Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132352e302f32342d3234203d3e203436353632.roa
File:                     3139332e3232372e3132352e302f32342d3234203d3e203436353632.roa (raw, json)
Hash identifier:          mZYNo7o15inxaPcidzKG81NNnosxg/tnkAgk+Y6tZxI=
Subject key identifier:   DC:12:35:6B:4C:D9:91:57:BD:2F:D6:9F:98:BE:75:FC:01:A4:D2:22
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       334BA78DCD546DA9BF36C418E424A1856AEFBDA1
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132352e302f32342d3234203d3e203436353632.roa
Signing time:             Wed 14 Oct 2026 16:36:20 +0000
ROA not before:           Wed 14 Oct 2026 16:31:20 +0000
ROA not after:            Wed 13 Oct 2027 16:36:20 +0000
asID:                     46562
IP address blocks:        193.227.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 12:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:4b:a7:8d:cd:54:6d:a9:bf:36:c4:18:e4:24:a1:85:6a:ef:bd:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 14 16:31:20 2026 GMT
            Not After : Oct 13 16:36:20 2027 GMT
        Subject: CN=DC12356B4CD99157BD2FD69F98BE75FC01A4D222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:27:29:b7:46:65:71:92:08:22:95:44:0a:fa:
                    0d:60:aa:f3:c1:51:9f:95:19:63:28:97:e3:46:df:
                    6f:cf:3e:41:95:9f:77:59:1f:53:cb:ba:d5:92:f5:
                    6b:47:02:10:e3:94:33:f4:5f:5d:d2:f8:63:28:68:
                    2c:9a:d9:24:c9:b6:41:2a:76:80:1f:6b:4d:66:a4:
                    96:9f:96:5d:a1:35:7f:09:fc:8b:37:ea:89:09:b2:
                    e7:68:f9:4c:71:27:38:cf:2d:d6:0d:42:f7:e1:fb:
                    7e:15:b4:29:8c:95:ce:07:e0:52:2a:b0:fa:aa:52:
                    ed:eb:10:ef:d6:8f:6f:42:44:db:27:23:e4:36:d5:
                    89:7b:7d:ec:f9:ff:62:15:5f:02:f1:a9:8a:5e:2a:
                    e8:09:7d:49:02:83:24:da:f6:16:75:43:32:ea:d7:
                    60:e8:fe:b6:a5:9a:07:46:f8:b7:ab:a2:c4:33:f8:
                    c4:b5:c4:f4:02:a7:a9:18:c7:5f:55:a3:98:35:7a:
                    fe:4a:a0:54:0f:44:a6:f5:f5:ba:15:1a:fc:bc:09:
                    16:25:fd:f4:88:e1:84:fe:7f:67:28:a3:e7:d8:35:
                    05:61:ea:cf:40:6a:d9:50:f7:05:ae:c7:b9:0d:34:
                    29:80:df:fe:6c:28:bd:a0:35:8c:60:90:d2:3b:64:
                    d3:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:12:35:6B:4C:D9:91:57:BD:2F:D6:9F:98:BE:75:FC:01:A4:D2:22
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132352e302f32342d3234203d3e203436353632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:11:11:1f:17:79:46:0c:10:47:99:08:5b:8b:9a:34:05:a4:
         ed:b0:6a:e5:2e:c4:cf:2a:01:80:93:6b:db:29:ef:2c:3d:74:
         c4:6a:0a:b7:00:1a:4c:1a:f1:86:af:fa:70:c4:1a:91:5e:f0:
         94:80:ea:b0:a4:ca:78:6c:9a:7d:9e:20:24:88:54:da:70:30:
         ce:ee:db:75:79:e2:f8:42:f2:b7:26:b1:71:6b:3c:b5:91:73:
         15:e0:e1:13:0c:e1:38:c5:02:ec:86:4d:c4:27:4b:3e:54:63:
         97:54:8e:a9:df:76:65:63:31:98:1d:22:c2:95:4f:ef:e5:bd:
         af:46:18:69:29:ec:57:95:f9:eb:0b:7e:10:8a:1e:33:ec:11:
         6b:73:f3:4f:ab:ba:3d:9f:0a:b9:e2:ce:41:01:11:dd:a9:5b:
         e7:00:6e:94:39:09:5f:46:8a:04:f1:44:70:1f:bf:f9:56:91:
         6a:d6:9a:64:08:25:cb:20:1e:a3:ba:e2:47:58:69:19:f8:ff:
         b8:55:8d:80:cf:f0:15:f0:41:a7:9f:80:33:b2:84:71:30:ff:
         31:2f:89:3d:2a:62:c9:78:f3:d0:81:96:34:4b:85:b8:8f:44:
         3c:75:a8:eb:15:84:a2:bb:3e:5c:3b:8f:8a:f4:8b:9b:3c:f0:
         94:07:da:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:59:23 2026 by rpki-client