Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa
File:                     3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa (raw, json)
Hash identifier:          ioSeu3E4D4gkz/Yn/7xMTyi4DtfNzex7TSMpJdFUzfk=
Subject key identifier:   D3:C5:F0:D4:D5:FD:09:C6:44:CE:94:78:82:AF:5F:DD:D4:2B:1F:13
Certificate issuer:       /CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
Certificate serial:       639BFC3B972C0C79668EA0777131688EE850791D
Authority key identifier: 9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa
Signing time:             Wed 17 Jun 2026 09:32:57 +0000
ROA not before:           Wed 17 Jun 2026 09:27:57 +0000
ROA not after:            Wed 16 Jun 2027 09:32:57 +0000
asID:                     393577
IP address blocks:        167.253.78.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl
                          rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:26:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9b:fc:3b:97:2c:0c:79:66:8e:a0:77:71:31:68:8e:e8:50:79:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323
        Validity
            Not Before: Jun 17 09:27:57 2026 GMT
            Not After : Jun 16 09:32:57 2027 GMT
        Subject: CN=D3C5F0D4D5FD09C644CE947882AF5FDDD42B1F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d5:ab:5f:5d:40:0e:12:4f:66:38:1f:84:85:
                    66:61:8b:bb:65:89:c1:88:86:bb:15:f4:b3:67:a5:
                    4b:a6:42:86:bb:6e:c5:a2:48:90:1c:ab:a6:c3:7d:
                    0d:fb:c1:6a:b8:18:e2:f5:cb:9c:17:d8:17:36:12:
                    79:b4:44:fe:db:1d:c7:14:a5:00:0b:52:c0:e4:b7:
                    3d:5c:e4:11:c0:0b:99:21:2e:69:8c:e5:ba:69:e8:
                    c1:08:70:ad:68:80:eb:0c:15:cb:3a:fd:10:37:f4:
                    e0:be:19:b6:d6:03:78:6c:cd:ad:f9:bf:fd:8e:db:
                    53:ad:48:03:39:55:0e:b2:f1:66:af:89:eb:e1:b7:
                    e5:cb:6c:36:3f:ec:38:9e:54:33:9c:35:64:77:d4:
                    e7:80:1e:c3:17:55:11:96:d4:00:65:9d:23:e8:38:
                    cd:83:29:f6:de:c2:a9:42:07:fe:7d:a5:6b:0a:6c:
                    31:7c:6a:34:f8:e9:bd:71:58:5a:fd:34:59:d5:bb:
                    59:37:2b:80:d3:54:bd:34:78:53:1e:fc:7f:ac:53:
                    85:d9:80:26:8a:83:84:41:51:98:93:16:f0:d4:14:
                    d9:e7:d4:33:1d:8c:17:73:e3:1b:ab:d7:0a:2a:2c:
                    c3:23:02:97:4e:c9:8d:81:fc:a0:b6:c4:b1:69:29:
                    a6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:C5:F0:D4:D5:FD:09:C6:44:CE:94:78:82:AF:5F:DD:D4:2B:1F:13
            X509v3 Authority Key Identifier:
                keyid:9C:94:AA:A9:AE:FF:B5:82:9D:3F:7E:80:33:9F:4A:33:EC:AC:54:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/9C94AAA9AEFFB5829D3F7E80339F4A33ECAC5493.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/787ebbf9-1a0e-4410-81a0-a4a02a27fa2b/0735111c25f42b36bf613562df0f3ba9f5ed4d39cc91c9b323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/9a68964f5ff640ebad100deea7c9ba46/0/3136372e3235332e37382e302f32342d3332203d3e20333933353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:4c:aa:39:45:e9:ab:d7:bc:85:f8:2c:b7:c5:02:b3:bd:8c:
         ee:11:b7:b4:06:f6:3f:5a:28:96:d0:96:ba:39:a8:c0:07:4c:
         57:be:cd:ac:6c:99:a2:3f:44:49:9b:cd:37:48:0a:95:cc:5c:
         88:5e:e4:6a:c0:b3:e6:ad:07:82:ab:d5:f6:17:1e:b7:23:82:
         71:66:28:6b:53:e6:41:af:21:38:ce:8b:5a:00:45:68:a8:5d:
         da:0f:62:82:9b:46:c6:3d:7a:44:90:fc:70:2d:43:c1:34:45:
         86:97:72:58:1d:bd:7a:41:d3:05:46:2a:39:09:ba:b9:74:90:
         aa:6b:04:70:af:44:09:4a:2d:ae:ff:b8:ba:df:1c:ae:da:8f:
         88:c9:38:f2:8f:67:e5:55:40:1e:5f:5b:9b:0a:9d:35:4a:66:
         31:4e:c7:9a:71:21:f4:f8:42:a8:99:1b:82:e2:1a:0c:be:e3:
         de:99:1a:89:18:24:19:21:d6:2a:74:19:ba:bb:aa:e1:6e:69:
         5b:5f:98:d1:dc:bd:7b:4d:6a:fa:18:40:5d:01:d8:64:d3:62:
         7e:31:38:ce:d1:48:04:39:ab:cd:1d:2c:75:5d:45:6b:bf:c2:
         ad:90:c2:98:22:77:96:18:59:50:e1:e1:94:5c:05:ad:99:98:
         7a:ec:aa:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:57 2026 by rpki-client