Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20313532373236.roa
File:                     3139392e3233312e36362e302f32342d3234203d3e20313532373236.roa (raw, json)
Hash identifier:          VBMQQ59qr9EBAO67pihG+HmwuT/riHrf85UA4RtzY1E=
Subject key identifier:   CD:8E:D0:25:D1:79:C8:88:7A:93:E6:2A:6B:91:D4:01:EC:13:3D:C8
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       38B6758C465DCD72405C561C1A869C86576BC3D3
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20313532373236.roa
Signing time:             Wed 07 Oct 2026 16:41:13 +0000
ROA not before:           Wed 07 Oct 2026 16:36:13 +0000
ROA not after:            Wed 06 Oct 2027 16:41:13 +0000
asID:                     152726
IP address blocks:        199.231.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:58:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:b6:75:8c:46:5d:cd:72:40:5c:56:1c:1a:86:9c:86:57:6b:c3:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Oct  7 16:36:13 2026 GMT
            Not After : Oct  6 16:41:13 2027 GMT
        Subject: CN=CD8ED025D179C8887A93E62A6B91D401EC133DC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:86:cc:4c:05:b3:ff:a1:33:db:59:f3:df:9b:
                    0c:1f:d9:86:10:88:cf:50:1a:ea:81:7b:4d:f9:a9:
                    1c:14:7f:be:f0:c1:6a:84:e2:87:02:e3:95:3f:26:
                    85:6a:18:45:07:13:9c:8f:ca:b2:49:90:c6:df:f6:
                    49:f9:9f:fa:25:ff:a4:09:c4:c3:29:ee:d8:2b:2e:
                    82:5d:ea:b1:1b:9c:b1:09:e6:da:72:19:c3:5d:9f:
                    7a:6b:1d:5d:4d:39:aa:36:49:95:7d:5f:87:5c:71:
                    e2:ce:21:cb:d3:bc:bb:8f:e5:22:76:25:41:7a:76:
                    72:14:4d:a3:ba:8c:51:9c:77:1c:47:48:2d:85:e3:
                    ef:6b:bf:40:50:de:8a:5e:3e:34:c0:6b:20:21:39:
                    be:e0:28:18:0a:8e:6a:27:2d:72:d8:58:02:15:87:
                    59:a7:a9:41:d8:03:80:44:35:52:77:13:0a:8d:7a:
                    42:19:bb:93:77:5e:b9:01:ec:d7:5c:85:3c:b6:2e:
                    e8:0c:98:49:94:62:58:34:9e:23:bf:30:91:2a:dc:
                    47:3b:05:21:ed:d2:7d:a4:e8:bc:9f:dd:7c:90:0d:
                    3f:1b:59:27:a0:9e:a6:f0:04:ed:a1:9f:59:0e:a9:
                    88:cf:d8:0a:43:19:7a:7f:ae:e7:1c:7d:f9:03:30:
                    23:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8E:D0:25:D1:79:C8:88:7A:93:E6:2A:6B:91:D4:01:EC:13:3D:C8
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36362e302f32342d3234203d3e20313532373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a3:34:07:b4:ec:d1:e6:cf:3a:c1:4f:47:b6:85:23:c5:79:
         a1:63:04:a4:b6:25:3a:9e:29:71:27:cb:da:70:bc:09:3c:5a:
         57:bd:a6:47:5a:7d:b8:87:bc:22:78:46:8f:d2:f7:dd:ce:07:
         cb:14:ed:3e:d0:9b:1f:fa:8d:28:b3:3b:02:b6:f9:98:09:a1:
         26:c9:71:a7:a9:e9:87:7f:e7:a0:fc:66:93:1b:92:a2:6a:76:
         9c:c1:06:ac:1f:6f:73:32:5c:d0:1c:a0:73:b8:1e:87:f6:ee:
         f6:49:75:58:7a:77:9f:6f:90:7f:19:a8:f1:7e:0e:2e:5e:98:
         26:cd:8d:f9:b2:da:68:54:f3:1d:00:1b:59:76:5a:b6:44:08:
         14:78:8a:8e:c7:df:7a:cb:c0:51:53:d5:17:fb:fc:e2:34:17:
         c5:5c:0b:02:5c:bd:4c:b4:c9:58:88:44:12:8d:72:71:1b:04:
         0c:7c:f9:04:fc:ca:7d:61:24:df:98:57:aa:6d:2e:05:e1:36:
         4b:83:19:23:34:69:76:5f:c3:fe:e4:89:d5:b9:37:1b:06:b8:
         fe:f1:92:bd:fc:a2:2e:3a:f7:e6:e3:81:6b:fc:9d:13:16:fd:
         40:b5:66:33:87:da:cc:76:93:6c:61:34:fa:fd:0f:6b:40:5a:
         11:63:99:fb
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUOLZ1jEZdzXJAXFYcGoachldrw9MwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYxMDA3MTYzNjEzWhcNMjcxMDA2MTY0MTEz
WjAzMTEwLwYDVQQDEyhDRDhFRDAyNUQxNzlDODg4N0E5M0U2MkE2QjkxRDQwMUVD
MTMzREM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYbMTAWz/6Ez
21nz35sMH9mGEIjPUBrqgXtN+akcFH++8MFqhOKHAuOVPyaFahhFBxOcj8qySZDG
3/ZJ+Z/6Jf+kCcTDKe7YKy6CXeqxG5yxCebachnDXZ96ax1dTTmqNkmVfV+HXHHi
ziHL07y7j+UidiVBenZyFE2juoxRnHccR0gthePva79AUN6KXj40wGsgITm+4CgY
Co5qJy1y2FgCFYdZp6lB2AOARDVSdxMKjXpCGbuTd165AezXXIU8ti7oDJhJlGJY
NJ4jvzCRKtxHOwUh7dJ9pOi8n918kA0/G1knoJ6m8ATtoZ9ZDqmIz9gKQxl6f67n
HH35AzAjOwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFM2O0CXReciIepPmKmuR1AHs
Ez3IMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0
MjhlYTliNzI2Ny8wLzMxMzkzOTJlMzIzMzMxMmUzNjM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNTMyMzczMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+dCMA0GCSqGSIb3DQEB
CwUAA4IBAQAKozQHtOzR5s86wU9HtoUjxXmhYwSktiU6nilxJ8vacLwJPFpXvaZH
Wn24h7wieEaP0vfdzgfLFO0+0Jsf+o0oszsCtvmYCaEmyXGnqemHf+eg/GaTG5Ki
anacwQasH29zMlzQHKBzuB6H9u72SXVYenefb5B/Gajxfg4uXpgmzY35stpoVPMd
ABtZdlq2RAgUeIqOx996y8BRU9UX+/ziNBfFXAsCXL1MtMlYiEQSjXJxGwQMfPkE
/Mp9YSTfmFeqbS4F4TZLgxkjNGl2X8P+5InVuTcbBrj+8ZK9/KIuOvfm44Fr/J0T
Fv1AtWYzh9rMdpNsYTT6/Q9rQFoRY5n7
-----END CERTIFICATE-----
Generated at Sun Oct 11 18:55:27 2026 by rpki-client