Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa
File:                     3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa (raw, json)
Hash identifier:          HtDpT8+W4Gf/Ax2yiTmITpb0sfKv0ym5Qkq1RlKgl0s=
Subject key identifier:   EE:F3:E3:BC:06:92:FF:72:52:B3:80:A9:AC:C2:78:C0:62:F9:FE:75
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0CD95FE9399DA1366D8A25689DD367EA181DDBEF
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa
Signing time:             Mon 03 Aug 2026 13:36:10 +0000
ROA not before:           Mon 03 Aug 2026 13:31:10 +0000
ROA not after:            Mon 02 Aug 2027 13:36:10 +0000
asID:                     212238
IP address blocks:        193.29.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 13:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d9:5f:e9:39:9d:a1:36:6d:8a:25:68:9d:d3:67:ea:18:1d:db:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug  3 13:31:10 2026 GMT
            Not After : Aug  2 13:36:10 2027 GMT
        Subject: CN=EEF3E3BC0692FF7252B380A9ACC278C062F9FE75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:02:93:24:15:d9:c2:cb:b9:ac:34:3d:bf:f5:
                    4f:d3:9b:54:d9:2c:c2:28:5a:9b:11:e0:91:1f:f0:
                    da:a0:4c:8c:81:f3:35:d4:5d:33:ce:a0:b5:c1:39:
                    3f:88:c0:6d:d9:1e:90:00:88:9d:ab:2b:f5:c0:97:
                    53:10:22:b6:49:0b:59:77:30:90:4e:30:37:25:57:
                    fb:ea:db:c1:ca:f6:a3:35:38:bb:67:e1:7e:2e:00:
                    8e:85:aa:37:8a:61:66:ea:74:25:d7:1b:25:da:c4:
                    ce:e7:13:13:6f:68:3d:55:3e:33:7e:c2:31:b0:20:
                    9e:45:6f:d1:fe:4f:11:ca:98:21:e5:29:82:4b:eb:
                    6d:72:d0:ae:a1:66:d0:6d:ba:2d:ab:c0:b6:30:94:
                    a9:00:6a:7f:8f:16:84:28:8a:1e:b9:a0:ac:40:9a:
                    6b:75:5b:c1:19:8d:06:57:4a:95:46:da:d4:c9:83:
                    ad:80:69:b8:1a:ea:4e:87:bf:d0:46:41:d9:51:bc:
                    46:30:aa:6c:bf:25:f4:f9:a1:ea:34:c0:68:35:ed:
                    38:fb:73:b0:ee:3f:70:e9:bb:b6:93:f5:e7:be:8f:
                    db:ec:70:c7:4c:22:b3:e8:a7:8f:74:31:1d:d9:13:
                    09:23:0c:6e:86:97:17:d5:48:e6:00:39:f3:cd:cf:
                    ff:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F3:E3:BC:06:92:FF:72:52:B3:80:A9:AC:C2:78:C0:62:F9:FE:75
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3235312e302f32342d3234203d3e20323132323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:f9:00:01:f5:fe:8d:7d:92:7f:59:26:d9:b9:04:dc:2c:7b:
         f5:86:1f:1b:6b:eb:2c:ce:8b:00:7e:a7:32:81:db:27:47:c5:
         9f:8a:31:3a:73:9d:32:50:b6:c1:cc:64:89:72:79:8d:43:15:
         0d:08:63:61:88:38:3a:2a:85:7b:46:05:18:96:fc:48:37:b1:
         ec:67:29:49:4b:01:07:ac:2b:d1:59:53:f9:64:54:af:52:92:
         1a:61:0f:cc:e8:2a:df:9c:77:3f:a1:64:10:5d:eb:d1:3b:cf:
         69:f7:f1:2d:a4:37:d3:dd:fb:4a:22:d5:83:4e:f9:f9:3f:bb:
         3b:fb:b2:c3:07:82:a7:15:fe:11:8b:5a:91:ad:14:2e:4f:d9:
         eb:43:0f:46:bf:82:9a:9f:35:bf:56:5d:ef:c7:91:0b:d0:8c:
         01:1c:4a:b4:25:81:ca:be:37:0c:26:85:b4:ca:71:41:ad:44:
         41:da:75:8c:92:f8:d8:d0:1d:c1:88:d4:f9:f7:e2:56:a7:51:
         03:e8:26:69:e1:12:bd:7c:c4:2b:f0:d8:c2:0f:60:a3:1d:4b:
         14:dd:66:25:8a:15:d3:1e:72:67:2b:d1:bc:cf:b5:66:6b:5f:
         9d:3d:77:93:b4:25:bd:6d:ae:cb:21:5c:d8:fd:00:5c:40:81:
         02:96:30:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:07:04 2026 by rpki-client