78:18:05:38:ac:cd:ef:e7:4c:da:90:
         c0:a2:d9:09:2a:c9:b3:89:f0:f2:78:01:24:b0:85:19:0f:46:
         1e:f0:08:74:3b:ad:fd:1e:f4:d4:c8:75:ac:7b:50:60:7b:08:
         ab:ec:3b:22:7d:48:1d:ef:a1:64:b8:26:52:de:e5:53:d7:47:
         cb:93:15:57:17:f6:3e:d4:88:60:e1:67:2e:e7:c8:60:11:7e:
         71:9a:3a:d9:06:83:15:b7:03:46:22:fa:1b:48:ba:21:93:b8:
         1b:45:eb:78:8e:e2:0c:ce:57:c5:8a:17:55:17:5a:3e:ee:e2:
         f1:78:a0:1c:67:97:2c:84:e9:f7:b8:85:0d:2e:7a:76:c0:b3:
         15:0a:69:f9:de:63:34:43:fb:e8:14:56:a6:5a:a8:ec:38:de:
         58:0c:25:e2:0c:24:15:e7:ef:01:00:ac:36:6a:03:c4:e0:58:
         78:c7:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 20:08:23 2026 by rpki-client