Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e203538323132.roa
File:                     3139332e38342e3131312e302f32342d3234203d3e203538323132.roa (raw, json)
Hash identifier:          W5V6cS5erM0Njfk1nWZfQmuJOOezdq3jNcBrqyQ+7IY=
Subject key identifier:   81:83:75:C9:D8:19:EF:36:73:C1:C3:A9:38:C4:54:A0:C8:B8:E0:FB
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       4C30A774CC56C777841A060669A92C1398FD31B5
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e203538323132.roa
Signing time:             Wed 27 May 2026 14:36:04 +0000
ROA not before:           Wed 27 May 2026 14:31:04 +0000
ROA not after:            Wed 26 May 2027 14:36:04 +0000
asID:                     58212
IP address blocks:        193.84.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 05 Jun 2026 00:32:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:30:a7:74:cc:56:c7:77:84:1a:06:06:69:a9:2c:13:98:fd:31:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May 27 14:31:04 2026 GMT
            Not After : May 26 14:36:04 2027 GMT
        Subject: CN=818375C9D819EF3673C1C3A938C454A0C8B8E0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:79:43:93:77:e0:df:48:4c:83:1c:68:ca:ca:
                    76:82:bd:6e:04:bf:1a:70:21:44:5e:d0:99:74:14:
                    bf:66:96:56:b4:f3:19:12:c9:30:e5:fe:47:61:d8:
                    50:9c:c7:dc:18:bd:e5:6a:29:57:03:b2:5c:e7:b7:
                    4e:5b:e4:1b:a4:59:58:2a:c3:c7:77:89:59:e6:ce:
                    9b:c6:6f:2c:e5:32:6f:35:24:8b:bd:40:98:37:84:
                    a2:28:f6:57:79:42:e4:df:78:de:2e:88:4b:62:a4:
                    00:9a:71:f9:0a:9f:3c:95:80:4e:e1:14:68:4e:a2:
                    13:d5:7d:f4:51:30:c0:86:46:2a:62:39:7c:fc:4a:
                    35:73:58:a8:2c:fd:53:9a:b8:dc:00:23:aa:e0:98:
                    70:71:d2:15:c5:59:9c:4d:79:b2:e1:8f:05:5a:df:
                    ff:0d:09:0f:7a:aa:ff:7a:d2:8b:19:95:11:c7:03:
                    04:60:03:d7:05:49:20:5b:ae:77:54:88:d9:8b:a1:
                    2e:30:0c:4e:0e:02:35:8e:f0:6e:a5:a6:03:2f:d9:
                    76:41:67:80:0b:c7:3d:e1:1d:57:fe:88:9a:c9:16:
                    32:2f:ca:f3:9d:0f:ed:c9:80:fa:5c:e5:8c:3b:88:
                    1d:c1:61:0b:89:82:ac:dd:0e:43:62:eb:ac:1f:41:
                    b2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:83:75:C9:D8:19:EF:36:73:C1:C3:A9:38:C4:54:A0:C8:B8:E0:FB
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e203538323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:42:b3:e2:21:8e:3c:1c:37:5e:8c:54:9c:a7:d9:9d:d6:3a:
         a9:0e:23:a7:f3:69:0d:de:e2:88:21:36:bf:f7:27:c0:b2:53:
         46:bc:0b:f4:cb:3a:0b:6a:26:21:8e:19:cf:98:32:7e:e7:20:
         6a:2b:38:19:d5:fd:cd:b4:17:c0:53:97:77:d8:38:f0:dd:1e:
         d0:67:98:e7:4f:84:2b:9d:76:ea:18:ad:de:0b:41:89:dd:7b:
         64:fd:3e:c1:07:42:39:f1:3b:1b:b6:55:a6:78:d7:6b:75:e2:
         51:9b:67:8d:65:9a:00:69:10:fd:2f:ef:b7:f6:f0:53:d7:ef:
         0e:a7:d5:0c:d5:e9:c7:77:ca:30:6f:4d:37:e8:01:b6:90:ff:
         59:0d:c5:1a:b1:43:d8:ef:68:2c:cd:1c:a6:3a:76:59:c6:96:
         c5:90:a9:37:a2:30:7c:26:73:52:80:fb:77:96:e5:3a:0f:b1:
         24:24:e5:41:6f:ed:88:16:1b:65:c8:79:23:6e:29:64:52:70:
         36:31:7e:a0:16:64:8c:11:a4:b3:8a:7a:12:69:05:5d:dc:d1:
         a7:05:79:a6:bc:fd:6f:8d:37:18:97:94:ba:e6:d6:7b:85:f0:
         41:3a:42:95:0c:48:2d:5e:c2:56:0f:8f:5d:2c:9a:8f:95:b8:
         88:b5:96:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:10:18 2026 by rpki-client