Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          oSSpSQbsX1oMK/71OsEh+k5rR3poPYIo+9pI2k5p7B8=
Subject key identifier:   F2:1D:91:28:9C:BB:BB:BB:41:30:F6:05:AB:F1:50:E1:8A:43:C2:C5
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1F9B34D4034E11EB2D0C4E35B71B6AB3BDE77F36
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa
Signing time:             Wed 10 Sep 2025 14:29:45 +0000
ROA not before:           Wed 10 Sep 2025 14:24:45 +0000
ROA not after:            Wed 09 Sep 2026 14:29:45 +0000
asID:                     7018
IP address blocks:        193.149.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:9b:34:d4:03:4e:11:eb:2d:0c:4e:35:b7:1b:6a:b3:bd:e7:7f:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 10 14:24:45 2025 GMT
            Not After : Sep  9 14:29:45 2026 GMT
        Subject: CN=F21D91289CBBBBBB4130F605ABF150E18A43C2C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:cc:fe:01:b6:f7:23:23:7b:ad:eb:6c:8c:f9:
                    9a:7a:91:b4:8f:36:7a:44:97:2e:10:93:c3:c9:f7:
                    3d:ca:d7:d6:46:68:00:99:bd:bd:77:37:3e:79:9f:
                    7a:12:d5:b3:90:c2:a5:d9:dc:51:3e:c5:b0:03:40:
                    a4:0b:43:3e:1c:77:6b:50:4d:0b:f5:45:8f:2f:9c:
                    35:75:74:d7:58:65:1d:19:f1:bc:e2:1b:c9:17:8c:
                    1f:6b:48:a7:5e:81:44:b5:53:b9:16:01:7d:c1:6f:
                    40:e9:d1:99:5f:88:e6:a1:6a:84:b3:b5:b3:9d:91:
                    1c:34:46:45:2a:fc:5e:38:fa:bd:3d:4b:aa:31:9e:
                    8e:c1:53:02:0b:7b:e1:ea:87:08:3d:74:5b:3d:85:
                    62:6a:d3:44:65:2e:1e:2a:c8:9e:22:22:ba:b2:9c:
                    45:5f:37:99:d3:06:b3:f7:93:b4:63:47:f1:3b:c6:
                    78:b1:63:3d:e9:71:81:3d:f0:d1:1d:de:ab:bc:6a:
                    10:67:b2:de:c9:30:c0:27:4f:e4:e3:14:8e:5d:b5:
                    7e:16:e4:3f:88:93:c2:5b:81:bd:e5:1b:3f:75:f8:
                    09:12:06:27:75:fb:93:16:9a:bd:24:46:32:f1:0b:
                    4c:43:35:0b:51:75:d5:bc:0d:bc:82:99:f4:fd:f9:
                    69:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1D:91:28:9C:BB:BB:BB:41:30:F6:05:AB:F1:50:E1:8A:43:C2:C5
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:43:65:74:db:1b:d8:5e:e7:39:d9:cc:76:66:3d:61:46:0f:
         6c:e4:b8:86:f8:7c:83:05:b9:01:d3:50:e8:fa:d6:47:6c:0f:
         b8:e2:11:60:60:a8:31:07:77:c9:c3:3c:b9:0a:91:22:da:86:
         7a:66:f5:51:a3:14:c9:96:ea:ff:34:44:b9:68:6b:3d:d0:b3:
         d8:f9:9f:8b:95:97:79:fb:4f:cf:03:cc:2c:38:68:42:f5:2e:
         e1:7a:a6:12:3c:da:89:a0:35:ac:69:be:d0:ec:a6:a4:1b:56:
         31:07:e2:a6:d5:12:9d:63:3f:37:f3:d2:90:7c:a1:6f:05:41:
         46:cf:a4:97:c9:74:46:e4:2c:4a:b2:28:13:57:45:d5:bb:6a:
         2a:47:01:9c:a2:76:a5:0a:0a:2f:29:d9:1f:bf:40:a3:66:a3:
         40:97:e5:ea:b1:d3:8a:44:56:9f:40:42:c1:03:d9:27:e9:15:
         19:55:5f:a7:59:fa:ac:65:0e:06:94:5b:89:3f:3d:74:4c:6e:
         01:7f:42:ac:83:27:8b:7e:a5:55:2e:2c:3c:8e:5a:2f:21:08:
         3e:f0:00:09:c0:8a:4b:73:4a:ca:21:e4:dd:df:44:bc:1e:a6:
         9c:06:f7:7a:7c:62:d7:1b:01:15:5d:a6:e2:fa:d1:05:b7:69:
         28:53:fd:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:06:37 2025 by rpki-client