Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa
File:                     3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa (raw, json)
Hash identifier:          3UBeCnK9Mwn71IfyPk+X6oqwN8SvFqGXVx58WCyHqUE=
Subject key identifier:   D9:4E:31:D7:9F:FD:0D:35:86:5E:BD:D9:5E:A9:6E:C5:3E:AC:13:9B
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7C2F3A850202A6AD26EE4C55A16E3158329CE920
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa
Signing time:             Fri 28 Aug 2026 11:36:20 +0000
ROA not before:           Fri 28 Aug 2026 11:31:20 +0000
ROA not after:            Fri 27 Aug 2027 11:36:20 +0000
asID:                     132244
IP address blocks:        193.186.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 13:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2f:3a:85:02:02:a6:ad:26:ee:4c:55:a1:6e:31:58:32:9c:e9:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 28 11:31:20 2026 GMT
            Not After : Aug 27 11:36:20 2027 GMT
        Subject: CN=D94E31D79FFD0D35865EBDD95EA96EC53EAC139B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cb:76:57:58:ac:73:98:63:d3:45:72:f3:93:
                    6b:26:6e:3a:10:25:86:bb:b1:39:37:f2:c1:fd:22:
                    3a:05:45:ee:17:33:e0:c4:93:19:cf:dd:29:58:69:
                    aa:d3:1c:0c:22:39:93:7a:56:bc:19:cc:69:0f:b2:
                    b8:18:4a:10:0e:3f:ec:59:71:ea:04:68:90:1f:c3:
                    b7:2e:8e:76:16:80:5b:c3:4b:3c:16:56:07:1f:e5:
                    24:d8:0e:f9:1d:1f:35:86:a6:18:9f:a5:6f:37:ff:
                    c4:5b:ba:2c:e5:54:a4:04:6c:7f:3f:57:51:4d:32:
                    45:ab:61:9e:d3:db:77:fb:7c:0a:4f:dc:0f:12:98:
                    89:f7:60:79:d6:94:d7:ba:4c:77:0b:15:ea:64:82:
                    82:5e:bc:3f:f9:bb:a1:37:d2:96:c9:d2:ab:d2:81:
                    f3:f2:e9:ee:12:8f:34:d5:22:6a:50:42:18:ce:e4:
                    83:2b:61:76:37:a0:14:a8:47:0d:32:43:39:ef:e2:
                    54:f0:59:a7:01:ca:2a:8e:16:50:e5:01:f2:9a:e4:
                    22:e3:8e:04:02:8f:05:bc:80:7c:ce:26:0b:bb:8a:
                    42:a6:c6:ac:1c:67:92:60:13:12:d1:c1:c1:d7:f8:
                    67:99:af:f5:5d:6d:b7:ac:4f:c4:0a:33:b0:9a:fc:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4E:31:D7:9F:FD:0D:35:86:5E:BD:D9:5E:A9:6E:C5:3E:AC:13:9B
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e20313332323434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:b5:87:d6:a2:61:8c:84:b3:40:4e:94:07:e7:d6:54:63:3f:
         2b:87:1c:99:73:50:2b:d1:12:40:46:75:8b:36:e1:46:b5:41:
         e3:7c:0e:74:f4:e2:a9:ac:1e:95:64:af:e0:6c:90:3d:96:ce:
         33:30:98:05:71:4c:32:0a:41:25:7f:c6:70:ed:78:7b:51:49:
         93:27:f6:14:d4:84:18:46:b9:6e:a3:4e:da:9e:e0:e7:75:b3:
         0d:0a:f2:7b:a7:c8:40:b5:af:28:60:48:04:49:0a:44:70:aa:
         0a:80:c9:3f:0b:0d:01:fd:12:67:a6:39:88:70:10:10:79:ed:
         32:f0:2f:a5:3e:e0:50:0d:06:e9:30:26:b8:d4:1f:88:c0:07:
         67:92:b8:1b:27:fa:9c:69:c1:64:2e:fb:d6:c2:99:22:5f:9e:
         14:09:fe:ca:3a:9c:00:2c:64:f9:aa:48:83:96:80:f4:ab:47:
         4e:2d:27:20:ae:4e:8c:0f:90:83:20:e4:61:22:9d:d9:94:f9:
         21:26:04:4e:f6:5d:97:02:1e:24:9c:51:d2:29:10:7a:40:fb:
         b0:3a:1c:6e:fa:92:2e:43:7a:34:6c:e7:3b:d9:65:41:39:e7:
         f4:8b:3c:9e:f0:f5:6f:c1:bf:a2:96:be:38:e1:ec:50:88:c0:
         a6:5f:55:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:36:27 2026 by rpki-client