Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e203631313132.roa
File:                     3139322e3130392e3131392e302f32342d3234203d3e203631313132.roa (raw, json)
Hash identifier:          IT3svHbdZLf8SZVjOYVucY7x5YvvTO58j6glkwRM/6E=
Subject key identifier:   A3:CA:CA:32:BD:57:D5:70:A4:36:68:20:6D:08:5E:DC:6E:5F:A0:B9
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       011D6C09E545F91627AC1016B41C1040FC1AB413
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e203631313132.roa
Signing time:             Tue 25 Aug 2026 17:45:28 +0000
ROA not before:           Tue 25 Aug 2026 17:40:28 +0000
ROA not after:            Tue 24 Aug 2027 17:45:28 +0000
asID:                     61112
IP address blocks:        192.109.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Sep 2026 07:13:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:1d:6c:09:e5:45:f9:16:27:ac:10:16:b4:1c:10:40:fc:1a:b4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 25 17:40:28 2026 GMT
            Not After : Aug 24 17:45:28 2027 GMT
        Subject: CN=A3CACA32BD57D570A43668206D085EDC6E5FA0B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5b:d0:83:e4:b7:24:a0:b3:54:d5:ae:11:28:
                    0f:c5:46:3f:8e:72:58:e1:fc:10:5f:bc:c5:59:81:
                    c1:9a:8d:ee:cf:10:d4:82:16:89:32:41:4d:ca:73:
                    66:88:3a:fb:47:c9:19:26:de:30:a5:a7:f3:5c:91:
                    72:f2:92:86:36:89:31:af:68:55:6d:2b:f7:53:9f:
                    3a:ac:d1:94:c8:90:67:e2:2d:23:fb:45:a3:08:11:
                    18:e1:bf:d7:90:38:79:27:44:d2:5d:05:2f:26:f5:
                    5e:86:0d:26:71:58:80:9d:55:a1:8e:bd:8b:35:da:
                    a4:52:b5:26:ad:d3:74:f2:03:f8:2b:f6:d6:d8:15:
                    32:09:bf:68:ae:58:aa:23:b7:1b:17:91:15:6d:81:
                    94:c9:1c:99:e9:a3:14:33:dc:48:9a:c3:15:46:00:
                    4e:0c:c9:3a:d6:d5:45:4f:47:ee:a1:94:6e:ee:28:
                    38:ec:e6:72:3a:69:e7:07:a0:51:ae:f5:c6:3c:44:
                    e8:f0:12:6d:9d:0d:4d:20:7a:31:8a:47:37:b0:e1:
                    0c:fa:d1:1d:d8:93:16:41:b1:73:79:01:dd:97:70:
                    50:bc:c7:78:5d:46:13:53:8f:c6:22:1f:b4:6a:30:
                    35:21:ee:e9:66:9c:a5:b5:d9:91:c9:cc:a6:0a:94:
                    25:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:CA:CA:32:BD:57:D5:70:A4:36:68:20:6D:08:5E:DC:6E:5F:A0:B9
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e203631313132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:0c:db:f9:89:84:a9:c9:82:77:8b:5b:69:82:29:bd:73:9d:
         37:4c:68:37:26:60:7b:ec:b7:40:9d:80:07:ee:8a:60:fd:53:
         13:3b:0f:ef:98:a1:b4:2e:2f:10:ee:32:2a:37:cf:84:47:45:
         9d:4d:dc:e6:23:6f:d1:44:02:e9:e6:5e:8d:ea:65:59:66:1c:
         03:42:98:55:57:1e:2d:8f:b0:bd:d4:3e:76:bd:4c:54:27:69:
         fe:b3:bb:48:93:35:ce:59:44:51:37:95:d8:ea:a8:a6:85:e6:
         aa:31:9a:bf:57:07:17:ff:cf:03:cd:17:38:75:6a:3d:5e:34:
         ee:21:0c:98:48:9b:66:ce:f5:4a:0a:d8:52:b5:af:49:c9:11:
         19:01:cf:87:3f:ef:69:73:62:fa:89:fe:b0:b6:88:f4:a0:f9:
         1c:a6:b3:8c:58:d6:b5:6a:02:32:8a:e7:34:c4:69:be:ce:e3:
         01:e5:5b:96:26:1d:4a:c9:e5:9a:72:b0:18:ae:15:57:61:0e:
         78:01:39:24:52:31:8e:cf:37:4a:e3:0d:87:56:aa:5d:5c:16:
         57:73:24:16:2d:a1:1b:55:ca:06:5a:d7:a9:88:c0:7c:29:1a:
         1c:1d:95:bd:17:c4:68:9f:a8:2d:0a:bc:8b:7a:92:32:74:b7:
         30:54:62:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 08:28:51 2026 by rpki-client