Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e34392e302f32342d3234203d3e20323134373537.roa
File:                     3136392e3132382e34392e302f32342d3234203d3e20323134373537.roa (raw, json)
Hash identifier:          +qVxWSgzIirPoVSwjXw11nx5abrm5SmIMavDzOyA5Bw=
Subject key identifier:   2F:72:D3:A3:B1:18:C6:61:6A:93:C3:44:B8:18:49:39:5C:6B:84:6A
Certificate issuer:       /CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
Certificate serial:       031B82CEC712504D0F206A88C7D4B8B8563EB69C
Authority key identifier: 75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e34392e302f32342d3234203d3e20323134373537.roa
Signing time:             Wed 01 Jul 2026 13:38:15 +0000
ROA not before:           Wed 01 Jul 2026 13:33:15 +0000
ROA not after:            Wed 30 Jun 2027 13:38:15 +0000
asID:                     214757
IP address blocks:        169.128.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl
                          rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/c415644a-a5a4-4849-aba9-198086fd154d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 22:48:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1b:82:ce:c7:12:50:4d:0f:20:6a:88:c7:d4:b8:b8:56:3e:b6:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74
        Validity
            Not Before: Jul  1 13:33:15 2026 GMT
            Not After : Jun 30 13:38:15 2027 GMT
        Subject: CN=2F72D3A3B118C6616A93C344B81849395C6B846A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:73:59:43:10:c9:1d:31:53:0b:3f:ed:2d:8a:
                    12:70:70:bd:f5:05:d1:24:81:cc:d3:c7:0c:55:3e:
                    a6:e6:87:7d:ed:69:26:85:d2:10:ed:65:9d:4b:bd:
                    62:38:e4:7b:79:0b:36:62:16:8b:4b:aa:d6:d8:82:
                    f5:9c:9c:fa:06:ac:5b:1f:8e:c1:4b:36:ee:7e:74:
                    0c:f1:e3:0b:43:21:6c:22:21:a0:31:b3:f9:33:48:
                    95:22:57:ec:aa:75:db:38:2c:9f:f8:1d:50:b1:ac:
                    67:43:27:e2:8e:c2:5a:9b:c1:0b:1e:9c:39:0a:cd:
                    d9:29:68:9b:39:07:0d:6a:49:57:e3:49:db:c5:c3:
                    22:b9:68:c5:91:d3:48:9c:92:fe:a4:f5:d5:aa:d6:
                    91:b3:e7:31:55:eb:0a:7e:0c:8a:48:9f:1c:55:09:
                    11:ea:5c:f2:b4:36:a0:2b:62:d4:d3:29:7e:92:35:
                    c6:f1:e5:e5:40:18:7d:2d:b2:f0:58:34:b9:e4:d0:
                    62:a5:e9:4a:cc:44:83:6f:5f:31:11:da:6d:21:9a:
                    2a:55:d0:74:35:66:a5:81:a2:60:10:39:92:bc:4e:
                    0f:7d:ad:86:5e:99:3b:71:16:a1:25:5f:ba:0c:a4:
                    2e:54:e9:ed:68:64:56:5c:fc:e8:d9:13:5a:84:0d:
                    44:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:72:D3:A3:B1:18:C6:61:6A:93:C3:44:B8:18:49:39:5C:6B:84:6A
            X509v3 Authority Key Identifier:
                keyid:75:BF:17:67:56:4D:7C:44:C5:BD:39:5F:6A:6A:21:90:D2:DD:D7:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/75BF1767564D7C44C5BD395F6A6A2190D2DDD708.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c415644a-a5a4-4849-aba9-198086fd154d/fecfdfdbdb56d3fbfa261bb287bf0c4185572d0c21b64e1f74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/ca2b12afc42843dbae4b05cf360d952d/0/3136392e3132382e34392e302f32342d3234203d3e20323134373537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.128.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:15:8b:39:cc:21:cd:70:27:29:15:6b:10:1c:41:d1:33:9a:
         80:ce:81:41:52:ca:45:0e:b3:6f:7a:87:0e:d4:8f:23:8a:77:
         2c:e7:a0:bc:7b:20:a3:be:f1:8a:b4:70:53:79:1e:29:eb:2f:
         8f:85:bb:8a:cc:8c:0f:49:84:af:e5:53:79:b9:b8:3c:d8:b3:
         89:ec:5c:15:7d:20:27:30:29:f7:97:45:32:43:a8:5e:66:27:
         26:6a:dd:e2:d8:f6:21:b0:5e:6d:5f:35:64:ff:79:75:c1:7d:
         18:19:34:ce:fb:c3:a2:1b:e7:8e:19:b1:b4:78:e4:4e:d1:b6:
         2d:7b:be:94:8a:78:16:b3:91:19:ac:bd:c0:95:52:1c:65:e6:
         96:55:c7:c9:6d:1a:0c:8b:19:c9:1f:eb:98:4e:46:e1:91:7c:
         01:80:cc:fb:d8:48:a3:90:9d:20:c6:dd:a1:07:b5:0f:8d:76:
         bb:68:2f:ed:4b:20:96:c0:1a:4a:54:1e:c4:f8:71:ce:a1:97:
         58:90:af:14:00:ad:c2:40:e5:e2:88:a0:76:5f:af:2f:8c:56:
         ed:b6:f8:b3:f6:ad:93:1f:42:c0:78:dc:af:b1:32:d1:54:32:
         bf:d3:d2:01:8f:dd:88:5d:56:64:d6:98:8b:99:62:89:c4:73:
         4a:ec:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 04:09:31 2026 by rpki-client