Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e20323138383632.roa
File:                     3139322e302e32332e302f32342d3234203d3e20323138383632.roa (raw, json)
Hash identifier:          SGj+3XWnVrpQ9FqSEF9Opaxu0lMqDfFQsm/EP87ZK9Q=
Subject key identifier:   04:8F:4D:29:AD:0F:BA:7E:31:B1:00:DC:08:A9:3C:43:CC:B7:3A:37
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       768AB35A797C62381ABA708F761A5DE670B16B6E
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e20323138383632.roa
Signing time:             Mon 07 Sep 2026 06:21:38 +0000
ROA not before:           Mon 07 Sep 2026 06:16:38 +0000
ROA not after:            Mon 06 Sep 2027 06:21:38 +0000
asID:                     218862
IP address blocks:        192.0.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Sep 2026 02:18:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8a:b3:5a:79:7c:62:38:1a:ba:70:8f:76:1a:5d:e6:70:b1:6b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Sep  7 06:16:38 2026 GMT
            Not After : Sep  6 06:21:38 2027 GMT
        Subject: CN=048F4D29AD0FBA7E31B100DC08A93C43CCB73A37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bf:ca:76:7d:96:8d:a9:4e:40:ee:fa:bf:dc:
                    87:4c:47:21:84:8c:44:3e:e6:32:3b:a0:c8:d6:5f:
                    d7:83:ad:e2:42:f5:9e:09:78:ab:fa:f2:c7:cd:19:
                    c7:bc:3a:e9:2f:a1:7d:68:14:bf:df:f2:b8:82:d8:
                    e5:81:ab:bc:0e:55:71:24:5f:c6:08:30:a9:61:ff:
                    2b:b6:ee:a7:fa:76:46:59:70:61:5d:cf:b3:8b:54:
                    59:4f:9e:52:9e:d2:c9:a2:9a:3b:f4:f8:4c:d9:c1:
                    28:06:b7:f8:29:cd:d8:12:f4:61:31:88:e2:cf:0e:
                    d9:a2:17:53:b3:63:ed:fc:bd:ce:f7:d0:71:bf:89:
                    93:b1:7e:8c:87:2a:7c:05:37:63:89:a8:8a:4d:0d:
                    81:0b:e4:3b:1e:e9:37:92:1b:d2:33:78:38:14:50:
                    6b:a5:f5:c6:44:47:a2:90:78:5f:69:1d:7c:80:50:
                    0a:22:14:66:5f:b0:57:71:5b:64:dc:c4:2d:83:9a:
                    43:75:20:cb:40:24:41:cd:35:53:ff:1a:84:55:aa:
                    1a:b2:0f:37:ff:d0:9e:e3:82:d7:cd:01:c7:34:a2:
                    8a:3b:a4:d2:91:7f:2d:41:4d:47:36:b9:c6:0a:19:
                    63:58:0a:71:98:13:85:29:60:c1:95:74:c0:77:ce:
                    2c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8F:4D:29:AD:0F:BA:7E:31:B1:00:DC:08:A9:3C:43:CC:B7:3A:37
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e20323138383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:3f:9e:b8:4c:c1:ac:75:38:87:82:1e:14:87:65:ba:59:0f:
         ad:21:60:30:3d:d3:ca:f0:9a:58:6c:2c:63:43:ca:c2:6b:9f:
         f4:5f:96:09:44:b2:c1:22:32:8d:49:8c:fd:d3:e1:d6:66:fc:
         6e:ad:2c:2e:40:d7:cf:b8:89:bd:58:b1:6c:87:74:75:8d:82:
         2e:70:64:e0:d2:69:f0:22:ff:82:fc:d7:2f:9b:c5:26:b9:d9:
         fa:67:47:fa:9d:f6:33:b3:73:71:d0:59:6d:2c:ad:f5:4f:23:
         e1:ff:f1:fc:ae:4b:9b:2a:62:8c:92:6f:71:3f:f7:18:36:08:
         d8:e7:d9:ce:76:1c:09:fd:55:5a:7e:42:ab:74:d9:0c:b4:f8:
         8c:2b:2f:87:87:9c:a8:ad:8b:4b:d1:91:86:f5:bd:ff:40:a7:
         48:d7:0b:8d:a8:c5:32:d8:dc:95:bc:41:08:46:10:cb:66:1b:
         c5:9e:ec:0c:d4:95:51:a3:c1:f0:9b:98:30:4c:39:e5:04:bc:
         d9:bd:3e:70:86:63:21:54:a8:21:25:bc:a7:e1:93:fb:52:fa:
         c3:7c:b9:99:f8:a1:81:a3:59:f3:4e:bf:4e:dd:6f:9d:69:5b:
         cb:49:bc:9e:57:9c:ad:ac:ed:e0:fa:93:22:4a:d9:be:ac:1e:
         d0:ff:0f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 19:47:07 2026 by rpki-client