Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e20343032323336.roa
File:                     3139322e37302e3137362e302f32342d3234203d3e20343032323336.roa (raw, json)
Hash identifier:          J1vniQG6MIQ8MDzC3ZTDdfp1Wrqaf7zHs2m6Lba5PF8=
Subject key identifier:   BA:E6:C9:11:B9:FD:A6:FB:8B:72:38:69:B4:97:30:99:4B:32:65:D3
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       5C1A46AAACD80F0286A44F2D8AE338C8C454ADCC
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e20343032323336.roa
Signing time:             Mon 06 Jul 2026 18:22:29 +0000
ROA not before:           Mon 06 Jul 2026 18:17:29 +0000
ROA not after:            Mon 05 Jul 2027 18:22:29 +0000
asID:                     402236
IP address blocks:        192.70.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 07:31:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:1a:46:aa:ac:d8:0f:02:86:a4:4f:2d:8a:e3:38:c8:c4:54:ad:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jul  6 18:17:29 2026 GMT
            Not After : Jul  5 18:22:29 2027 GMT
        Subject: CN=BAE6C911B9FDA6FB8B723869B49730994B3265D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:dc:67:79:d4:84:a9:d1:88:52:20:93:07:96:
                    a6:f9:3a:c7:50:25:7d:fd:22:b3:57:2e:02:24:2c:
                    79:18:10:88:b0:c6:7a:56:9f:ea:6b:c4:32:82:b9:
                    9a:12:c0:a1:f8:7d:85:f0:31:88:a7:7c:b0:84:41:
                    eb:5d:a9:00:39:3e:0e:21:ca:ae:ae:45:7d:23:22:
                    4a:e7:73:15:db:ed:0a:8e:f1:75:7f:1b:45:94:2c:
                    73:9e:a7:70:08:19:d0:2f:cd:9d:e3:ed:f2:e0:5d:
                    00:af:00:97:50:f2:44:be:4c:60:14:fd:f7:07:53:
                    63:eb:2a:f2:80:fc:ba:e6:5a:8c:45:8c:01:96:1b:
                    c2:26:ba:d8:a4:ee:69:1e:13:1a:05:65:67:a7:34:
                    63:98:bb:04:aa:76:94:ad:d4:76:c6:e7:a0:10:5d:
                    19:dc:ab:59:ca:c4:b7:8b:80:99:59:56:37:69:b4:
                    0c:f8:83:d5:d0:c9:bc:b0:41:1e:4b:4a:ab:1f:a5:
                    c6:64:fa:12:be:3a:57:bf:ab:2a:d5:62:d8:50:48:
                    00:71:df:ed:f6:32:a6:96:a1:0c:5d:34:da:7d:26:
                    2c:f2:45:10:01:d2:1b:c5:80:14:5c:58:8c:2d:7a:
                    87:ce:f5:bc:be:ab:03:6a:10:04:dc:78:59:2f:17:
                    55:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:E6:C9:11:B9:FD:A6:FB:8B:72:38:69:B4:97:30:99:4B:32:65:D3
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e20343032323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:87:fb:bc:46:b3:94:c0:5d:19:09:bc:8f:4d:74:7c:c3:ab:
         06:e6:85:bd:ef:9d:89:9d:d8:c8:76:26:a7:0d:a4:1d:b8:dc:
         81:c0:94:03:e5:80:74:c3:d1:b4:43:70:e8:fe:c5:2e:f8:5d:
         be:85:d9:9c:be:a6:6b:08:23:3e:3c:85:0c:cb:ec:19:dd:71:
         51:2a:7f:cd:a2:51:13:f5:89:b0:74:9d:5f:74:90:72:6a:5b:
         ed:e2:35:e1:b9:92:33:d9:99:c4:21:9e:7f:b9:20:1c:ee:bc:
         e4:04:32:ab:a3:9a:2b:4a:57:c8:46:9b:b7:3c:78:51:62:27:
         79:f1:1b:7f:4e:9d:ae:c6:ce:4a:07:83:67:76:c2:97:ea:dd:
         46:78:c1:64:29:47:cc:8d:e1:b0:93:8b:59:25:9e:2e:5d:59:
         ee:96:4b:dd:45:76:94:0f:b9:96:21:62:7b:7e:35:5a:9e:a2:
         03:54:b2:97:a8:53:23:56:e6:1b:9e:70:d8:35:4f:f7:b9:82:
         f3:63:8f:e3:8a:1c:7c:bb:af:6c:21:2e:eb:85:b6:ac:b7:f1:
         56:4d:0b:c3:84:00:ca:22:e8:c8:7d:ba:31:55:d2:a4:39:97:
         d8:8a:4b:d5:8d:57:4f:69:c9:6d:50:59:9b:ac:e1:6b:c3:3d:
         a0:c0:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:21:42 2026 by rpki-client