Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e20323139333933.roa
File:                     3139332e3138372e312e302f32342d3234203d3e20323139333933.roa (raw, json)
Hash identifier:          UjQ3IPbbeRfcjCenEcc/IHq+22p5zSjNxLCo525cHng=
Subject key identifier:   0D:99:53:18:C9:7A:5A:1E:83:8C:C5:9F:08:D3:2C:A8:F8:C0:47:E1
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       03021CD2BABE7047F60897F316DBEFBE190B952D
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e20323139333933.roa
Signing time:             Mon 31 Aug 2026 15:50:28 +0000
ROA not before:           Mon 31 Aug 2026 15:45:28 +0000
ROA not after:            Mon 30 Aug 2027 15:50:28 +0000
asID:                     219393
IP address blocks:        193.187.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 13:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:02:1c:d2:ba:be:70:47:f6:08:97:f3:16:db:ef:be:19:0b:95:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 31 15:45:28 2026 GMT
            Not After : Aug 30 15:50:28 2027 GMT
        Subject: CN=0D995318C97A5A1E838CC59F08D32CA8F8C047E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5a:16:4a:4f:f5:08:a3:b0:a4:27:65:19:02:
                    73:83:3f:17:76:2d:ec:92:1e:41:16:3b:b4:9d:28:
                    e4:48:1b:dc:d4:9f:a4:bf:35:56:a2:7d:60:53:42:
                    d6:7a:6b:d8:e0:02:6d:9b:0d:c4:81:c5:bd:e7:42:
                    09:cc:50:be:27:b4:2f:3a:0f:54:d6:0f:a7:fc:d1:
                    f3:70:ac:1a:d3:eb:21:70:ac:28:ea:75:ff:75:00:
                    d4:ad:b5:df:f7:13:b0:5e:9a:f3:dd:34:5a:1f:26:
                    64:3c:0a:33:61:47:08:71:e9:02:d7:95:9f:00:9c:
                    1c:00:47:18:69:27:64:62:42:34:02:cf:21:ab:5f:
                    f1:36:90:2a:39:ff:3e:1d:e7:b1:0e:e2:31:b0:4e:
                    2a:b7:94:9b:af:07:a1:da:03:0d:4e:76:66:91:76:
                    51:d6:d8:b6:a1:46:95:28:a6:d7:ba:8f:bb:ad:0e:
                    aa:99:b1:a3:a1:7c:c1:b7:9b:94:27:d5:0e:3f:1c:
                    36:db:2a:45:47:c3:5c:78:69:f7:af:96:90:4a:d1:
                    5e:61:a2:43:99:63:7f:d6:89:c6:9e:66:ef:e9:21:
                    a5:e6:e4:ec:41:ed:eb:c7:6c:a3:8a:f6:f0:ba:a8:
                    79:58:4a:16:3a:e5:48:ac:df:c8:65:6a:87:68:b3:
                    06:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:99:53:18:C9:7A:5A:1E:83:8C:C5:9F:08:D3:2C:A8:F8:C0:47:E1
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e20323139333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a8:37:97:32:54:f7:f8:29:b8:1a:e6:ae:94:ba:d7:3b:33:
         7b:24:9a:45:8a:28:bf:81:1c:06:f3:4c:ac:04:41:d4:6f:8c:
         76:f6:20:16:35:2c:18:37:0f:db:d1:f9:24:24:ea:9b:6b:08:
         4a:77:78:48:f7:7e:24:a5:a9:9a:ca:c3:77:4f:10:01:26:45:
         6d:b8:6c:59:03:ba:fe:f3:22:e1:16:30:5e:dc:1d:09:e8:f1:
         1d:13:f4:6c:c1:ce:cb:ec:0d:dc:ff:4b:d6:f7:3f:4f:4d:c6:
         4f:f8:7f:b9:92:ff:9a:9a:c2:73:44:d5:0f:88:78:77:a0:62:
         3b:d8:02:a9:bf:63:86:3c:6b:68:e0:9c:5d:f1:92:92:fc:37:
         b7:a4:c0:7d:b7:56:f4:a8:4c:88:17:b9:73:d0:73:39:b4:a9:
         3e:e5:5c:c6:dd:10:ed:56:0a:c9:4f:88:7e:d6:14:7f:0f:82:
         3d:9a:23:71:4a:89:53:67:36:ca:12:59:dc:da:d4:7e:5f:ea:
         bd:30:b4:1c:3b:fb:5b:5c:2a:c1:8c:33:42:a2:14:c8:2b:22:
         8c:dd:34:a3:37:b1:67:df:06:69:6a:00:a5:f3:83:13:20:1e:
         f3:f4:ab:ac:cf:b3:57:f8:84:07:8c:6c:e5:be:16:22:9f:5e:
         7b:95:05:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:18 2026 by rpki-client