Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303239.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          rjFfhxZZUrxmKxjb5az1ESSgjGx8CtSUpcurPxatt4k=
Subject key identifier:   46:26:71:58:45:81:F7:5C:9D:66:80:46:9A:1F:B9:3E:76:F6:79:E0
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       73D343C5AB1AC51721A678E96ADC652442F26274
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303239.roa
Signing time:             Mon 12 Oct 2026 23:36:20 +0000
ROA not before:           Mon 12 Oct 2026 23:31:20 +0000
ROA not after:            Mon 11 Oct 2027 23:36:20 +0000
asID:                     7029
IP address blocks:        193.149.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 18 Oct 2026 15:21:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:d3:43:c5:ab:1a:c5:17:21:a6:78:e9:6a:dc:65:24:42:f2:62:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 12 23:31:20 2026 GMT
            Not After : Oct 11 23:36:20 2027 GMT
        Subject: CN=462671584581F75C9D6680469A1FB93E76F679E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ce:25:e7:ec:4e:24:0b:a8:73:ed:85:93:be:
                    73:df:33:e3:49:51:d2:a2:6b:2d:da:cd:f4:77:65:
                    d8:a6:ca:e0:80:e9:0a:a4:fc:be:b1:7c:85:c6:3d:
                    40:b8:5d:97:ec:d8:cf:a6:59:dc:2e:a4:33:82:ab:
                    02:cc:92:9d:86:fe:88:03:fa:6b:e3:c4:64:63:e7:
                    fa:52:69:be:45:57:73:72:38:20:36:07:90:a0:cf:
                    a9:93:da:e9:4d:c2:20:66:c0:a6:08:f3:b0:c3:e2:
                    91:c0:cf:86:05:07:56:02:b2:82:9f:d2:3a:bc:fb:
                    d0:43:08:99:76:e8:81:6c:85:c5:40:77:c3:a9:ab:
                    a5:34:c7:b9:70:f5:57:05:c7:07:cd:bb:96:b2:22:
                    e0:dd:66:bd:bb:ea:8d:86:f7:b9:4a:cf:ef:f1:1f:
                    8e:0d:2d:3b:31:07:9b:59:48:e4:a1:7d:4d:79:a1:
                    52:aa:14:d3:4e:16:91:e9:b2:e3:b6:58:11:e5:8d:
                    1b:88:93:79:11:8a:d1:63:ba:99:ce:a5:29:47:df:
                    db:22:4d:b2:0a:4b:ec:c3:99:dd:cf:15:9f:99:58:
                    59:d2:f9:b1:c5:47:74:59:03:a7:9f:e0:be:04:25:
                    a6:6f:49:68:06:0a:17:b0:c5:b9:da:b9:7c:dc:86:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:26:71:58:45:81:F7:5C:9D:66:80:46:9A:1F:B9:3E:76:F6:79:E0
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:8a:04:22:c6:47:63:d1:d5:9a:03:47:17:c1:3d:e3:3a:f3:
         dc:a8:43:50:5c:bd:47:66:46:36:eb:f1:94:13:c7:41:4c:c1:
         71:22:7c:be:3e:91:c6:b3:fb:cf:6d:b9:cd:32:20:32:3d:22:
         80:07:15:9a:bc:7a:44:7e:19:71:2b:c0:4f:ea:0d:cd:7b:c2:
         a7:9c:ce:f8:40:11:60:32:0e:82:e6:be:32:44:89:f4:b8:d9:
         c0:d0:03:49:63:17:70:10:58:a8:09:db:30:77:29:c3:79:bd:
         86:14:4b:3c:b2:d4:46:f3:d0:c9:6c:bb:96:25:ac:6f:2f:1a:
         5c:b6:e3:55:3e:f6:06:a1:78:bf:43:99:25:ec:76:0a:1d:e4:
         25:af:52:c2:cc:29:94:56:cc:a4:72:16:65:b6:ef:c2:72:f8:
         3d:0a:d2:3f:13:f0:e1:78:24:a5:5c:cf:a7:a1:de:7d:8c:84:
         9c:0d:38:78:b6:a8:eb:a6:d2:0d:d4:71:bd:d3:b6:15:4d:e4:
         ef:dd:c6:63:87:42:67:b6:1b:6f:ce:76:e7:91:2b:82:1a:60:
         ba:58:2a:e9:98:65:48:fe:de:b5:9b:7e:24:85:a9:39:f6:46:
         b0:08:b4:f6:83:1d:16:f4:02:8d:c6:b7:8b:2b:92:5b:aa:c3:
         1b:c3:3e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 09:12:54 2026 by rpki-client