Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e20313437323038.roa
File:                     3139322e3130392e3131392e302f32342d3234203d3e20313437323038.roa (raw, json)
Hash identifier:          Rv3OgaHSlTnq3Uii7u3D6NUFf04sSXQ9fzY6nNbHiWY=
Subject key identifier:   B8:EE:BB:41:57:3E:D8:40:61:30:A1:98:C6:51:E7:32:A9:70:F1:5A
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5828ADE877A46F07214CA42B726575A25692BCF5
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e20313437323038.roa
Signing time:             Sun 19 Jul 2026 11:45:33 +0000
ROA not before:           Sun 19 Jul 2026 11:40:33 +0000
ROA not after:            Sun 18 Jul 2027 11:45:33 +0000
asID:                     147208
IP address blocks:        192.109.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:28:ad:e8:77:a4:6f:07:21:4c:a4:2b:72:65:75:a2:56:92:bc:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jul 19 11:40:33 2026 GMT
            Not After : Jul 18 11:45:33 2027 GMT
        Subject: CN=B8EEBB41573ED8406130A198C651E732A970F15A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:58:47:a9:2f:d7:8a:6b:9e:88:1e:42:58:e3:
                    4b:29:f1:fa:31:f0:e4:56:57:26:b7:e7:d2:a6:1f:
                    07:7d:e3:5b:b7:f3:45:c8:2d:60:84:70:1c:eb:dd:
                    32:d5:dc:d8:18:78:61:a1:0f:17:1b:41:2a:3b:28:
                    cf:dd:f7:7b:21:d2:4c:9c:7d:2c:0d:6f:01:b8:86:
                    a2:7a:81:26:c7:07:6d:28:68:d9:b5:6f:e2:5d:fc:
                    9d:ab:50:95:7a:32:48:88:4d:94:ac:e8:15:41:b6:
                    8b:6b:6d:44:62:08:69:65:17:e6:4c:04:0c:aa:00:
                    03:69:bb:fa:82:91:cc:c8:12:57:a8:d4:23:7d:9d:
                    10:53:a4:c6:cc:09:1d:b6:87:ff:1f:09:68:71:7c:
                    47:3e:0c:85:b0:a8:f0:3a:b1:37:00:43:58:94:62:
                    78:98:a3:91:6c:0b:f2:8f:61:77:78:7b:f4:40:b7:
                    e2:26:f6:fb:71:ed:6e:d6:37:df:21:bd:08:7f:04:
                    27:78:68:00:b0:53:7f:a7:bb:03:d7:9e:9e:0a:bb:
                    68:1f:b1:0f:10:ec:40:80:d0:b9:07:5d:70:6c:d7:
                    73:17:7d:e0:80:7f:57:d3:da:13:17:c5:61:2c:ad:
                    25:d4:12:f1:cb:9e:7c:92:d9:32:a0:a1:d8:4d:dd:
                    dd:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:EE:BB:41:57:3E:D8:40:61:30:A1:98:C6:51:E7:32:A9:70:F1:5A
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e20313437323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:c8:66:79:80:eb:f5:a3:28:ad:e2:90:1f:39:c0:88:6a:51:
         82:17:6b:da:c1:1d:24:0c:6d:12:85:24:f6:da:34:16:20:31:
         cc:21:49:9a:cd:ee:97:b9:6a:aa:29:78:97:e5:36:38:d9:b0:
         f3:19:41:c3:11:c6:2e:1c:db:d3:5a:1f:e1:78:83:b8:a8:09:
         1d:27:2a:ba:cd:c1:c9:94:88:23:6f:5a:c6:09:a8:ea:8f:62:
         85:d8:d3:4d:cb:dc:b5:58:69:7e:cc:98:14:74:3f:f5:0e:80:
         f9:a5:04:d2:43:67:36:ea:aa:97:94:6a:06:f4:a8:eb:5e:0e:
         61:89:3b:bc:24:89:6b:b8:f8:6c:d1:46:0b:53:84:d9:de:e6:
         92:4c:de:73:ec:5c:1f:e8:01:05:07:0f:d6:80:73:03:76:98:
         62:a9:91:2e:34:f2:88:00:fa:06:f2:f5:d7:7a:02:5b:b9:54:
         f3:d3:57:e1:62:6a:e3:6d:45:4f:6c:56:4c:04:ad:cc:2a:be:
         40:5f:97:ef:16:5d:1f:17:26:d7:45:64:95:01:db:a8:ce:41:
         42:c4:f6:fc:b6:0f:31:84:45:1d:fd:45:12:0a:bf:84:9f:29:
         ca:89:41:6a:2f:93:db:26:53:e1:e3:f6:dc:97:94:9f:77:7c:
         15:b2:ed:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:00:37 2026 by rpki-client