Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3138322e302f32342d3234203d3e20313436383731.roa
File:                     3139342e33332e3138322e302f32342d3234203d3e20313436383731.roa (raw, json)
Hash identifier:          wsqo/0RCptcij5q8Skx0gxY3f9MPSrP8+uQx3Uoy6U8=
Subject key identifier:   36:57:D5:2D:F5:ED:CD:4C:89:38:9E:D7:30:0E:72:97:47:1C:EF:7B
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       354B6322E7D0A2B7A5D225805703B8117F0F98BA
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3138322e302f32342d3234203d3e20313436383731.roa
Signing time:             Mon 03 Aug 2026 09:49:23 +0000
ROA not before:           Mon 03 Aug 2026 09:44:23 +0000
ROA not after:            Mon 02 Aug 2027 09:49:23 +0000
asID:                     146871
IP address blocks:        194.33.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 05 Aug 2026 05:34:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:4b:63:22:e7:d0:a2:b7:a5:d2:25:80:57:03:b8:11:7f:0f:98:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug  3 09:44:23 2026 GMT
            Not After : Aug  2 09:49:23 2027 GMT
        Subject: CN=3657D52DF5EDCD4C89389ED7300E7297471CEF7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5d:92:44:08:7d:29:42:8e:a9:3d:54:6c:49:
                    37:33:ca:74:89:4a:26:46:23:1e:7d:e7:c9:54:65:
                    f8:4c:23:78:52:83:37:8a:ba:4e:a4:1a:1d:5a:c8:
                    f4:92:13:a4:65:b6:5a:72:d9:9e:2c:d1:ef:95:e7:
                    cd:eb:c3:2b:52:e1:a7:32:14:48:22:a1:9d:ae:7d:
                    6a:ff:4b:32:e7:85:0b:f3:26:77:1b:11:91:a4:aa:
                    d1:7e:90:a9:c8:91:79:3f:28:df:bf:d5:e8:20:2a:
                    b4:ec:fc:b9:aa:dd:1d:77:3d:60:9b:d8:d1:74:4b:
                    c6:f8:21:15:02:63:a0:31:4d:6f:19:f9:a4:79:1d:
                    b3:60:4a:29:05:22:1c:cd:07:05:84:56:e8:73:a7:
                    de:94:ea:fe:6c:3a:23:16:5f:84:f4:d9:3a:f3:60:
                    40:8f:0c:60:ed:fd:2f:54:93:59:2b:c2:22:1c:91:
                    8b:40:9f:16:1d:1e:7c:3e:ad:59:41:29:63:3e:13:
                    06:93:2f:7c:1d:5d:bb:4a:c2:9f:22:79:cc:49:af:
                    e4:cc:f7:c6:fd:12:b8:07:1d:28:d1:06:86:c3:9d:
                    88:35:83:1c:39:b6:83:86:f2:ec:25:eb:84:57:43:
                    e5:ef:d5:4d:d9:d4:4a:e8:8b:ea:bf:b6:42:2f:56:
                    6e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:57:D5:2D:F5:ED:CD:4C:89:38:9E:D7:30:0E:72:97:47:1C:EF:7B
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3138322e302f32342d3234203d3e20313436383731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:70:26:90:e7:3d:0b:a6:63:ed:09:06:6e:26:18:89:a7:48:
         c1:67:39:13:6a:14:95:96:ef:67:eb:1c:2b:cf:c7:8d:73:76:
         bd:b9:8a:cb:b7:4a:ad:3b:3e:3a:d9:4b:f6:42:e5:4e:79:35:
         63:27:91:12:10:66:96:1f:a1:a9:a3:e6:9b:6b:e8:f9:da:12:
         56:1c:61:60:46:c4:91:ba:a2:91:42:6d:ca:1a:c6:c9:7d:7e:
         b0:c5:58:6e:63:14:57:a7:db:e8:95:43:dd:e5:d2:53:2b:08:
         ed:27:e4:cd:b0:8e:ad:1e:7f:2e:d6:e3:8a:ad:7d:a3:81:25:
         7c:9b:0f:2e:47:55:db:61:2b:93:73:ba:5c:f2:69:e0:52:7e:
         5b:f1:7a:05:36:bd:c3:4b:df:36:50:d9:eb:91:53:80:8d:be:
         e2:b3:0e:6a:f8:ed:c1:38:50:0b:59:e1:d2:f0:a1:43:80:b3:
         21:27:b0:00:47:ff:ea:b9:e3:83:c6:4f:78:ab:f4:29:e0:5b:
         a9:ec:c1:b2:b7:b0:42:51:4a:e2:df:86:39:ff:1d:a0:9c:48:
         7e:e1:2f:6f:57:65:a0:2a:e5:f9:47:d5:dd:25:d5:ce:96:45:
         1d:4a:d4:21:db:20:9a:48:fe:40:7c:ff:ac:66:10:52:47:ab:
         75:60:f0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 12:18:25 2026 by rpki-client