Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
File:                     3139332e3138382e312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          H9vL1dioLdgVrkGv/jONHE8YpJAUJVq9rf1g8aPjhhU=
Subject key identifier:   09:B7:84:03:8A:A0:76:9C:C6:A4:FD:C9:DA:6D:19:BF:FD:51:0D:E1
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       74140DD579C5668AC3FAB2CE527C8E2B4867A92B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 01 Sep 2025 13:29:45 +0000
ROA not before:           Mon 01 Sep 2025 13:24:45 +0000
ROA not after:            Mon 31 Aug 2026 13:29:45 +0000
asID:                     212238
IP address blocks:        193.188.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:06:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:14:0d:d5:79:c5:66:8a:c3:fa:b2:ce:52:7c:8e:2b:48:67:a9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep  1 13:24:45 2025 GMT
            Not After : Aug 31 13:29:45 2026 GMT
        Subject: CN=09B784038AA0769CC6A4FDC9DA6D19BFFD510DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:12:61:b9:69:68:8b:44:8d:e2:12:26:5e:
                    12:34:18:9e:2e:59:92:d1:df:db:d0:46:73:d1:39:
                    5d:0a:f0:e3:71:cc:52:55:27:38:f3:30:d8:29:c4:
                    c3:39:02:a1:ff:82:a3:a3:e4:f7:8b:80:b4:70:1e:
                    d8:39:e9:15:3d:7f:d0:81:0d:15:f2:3d:be:d6:7c:
                    1f:81:c2:33:c1:1e:5c:ab:56:f8:5c:28:41:86:10:
                    b9:a0:a2:08:66:ab:25:9c:9b:ff:b3:47:c0:bc:45:
                    b0:9d:98:7e:2d:e6:7f:09:1b:07:6c:33:f7:7a:98:
                    a9:ff:35:0b:66:8a:dd:5b:27:8e:39:5f:b5:e2:6f:
                    b1:ef:bf:ec:e2:53:78:76:d2:05:47:8e:5e:5d:5c:
                    77:9d:a5:02:31:4b:6d:b0:0b:2f:e2:a9:8b:8f:d4:
                    77:43:0e:7d:c2:47:57:e4:02:ee:36:2a:c7:90:91:
                    ff:1b:93:be:c6:15:86:4f:d4:e7:85:12:61:ba:12:
                    cd:5c:e7:32:75:12:c3:a8:2a:1b:1d:8d:91:87:70:
                    7b:58:e0:99:2b:5e:c8:ee:d6:56:49:ee:e0:34:a0:
                    8e:c6:1a:07:83:93:ce:4a:71:44:56:a4:65:72:6e:
                    db:40:b1:60:e4:d1:96:5a:7b:87:a9:90:be:7e:56:
                    57:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B7:84:03:8A:A0:76:9C:C6:A4:FD:C9:DA:6D:19:BF:FD:51:0D:E1
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.188.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:c5:4f:9d:42:e4:af:b5:05:61:20:ec:ce:11:2f:83:c4:6a:
         c4:7f:09:00:85:66:56:63:81:af:bd:c6:6b:29:80:72:3c:69:
         6e:e3:57:f1:8e:c2:84:67:84:a0:70:a4:be:ef:8b:7a:f8:38:
         7e:78:ed:de:bc:da:07:de:21:b0:e3:50:9d:b1:d0:6f:36:64:
         1c:8b:30:c0:3f:11:05:91:56:30:1c:63:fd:47:23:fe:d9:8c:
         81:40:d5:ef:63:27:19:04:c6:90:6b:a0:2a:5a:7c:56:f2:e0:
         27:22:62:38:26:99:2a:6f:2b:87:2e:e5:24:c5:aa:19:ff:60:
         3e:e8:dd:16:8c:b8:bf:6c:05:07:cd:89:39:32:48:c4:03:56:
         b9:43:9d:81:9b:7c:07:f2:9d:b7:65:0e:7b:bd:9f:de:9d:1f:
         ff:b4:76:d6:4b:c6:55:30:70:29:11:a7:41:8b:79:73:89:83:
         e8:cc:75:33:0a:19:64:c9:cd:64:82:ed:04:67:8e:78:8a:78:
         dd:e0:43:64:07:79:e4:a9:65:61:75:23:6e:30:4b:a7:99:00:
         51:79:a7:65:e1:35:3a:0b:55:f9:80:f1:d6:82:b0:15:47:8c:
         31:bc:f7:77:40:93:f4:d0:7e:5b:87:52:64:b3:84:2b:92:21:
         b5:ef:0c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 08:23:32 2025 by rpki-client