Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          L1rBZmaVzhRrhweVr+8KD3a/TrUa5GcSev6HGpAUYAg=
Subject key identifier:   B3:C7:48:C6:56:68:62:C3:57:9D:E1:63:BB:58:F0:05:E7:D3:07:10
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       011377383A436BF52900D626849C9E9C6F3173B1
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 12 Aug 2026 14:36:19 +0000
ROA not before:           Wed 12 Aug 2026 14:31:19 +0000
ROA not after:            Wed 11 Aug 2027 14:36:19 +0000
asID:                     7018
IP address blocks:        193.149.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 17:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:13:77:38:3a:43:6b:f5:29:00:d6:26:84:9c:9e:9c:6f:31:73:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 12 14:31:19 2026 GMT
            Not After : Aug 11 14:36:19 2027 GMT
        Subject: CN=B3C748C6566862C3579DE163BB58F005E7D30710
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5e:e2:75:7c:b0:4a:87:8c:b4:62:cd:2b:10:
                    41:e2:1f:da:9f:cf:b3:30:ef:9f:7a:9c:37:48:e5:
                    8f:77:fc:42:56:d9:65:e1:19:cd:c5:05:de:43:01:
                    74:8e:57:d3:3b:ad:ee:ff:10:54:c0:99:98:fb:8d:
                    62:99:4c:e4:ff:e3:77:fb:e8:7d:7f:91:30:14:35:
                    5e:37:94:e5:9c:9c:40:ed:d0:71:e9:57:1e:78:bf:
                    a1:34:6b:1d:b4:ed:f7:e3:c2:2c:71:b3:ae:81:5c:
                    a4:5f:39:cd:35:c2:38:fb:13:d8:56:ed:5d:cc:53:
                    f5:d0:24:fa:a7:39:db:d8:e2:f4:40:48:68:a2:5f:
                    ed:2d:1a:97:e3:78:88:0f:86:7f:4e:1b:b9:b0:e2:
                    d1:57:82:c3:75:f4:54:56:0d:ba:f6:57:ff:ff:a1:
                    97:f8:ed:17:8b:ce:51:75:2f:40:4a:1c:d3:d1:7e:
                    36:75:9c:12:20:c7:16:af:e4:53:72:f1:56:7c:22:
                    57:04:81:ce:72:5d:5f:11:2c:9a:5b:f6:ef:97:c8:
                    ad:7a:1c:cf:d8:06:f5:a4:04:11:f9:e9:fb:b8:99:
                    7e:57:aa:63:28:76:1b:4d:e2:ea:ab:f6:b8:8e:e0:
                    09:9f:1f:8e:86:0c:f4:7a:58:5c:12:bd:c6:af:d6:
                    a5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:C7:48:C6:56:68:62:C3:57:9D:E1:63:BB:58:F0:05:E7:D3:07:10
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:53:50:cf:52:5a:4c:bd:66:89:7c:96:1f:a8:00:a7:6c:07:
         6a:aa:e6:2b:57:e3:54:52:5b:5d:b7:48:f0:1d:7b:37:31:05:
         d0:b1:6c:d6:e7:00:f9:f0:db:e4:39:d5:94:5d:8c:45:97:a7:
         1d:6e:1a:e3:8f:f8:4e:36:46:9c:23:10:bd:0b:0b:d4:ed:3f:
         c7:2b:f3:5c:41:a6:c7:4f:51:6f:3b:56:19:b5:61:99:73:b0:
         02:82:7b:a6:10:ee:3c:ec:26:31:b1:fa:1c:94:5f:60:ef:36:
         d2:89:64:fb:35:94:28:e7:27:8e:54:33:95:d3:58:cc:2b:4f:
         84:6a:b7:26:de:21:ce:bb:a9:8b:ec:3f:09:9f:27:74:95:39:
         89:cf:90:04:d6:55:14:89:86:71:92:f5:83:9e:1f:d7:06:ba:
         21:3e:c2:37:cf:93:df:a5:c3:fc:a8:ef:c2:f3:9f:f7:41:bc:
         f4:a2:72:e5:38:74:e4:ce:b2:8a:40:78:89:0e:65:b4:52:f4:
         d6:04:49:ba:de:45:e3:7e:99:8d:cc:92:c7:07:91:6b:c8:cc:
         b6:b8:53:3b:65:b3:c0:fb:c0:f8:69:84:86:cd:34:26:0e:b5:
         7b:2d:3a:15:09:4c:09:34:19:77:fd:24:a2:1e:64:59:bd:31:
         2f:be:f4:76
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUARN3ODpDa/UpANYmhJyenG8xc7EwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwODEyMTQzMTE5WhcNMjcwODExMTQzNjE5
WjAzMTEwLwYDVQQDEyhCM0M3NDhDNjU2Njg2MkMzNTc5REUxNjNCQjU4RjAwNUU3
RDMwNzEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw17idXywSoeM
tGLNKxBB4h/an8+zMO+fepw3SOWPd/xCVtll4RnNxQXeQwF0jlfTO63u/xBUwJmY
+41imUzk/+N3++h9f5EwFDVeN5TlnJxA7dBx6VceeL+hNGsdtO3348IscbOugVyk
XznNNcI4+xPYVu1dzFP10CT6pznb2OL0QEhool/tLRqX43iID4Z/Thu5sOLRV4LD
dfRUVg269lf//6GX+O0Xi85RdS9AShzT0X42dZwSIMcWr+RTcvFWfCJXBIHOcl1f
ESyaW/bvl8itehzP2Ab1pAQR+en7uJl+V6pjKHYbTeLqq/a4juAJnx+Ohgz0elhc
Er3Gr9al/wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFLPHSMZWaGLDV53hY7tY8AXn
0wcQMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzEzNDM5MmUzMjMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNzMwMzEzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGV4TANBgkqhkiG9w0BAQsF
AAOCAQEACFNQz1JaTL1miXyWH6gAp2wHaqrmK1fjVFJbXbdI8B17NzEF0LFs1ucA
+fDb5DnVlF2MRZenHW4a44/4TjZGnCMQvQsL1O0/xyvzXEGmx09RbztWGbVhmXOw
AoJ7phDuPOwmMbH6HJRfYO820olk+zWUKOcnjlQzldNYzCtPhGq3Jt4hzrupi+w/
CZ8ndJU5ic+QBNZVFImGcZL1g54f1wa6IT7CN8+T36XD/KjvwvOf90G89KJy5Th0
5M6yikB4iQ5ltFL01gRJut5F436ZjcySxweRa8jMtrhTO2WzwPvA+GmEhs00Jg61
ey06FQlMCTQZd/0koh5kWb0xL770dg==
-----END CERTIFICATE-----
Generated at Tue Sep 1 03:42:05 2026 by rpki-client