Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa
File:                     3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa (raw, json)
Hash identifier:          PU0brHaZo6dZvqYpMXxCMGtxk8cTZlRVOZu/hODh19Y=
Subject key identifier:   BD:71:27:44:3B:07:28:C4:73:64:1A:E3:B2:EE:B6:4F:31:2D:8A:87
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       4A5DE468AEEFA49DD6070F7430316B8D4B376B6C
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa
Signing time:             Fri 28 Aug 2026 11:36:20 +0000
ROA not before:           Fri 28 Aug 2026 11:31:20 +0000
ROA not after:            Fri 27 Aug 2027 11:36:20 +0000
asID:                     18229
IP address blocks:        193.186.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Sep 2026 11:23:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:5d:e4:68:ae:ef:a4:9d:d6:07:0f:74:30:31:6b:8d:4b:37:6b:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 28 11:31:20 2026 GMT
            Not After : Aug 27 11:36:20 2027 GMT
        Subject: CN=BD7127443B0728C473641AE3B2EEB64F312D8A87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:14:e3:b8:56:bb:a3:fd:c9:76:d8:35:0b:62:
                    db:a2:e9:a0:fe:ba:78:9d:53:cd:e6:35:25:3d:ed:
                    24:a5:14:8d:1f:6f:19:f3:a2:88:e2:31:c4:d0:ac:
                    7d:04:4d:55:e7:ed:35:8a:2b:a2:fb:18:a3:88:f9:
                    ae:96:de:2d:97:52:77:61:fc:4a:f4:73:5a:bb:7e:
                    2a:87:29:88:e8:14:01:ec:36:51:e1:51:73:3a:0d:
                    7d:64:d8:62:95:7c:e1:a5:b8:75:28:eb:32:6d:23:
                    3f:02:38:b7:23:b0:07:1a:49:f0:e4:43:d2:cb:02:
                    92:3e:c4:a8:01:54:64:88:13:1a:bb:5b:54:05:4f:
                    78:3d:45:4b:12:ae:98:41:73:d6:98:6d:40:4e:01:
                    dd:9b:fb:08:a6:35:cf:5b:8f:1c:0b:dd:6e:3b:8e:
                    a0:c2:e6:27:c4:08:ca:fa:a2:7f:d5:03:6b:bb:2b:
                    1c:cb:a1:4f:02:b0:1c:b9:fd:b5:5b:2e:a0:7c:46:
                    63:32:0f:fd:cb:8e:27:d1:33:2b:2c:21:73:e3:4b:
                    47:fa:26:e4:9d:d0:85:2f:b7:23:06:29:b9:9e:7e:
                    ba:b1:1f:e1:20:3f:9b:5a:50:c5:f7:0d:6f:69:cd:
                    8e:18:38:76:55:03:0c:18:6c:4c:69:ae:d6:53:d1:
                    2b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:71:27:44:3B:07:28:C4:73:64:1A:E3:B2:EE:B6:4F:31:2D:8A:87
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:53:1c:c5:2a:d7:9a:72:87:2b:5f:bd:b1:8b:17:fe:59:a9:
         21:c7:db:ed:87:51:4b:91:38:84:ec:80:76:29:59:a9:a8:c4:
         19:57:92:c0:9d:1b:df:8d:e5:54:2b:e4:12:0e:59:e3:38:97:
         b6:32:6b:b7:0d:e0:40:07:5d:80:9c:3c:9d:0c:b9:7f:ba:be:
         2f:21:85:20:87:2b:7b:ce:6c:15:22:aa:92:e7:62:b4:8f:a4:
         7d:3e:2f:02:1d:d0:54:e8:f0:b8:49:ae:e2:79:b0:61:8e:8d:
         f4:a8:32:27:ab:72:47:a2:6e:95:65:5d:77:e3:7f:ef:2c:60:
         18:9e:7c:ac:42:40:d6:9e:d5:d6:a2:98:57:62:d8:88:4e:4f:
         d7:19:2b:ce:d6:5a:1f:60:9b:41:c1:14:38:90:21:01:a2:bd:
         01:94:42:53:c4:30:82:8b:b3:86:b3:31:d1:5e:f2:82:64:6f:
         2e:5c:2e:94:ba:23:bd:c9:91:70:82:01:0b:f3:1e:b9:61:af:
         3f:20:c6:b6:8e:72:5d:4e:c7:cf:57:77:6d:98:73:44:75:9a:
         aa:19:41:1e:ed:0b:ee:57:66:fe:06:8b:12:2d:9e:3d:18:9e:
         27:6f:62:15:1d:10:16:84:cc:b6:64:90:a6:18:94:78:14:6d:
         11:53:35:4b
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUSl3kaK7vpJ3WBw90MDFrjUs3a2wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwODI4MTEzMTIwWhcNMjcwODI3MTEzNjIw
WjAzMTEwLwYDVQQDEyhCRDcxMjc0NDNCMDcyOEM0NzM2NDFBRTNCMkVFQjY0RjMx
MkQ4QTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRTjuFa7o/3J
dtg1C2Lboumg/rp4nVPN5jUlPe0kpRSNH28Z86KI4jHE0Kx9BE1V5+01iiui+xij
iPmult4tl1J3YfxK9HNau34qhymI6BQB7DZR4VFzOg19ZNhilXzhpbh1KOsybSM/
Aji3I7AHGknw5EPSywKSPsSoAVRkiBMau1tUBU94PUVLEq6YQXPWmG1ATgHdm/sI
pjXPW48cC91uO46gwuYnxAjK+qJ/1QNruyscy6FPArAcuf21Wy6gfEZjMg/9y44n
0TMrLCFz40tH+ibkndCFL7cjBim5nn66sR/hID+bWlDF9w1vac2OGDh2VQMMGGxM
aa7WU9ErEwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFL1xJ0Q7ByjEc2Qa47Lutk8x
LYqHMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzEzODM2MmUzMjM1MzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTM4MzIzMjM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbr9MA0GCSqGSIb3DQEB
CwUAA4IBAQA6UxzFKteacocrX72xixf+Wakhx9vth1FLkTiE7IB2KVmpqMQZV5LA
nRvfjeVUK+QSDlnjOJe2Mmu3DeBAB12AnDydDLl/ur4vIYUghyt7zmwVIqqS52K0
j6R9Pi8CHdBU6PC4Sa7iebBhjo30qDInq3JHom6VZV1343/vLGAYnnysQkDWntXW
ophXYtiITk/XGSvO1lofYJtBwRQ4kCEBor0BlEJTxDCCi7OGszHRXvKCZG8uXC6U
uiO9yZFwggEL8x65Ya8/IMa2jnJdTsfPV3dtmHNEdZqqGUEe7QvuV2b+BosSLZ49
GJ4nb2IVHRAWhMy2ZJCmGJR4FG0RUzVL
-----END CERTIFICATE-----
Generated at Fri Sep 11 16:29:37 2026 by rpki-client