Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
File:                     3139332e3138382e312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          Zss0Wj2F7MGG5H2vyP4/ln2n+ZD8gVDsgG5MlTUJiWE=
Subject key identifier:   F8:CA:3B:F8:35:A5:EC:55:20:FC:E7:34:EF:49:63:CA:4D:2C:13:C7
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5F8663694D9B8744356C57C164A3E4D442373771
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 03 Aug 2026 13:36:10 +0000
ROA not before:           Mon 03 Aug 2026 13:31:10 +0000
ROA not after:            Mon 02 Aug 2027 13:36:10 +0000
asID:                     212238
IP address blocks:        193.188.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 05:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:86:63:69:4d:9b:87:44:35:6c:57:c1:64:a3:e4:d4:42:37:37:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug  3 13:31:10 2026 GMT
            Not After : Aug  2 13:36:10 2027 GMT
        Subject: CN=F8CA3BF835A5EC5520FCE734EF4963CA4D2C13C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0d:eb:61:d9:5f:8a:98:c3:6a:4b:8a:f8:a2:
                    da:01:a8:30:1e:f0:9a:09:ae:42:53:46:b5:ea:63:
                    c0:56:8a:85:ec:1a:9e:74:3d:d4:86:e0:f0:b9:91:
                    17:24:51:1b:90:38:06:7a:56:1e:b5:1d:fc:00:33:
                    1d:1d:15:fc:c3:73:b3:a0:ab:5b:4a:62:06:9c:f9:
                    d5:69:be:4d:b6:e2:ce:b5:42:7e:c6:76:5c:eb:08:
                    cc:34:d7:11:6f:fb:46:be:cf:9d:8e:68:07:37:f0:
                    bf:29:29:44:6e:c5:2d:02:07:0c:39:d1:df:81:c7:
                    aa:d6:d1:c6:eb:e6:4d:86:40:34:f6:49:cd:e4:62:
                    52:cb:8d:50:10:2c:6f:ae:bf:6f:3c:2d:29:71:96:
                    25:ab:b8:21:9c:ca:26:8c:df:ca:28:a9:45:b7:27:
                    8d:06:b7:58:ca:e5:ef:70:5d:67:5a:62:fa:33:aa:
                    ef:49:b7:88:7a:9a:fd:d2:31:00:f8:b5:81:79:d1:
                    5c:54:00:d5:b5:8b:64:6d:cb:6a:77:c4:83:b1:03:
                    a6:15:f3:bd:2b:b1:c6:e9:bd:c1:0e:d9:ae:4c:3b:
                    60:b2:ea:01:58:57:08:b6:aa:f0:91:c3:a5:ff:39:
                    75:55:3d:af:bb:9f:1e:aa:70:3d:1a:e6:82:5f:32:
                    bd:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:CA:3B:F8:35:A5:EC:55:20:FC:E7:34:EF:49:63:CA:4D:2C:13:C7
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.188.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:f2:7d:2a:52:bc:f9:55:93:51:af:c7:be:cc:d6:65:84:ac:
         b1:3c:4b:b9:ec:fc:78:25:ce:e8:de:20:0d:98:7e:88:72:dc:
         df:34:0f:2f:dd:d4:ce:f9:53:3c:83:a6:13:dc:9f:c9:91:03:
         df:b6:7e:0e:20:b0:ca:fb:31:44:db:bc:4b:29:26:91:df:ab:
         90:f5:cc:ab:b5:32:61:43:0a:28:e6:94:97:4b:00:29:2e:0b:
         8c:2e:a0:92:6a:d4:9b:1f:e0:0b:8f:46:3e:38:b2:d4:68:50:
         06:45:0a:84:2a:69:80:bd:cc:3c:dd:fa:2c:81:31:a1:f3:38:
         db:5f:17:ca:5b:b7:16:4f:91:95:40:c9:fd:1d:0c:5a:5a:21:
         34:b3:69:2d:e7:e5:47:26:3d:66:61:9b:67:e3:9f:0e:8a:ef:
         10:46:47:68:49:b6:29:ad:68:8d:85:c7:c5:b4:fc:99:89:7e:
         d1:ff:53:f3:f7:3a:1c:e4:1e:11:61:87:02:d6:5b:e2:16:2d:
         2c:c8:2c:a4:63:49:fd:58:df:f5:1a:5d:f0:74:28:69:83:02:
         d6:b7:87:b8:91:11:ac:ca:6c:30:f8:10:5b:05:0b:eb:ae:79:
         bf:98:0c:b8:f1:c6:9d:89:13:d6:0f:cf:af:16:b8:d2:9e:dd:
         65:d1:cb:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 07:40:12 2026 by rpki-client