Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e203134363138.roa
File:                     3138352e3137372e32362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          HhbEy8j2NhgNxZophDofEFeFYqC8q7UzuJLG3CSUYoY=
Subject key identifier:   92:50:6D:AA:BD:34:AC:CC:CB:01:F6:B0:FC:53:F2:22:6D:0B:E5:C0
Certificate issuer:       /CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
Certificate serial:       624EB40647E932AD9E38690B37487A9F8EE86308
Authority key identifier: 3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e203134363138.roa
Signing time:             Tue 31 Mar 2026 20:35:54 +0000
ROA not before:           Tue 31 Mar 2026 20:30:54 +0000
ROA not after:            Tue 30 Mar 2027 20:35:54 +0000
asID:                     14618
IP address blocks:        185.177.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl
                          rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/4265131f-f3fe-4bd3-9309-8f048cc23b7e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Apr 2026 23:48:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4e:b4:06:47:e9:32:ad:9e:38:69:0b:37:48:7a:9f:8e:e8:63:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e5538a26947212bb090828bce82d50e44aec8174792eecf0
        Validity
            Not Before: Mar 31 20:30:54 2026 GMT
            Not After : Mar 30 20:35:54 2027 GMT
        Subject: CN=92506DAABD34ACCCCB01F6B0FC53F2226D0BE5C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:b2:20:78:f5:dc:29:ea:c3:9d:bf:1e:19:
                    d9:e5:53:d2:48:bc:27:06:7e:10:d1:07:a0:83:f9:
                    c1:7d:e0:cd:a4:9e:dd:9d:42:14:6a:e5:a9:f1:ac:
                    45:18:19:cf:da:3c:c0:6c:f8:4d:2c:35:4b:cc:2e:
                    e5:b6:0c:b2:86:61:36:6b:9a:1d:60:a0:34:ab:96:
                    4d:f1:b8:57:21:cf:6b:10:35:b0:eb:9a:3e:e5:a2:
                    a0:dd:f7:39:e0:2c:fc:36:16:b0:d3:ab:b0:69:27:
                    e3:2d:87:a3:9b:29:be:1f:36:f7:3e:c7:3d:42:38:
                    50:ac:05:37:26:60:45:db:a6:d8:26:2c:62:2c:72:
                    50:f9:fb:30:9e:98:b6:76:45:aa:70:be:1a:19:c5:
                    ab:db:1b:48:74:63:b7:f8:0e:e0:02:84:aa:94:71:
                    0f:4e:bd:9c:33:8a:45:92:3b:46:69:ef:36:12:00:
                    51:69:b7:3d:24:19:86:be:c2:95:2a:4d:3b:ab:2a:
                    63:a6:7d:d7:8f:df:21:05:8d:33:d3:82:05:57:0f:
                    bc:6c:5e:27:5b:10:87:cc:91:17:ed:cb:af:fe:b6:
                    56:c5:66:4e:63:26:72:98:19:de:28:45:be:0b:78:
                    43:85:25:82:12:cb:e8:ff:50:c6:fc:e1:5e:c8:76:
                    7a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:50:6D:AA:BD:34:AC:CC:CB:01:F6:B0:FC:53:F2:22:6D:0B:E5:C0
            X509v3 Authority Key Identifier:
                keyid:3F:5F:E6:E5:EB:09:3D:53:B1:A1:96:21:2C:DF:21:8D:27:25:F1:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3F5FE6E5EB093D53B1A196212CDF218D2725F110.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4265131f-f3fe-4bd3-9309-8f048cc23b7e/95e5538a26947212bb090828bce82d50e44aec8174792eecf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/d5001fed5b354a989099c47c5733051c/0/3138352e3137372e32362e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.177.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:c7:55:60:52:f2:9c:1e:d0:74:83:a2:07:c5:49:63:3a:
         7b:19:b5:5e:58:36:c4:b0:7f:25:6f:d1:e4:7a:5e:91:45:27:
         0e:4b:66:98:b0:e4:3d:e3:f8:78:e4:c8:66:cc:65:28:26:f1:
         8d:a5:31:d0:91:5d:7a:1d:4a:4f:1f:85:2b:86:1d:70:14:70:
         9e:19:44:59:ab:5d:26:6e:97:de:51:47:a7:72:94:5a:24:a1:
         b0:45:fc:15:7e:36:9c:3c:92:0e:39:61:8f:44:1c:79:1c:6b:
         e0:8a:f0:28:89:35:e8:a9:95:bc:b3:d3:0e:49:4b:fe:65:0a:
         c8:a9:59:f3:85:9e:36:10:36:7d:7e:1d:11:fa:fc:0b:a7:ac:
         43:f5:28:e2:f6:5a:cf:29:67:72:e0:fa:ee:c6:1d:1e:3d:9a:
         56:de:c8:2f:6d:d6:8d:6b:32:ed:cd:16:a7:0d:b1:37:93:23:
         a7:b4:02:58:ac:8a:27:09:45:a8:ef:ac:4f:4e:63:4f:32:c7:
         82:c6:b3:36:98:a2:81:f5:22:c2:0c:9f:3f:f4:c0:1a:99:ad:
         c4:88:9a:d3:74:01:70:33:26:cc:9f:d1:fa:2c:8a:dd:d0:dd:
         1d:8c:06:71:eb:78:04:35:b6:46:fe:02:cd:78:fd:b7:30:cf:
         46:19:1f:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 03:45:48 2026 by rpki-client