Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3133352e302f32342d3234203d3e203331383938.roa
File:                     3139332e3232372e3133352e302f32342d3234203d3e203331383938.roa (raw, json)
Hash identifier:          DXnEB6mmNgK6eCV3rIw5UGTcDSwLQHDEKVmpm3ldoVo=
Subject key identifier:   E0:E0:38:97:A2:5D:02:7D:C5:B6:12:30:80:E2:53:F7:96:AA:68:89
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       228A1759837DD53A70C474EFF581B5C6C2FC03F8
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3133352e302f32342d3234203d3e203331383938.roa
Signing time:             Wed 14 Oct 2026 16:36:20 +0000
ROA not before:           Wed 14 Oct 2026 16:31:20 +0000
ROA not after:            Wed 13 Oct 2027 16:36:20 +0000
asID:                     31898
IP address blocks:        193.227.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 25 Oct 2026 09:57:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8a:17:59:83:7d:d5:3a:70:c4:74:ef:f5:81:b5:c6:c2:fc:03:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 14 16:31:20 2026 GMT
            Not After : Oct 13 16:36:20 2027 GMT
        Subject: CN=E0E03897A25D027DC5B6123080E253F796AA6889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c9:59:3e:3f:f3:92:e6:27:2d:ca:e5:0d:1f:
                    8e:20:17:e9:d3:7d:ce:fa:dd:03:45:46:61:81:61:
                    69:05:f3:f8:6c:18:98:b5:67:04:b2:51:62:67:eb:
                    93:f3:ba:03:19:1c:79:4f:3e:4c:83:b5:a2:c4:37:
                    0f:14:54:22:a9:f0:1d:4b:59:b7:78:39:13:b4:05:
                    e7:34:6e:b9:70:30:c8:e8:5f:53:7b:aa:74:9a:1b:
                    46:b1:09:b2:f9:9c:5a:f6:ab:d8:eb:77:33:6b:3b:
                    5a:e0:a4:85:2d:a7:37:5c:e2:8f:e8:33:08:91:a7:
                    96:73:1e:c0:91:2c:6f:24:4a:e1:7e:00:70:a4:8f:
                    42:64:8c:f5:9d:4e:81:23:ed:16:a6:8e:03:69:80:
                    b0:b2:27:e3:82:53:08:7f:05:1b:97:c5:97:11:37:
                    0e:f8:e3:7c:26:b1:ca:be:3e:dd:d0:77:80:25:1e:
                    75:4f:9b:fd:30:77:0f:60:25:85:c3:d6:ce:b7:5b:
                    bc:40:98:2a:50:da:5d:2d:55:2e:69:cd:6b:02:7a:
                    d4:30:5a:da:1f:9a:30:b2:e2:64:e2:79:bb:14:98:
                    49:87:0d:4f:fd:f8:17:2b:43:ee:8a:25:6e:11:17:
                    79:c5:a4:32:d7:ef:c3:ac:e1:3e:2b:fc:99:c7:7a:
                    3e:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:E0:38:97:A2:5D:02:7D:C5:B6:12:30:80:E2:53:F7:96:AA:68:89
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3133352e302f32342d3234203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:f0:b8:78:14:29:3d:b3:27:37:47:49:ae:3d:d7:5c:59:a1:
         37:ad:d8:1a:40:a9:29:ac:11:05:75:8e:d9:17:a5:70:f8:c6:
         5e:22:55:9b:1b:b5:ff:37:27:79:83:03:c2:f6:81:4d:66:6a:
         90:89:40:76:5e:62:82:d5:61:2e:43:54:68:c7:f8:7d:e6:b4:
         bd:14:c2:94:a3:5e:b2:c5:8c:b8:52:65:64:a6:74:e7:8b:5b:
         03:c3:8b:48:47:4c:ee:97:63:b5:5b:bc:fb:a2:ae:c7:8c:1f:
         a9:99:ca:3f:f4:0d:3d:c5:73:22:ab:84:af:6f:e2:22:ba:a7:
         a5:3f:af:07:24:25:5e:92:3d:89:db:13:63:4f:b9:4c:b5:6a:
         99:41:dd:d7:3d:0f:e3:af:c3:fe:94:18:e6:8b:21:15:5e:09:
         b0:cb:1e:db:58:8a:98:7a:79:cb:68:e2:d1:80:2c:5a:5e:99:
         87:5a:e0:2f:7f:e7:b1:e4:5a:8a:2e:34:1f:2b:d7:3f:a9:24:
         9f:fe:a2:6d:6c:b5:b0:28:97:2f:dd:03:79:58:8d:1b:7b:4c:
         51:da:2a:fe:ed:18:19:64:38:f2:f9:ba:0f:9a:f2:05:4d:59:
         14:c7:c6:1c:0e:e0:db:86:a7:76:58:65:fe:4e:68:ec:4c:6d:
         41:9c:9b:08
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUIooXWYN91TpwxHTv9YG1xsL8A/gwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYxMDE0MTYzMTIwWhcNMjcxMDEzMTYzNjIw
WjAzMTEwLwYDVQQDEyhFMEUwMzg5N0EyNUQwMjdEQzVCNjEyMzA4MEUyNTNGNzk2
QUE2ODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMlZPj/zkuYn
LcrlDR+OIBfp033O+t0DRUZhgWFpBfP4bBiYtWcEslFiZ+uT87oDGRx5Tz5Mg7Wi
xDcPFFQiqfAdS1m3eDkTtAXnNG65cDDI6F9Te6p0mhtGsQmy+Zxa9qvY63czazta
4KSFLac3XOKP6DMIkaeWcx7AkSxvJErhfgBwpI9CZIz1nU6BI+0Wpo4DaYCwsifj
glMIfwUbl8WXETcO+ON8JrHKvj7d0HeAJR51T5v9MHcPYCWFw9bOt1u8QJgqUNpd
LVUuac1rAnrUMFraH5owsuJk4nm7FJhJhw1P/fgXK0PuiiVuERd5xaQy1+/DrOE+
K/yZx3o+rQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFODgOJeiXQJ9xbYSMIDiU/eW
qmiJMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzIzMjM3MmUzMTMzMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzMxMzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweOHMA0GCSqGSIb3DQEB
CwUAA4IBAQCy8Lh4FCk9syc3R0muPddcWaE3rdgaQKkprBEFdY7ZF6Vw+MZeIlWb
G7X/Nyd5gwPC9oFNZmqQiUB2XmKC1WEuQ1Rox/h95rS9FMKUo16yxYy4UmVkpnTn
i1sDw4tIR0zul2O1W7z7oq7HjB+pmco/9A09xXMiq4Svb+IiuqelP68HJCVekj2J
2xNjT7lMtWqZQd3XPQ/jr8P+lBjmiyEVXgmwyx7bWIqYennLaOLRgCxaXpmHWuAv
f+ex5FqKLjQfK9c/qSSf/qJtbLWwKJcv3QN5WI0be0xR2ir+7RgZZDjy+boPmvIF
TVkUx8YcDuDbhqd2WGX+TmjsTG1BnJsI
-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:13 2026 by rpki-client