Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3137352e302f32342d3234203d3e20313339363432.roa
File:                     3139342e33342e3137352e302f32342d3234203d3e20313339363432.roa (raw, json)
Hash identifier:          hm/osbhXm095KC0u++0vK8nKQUBbleMr96dlc2DstII=
Subject key identifier:   BE:78:5A:A3:BA:72:6A:BB:F8:1D:71:06:27:D6:67:65:AE:34:2D:1E
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       39F069954758411CCC2F98050B2B66BB287494E9
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3137352e302f32342d3234203d3e20313339363432.roa
Signing time:             Sat 01 Aug 2026 17:01:16 +0000
ROA not before:           Sat 01 Aug 2026 16:56:16 +0000
ROA not after:            Sat 31 Jul 2027 17:01:16 +0000
asID:                     139642
IP address blocks:        194.34.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 28 Aug 2026 07:06:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:f0:69:95:47:58:41:1c:cc:2f:98:05:0b:2b:66:bb:28:74:94:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug  1 16:56:16 2026 GMT
            Not After : Jul 31 17:01:16 2027 GMT
        Subject: CN=BE785AA3BA726ABBF81D710627D66765AE342D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:76:8a:2d:bf:3b:03:c6:d8:bd:f0:95:b0:87:
                    86:66:d3:8c:a5:a4:28:85:0e:00:59:00:a2:43:30:
                    7a:3c:52:03:a3:a8:cc:8a:28:bd:2e:49:06:8f:fd:
                    9d:57:db:da:2d:4a:81:aa:20:2c:46:c5:6e:36:bf:
                    65:5e:85:65:a0:0e:7a:f5:45:5a:78:fd:0e:b3:eb:
                    8a:5d:4b:bb:c6:5d:92:f9:6d:8f:75:c0:60:1a:09:
                    8f:74:fb:9b:df:e3:61:0b:ca:bb:89:4a:b3:2c:4c:
                    1d:a8:05:2b:5b:38:4b:ea:b2:01:27:56:6e:b7:8b:
                    61:71:77:94:6e:90:1b:bf:7b:42:5c:83:c1:f2:04:
                    c2:ee:55:14:7e:bb:ee:50:bd:d8:d1:2d:46:a4:78:
                    92:09:54:67:c3:5f:0f:64:aa:5f:92:9e:69:a6:8e:
                    9b:fb:3d:52:5a:05:86:c9:8c:4d:b0:a6:73:20:b8:
                    a9:31:eb:2b:1b:cf:85:2b:3e:02:f5:a4:c3:55:3d:
                    ea:41:7a:27:8c:e4:af:bc:e3:69:3b:68:02:68:d1:
                    84:a6:64:ef:73:ef:1b:de:e3:f7:fd:65:e6:d9:80:
                    66:d6:69:b5:ce:bd:80:a6:c9:37:f8:d2:9f:dc:bc:
                    30:c6:a9:a0:a5:04:47:7f:57:ab:4f:89:60:c7:ba:
                    c8:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:78:5A:A3:BA:72:6A:BB:F8:1D:71:06:27:D6:67:65:AE:34:2D:1E
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3137352e302f32342d3234203d3e20313339363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:63:28:b0:dc:d7:5d:7c:03:2f:b7:53:6b:51:58:de:39:97:
         de:b1:00:dc:ad:04:bc:a4:ed:b6:1e:8f:bb:a4:b3:d2:4f:27:
         26:ee:a5:01:dc:90:c2:14:26:79:36:e2:29:52:38:cb:a2:8a:
         19:1b:67:11:6b:d3:66:11:68:0e:0a:5d:30:eb:43:29:24:d6:
         db:c3:15:63:55:5f:9f:af:72:64:6e:1b:3e:8f:12:f3:ff:0f:
         16:32:21:24:16:3d:80:18:f0:2b:c9:4e:7e:4d:5d:30:a9:e3:
         f7:63:fa:16:ca:b5:2f:c4:90:53:77:27:2f:18:9b:ce:f0:b7:
         78:ce:ed:fe:b1:dc:70:d2:53:84:8f:65:7b:8a:7e:db:54:b6:
         e8:a6:91:d3:df:78:4f:c6:55:56:c7:29:98:8d:b0:b6:c2:67:
         b5:61:40:3e:c3:5d:ba:a7:13:5a:d6:9d:be:48:82:45:c7:20:
         03:b1:70:ec:90:38:e4:d7:f0:50:7a:bf:9a:24:e9:2e:af:06:
         e9:55:69:ad:c3:5d:af:cc:a5:59:01:0d:db:a1:8b:26:ac:a9:
         ff:fb:8d:40:1f:ab:71:5a:a2:48:1d:70:b2:32:73:d5:33:f8:
         8f:4a:e2:a6:18:0d:6f:82:96:dd:44:6f:e7:3e:f2:5b:c1:66:
         b2:1e:9d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 15:11:59 2026 by rpki-client