Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32312d3234203d3e20383334.roa
File:                     3139382e3130352e3137362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          LxzKCrOksbhudon0OQ7C7ef/hir3NCrBGDsb6E7gAzY=
Subject key identifier:   C0:71:F1:73:D3:E7:E0:23:E3:D6:A0:CC:37:33:F9:03:86:CC:A0:73
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       0C38ECD7791A0C9B6BC32148CB070AF8C8F17882
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32312d3234203d3e20383334.roa
Signing time:             Sun 26 Apr 2026 09:36:22 +0000
ROA not before:           Sun 26 Apr 2026 09:31:22 +0000
ROA not after:            Sun 25 Apr 2027 09:36:22 +0000
asID:                     834
IP address blocks:        198.105.176.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 May 2026 02:34:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:38:ec:d7:79:1a:0c:9b:6b:c3:21:48:cb:07:0a:f8:c8:f1:78:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 26 09:31:22 2026 GMT
            Not After : Apr 25 09:36:22 2027 GMT
        Subject: CN=C071F173D3E7E023E3D6A0CC3733F90386CCA073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:03:1c:a5:cf:df:40:89:f8:56:b2:60:1f:
                    4e:76:a9:82:47:88:dc:86:7e:44:4b:56:99:de:60:
                    65:67:79:3b:13:3f:dc:97:58:0f:49:20:ef:58:52:
                    aa:a4:03:78:00:98:41:90:68:b1:2e:75:cc:b5:f3:
                    bd:d0:e1:4a:84:32:4e:f1:00:2d:15:8c:57:31:1b:
                    7d:5d:af:3c:68:99:83:53:35:f4:4e:d4:0b:bd:59:
                    5b:ce:b3:c0:a3:75:93:bc:75:83:d0:43:c5:da:f4:
                    ed:16:5a:24:a9:23:80:5f:66:07:71:e1:f1:bd:bb:
                    de:b1:77:f2:28:4c:01:9f:8a:d4:1f:0c:20:89:bf:
                    be:ba:f2:95:6d:91:1a:f2:97:3c:1e:1d:c2:57:b0:
                    39:2f:9a:7e:7c:43:ee:98:96:b6:99:ad:3e:72:8a:
                    ec:5f:a2:3f:d4:21:b6:8e:07:ad:88:28:57:bd:88:
                    3a:87:e7:f5:ed:a2:45:06:8f:95:5a:9e:f5:1e:70:
                    69:84:06:96:a9:a9:af:65:24:cd:8d:14:5f:3c:b0:
                    96:56:0c:4a:65:eb:d8:9d:6a:e6:3d:2c:7c:96:b9:
                    02:e6:f7:de:67:f3:a5:65:73:d7:0a:29:ca:88:08:
                    ee:a1:23:3b:4e:fc:ac:4d:0c:fe:ad:64:96:50:8c:
                    c2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:71:F1:73:D3:E7:E0:23:E3:D6:A0:CC:37:33:F9:03:86:CC:A0:73
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3137362e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b2:08:fe:98:86:af:92:62:92:eb:ae:dc:68:ad:93:de:7b:f9:
         f3:6d:55:92:a0:30:78:72:5a:fc:60:f8:29:57:ec:4e:be:24:
         2f:73:19:d7:bf:b3:cc:4b:0f:d7:9e:f2:79:0d:67:91:03:98:
         2d:e0:58:f4:cd:22:c9:68:76:88:cd:4b:da:b8:40:b4:aa:a2:
         71:76:dc:50:c2:2f:af:a6:d6:a2:b5:70:3b:a9:d0:76:88:73:
         82:90:32:eb:dc:79:be:a5:1e:94:8e:e8:d7:a2:b5:f5:ac:60:
         06:28:7b:aa:76:79:50:e9:99:fc:c2:72:71:f8:6a:be:9e:c8:
         b6:dc:39:9d:40:8b:fc:0e:13:47:53:20:a5:fc:05:1d:d2:18:
         ca:9a:2b:c8:25:22:13:32:5e:94:22:ba:bc:c5:38:63:76:68:
         da:4b:9b:c4:c3:6f:e5:c2:cd:54:a9:67:05:d6:d9:6f:d7:6d:
         7c:7d:4d:07:1a:36:64:93:4d:79:4b:d5:4d:53:63:19:b9:f0:
         d4:46:b6:9a:d1:cd:fb:39:9d:3c:5b:47:ab:7e:cc:1e:5d:27:
         bf:bb:ab:75:6b:aa:2b:7b:8d:b3:88:1f:55:2c:cd:ec:2a:95:
         22:0d:f2:80:b0:ee:a9:8e:40:2f:69:9e:4c:ed:10:6b:2b:00:
         ae:a9:67:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 1 07:48:22 2026 by rpki-client