Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20343031343934.roa
File:                     3139352e37382e35352e302f32342d3234203d3e20343031343934.roa (raw, json)
Hash identifier:          P1oRV90/QIbeiSQnBRgtgfs7C6efJUxXDtpad9R7Erc=
Subject key identifier:   D4:40:CA:79:5C:94:95:10:08:5C:47:B2:E7:2E:8F:D7:41:F4:08:B6
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       6A5E49B6D6658F719D4C823A827A61390C0C8471
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20343031343934.roa
Signing time:             Sat 17 Oct 2026 14:36:21 +0000
ROA not before:           Sat 17 Oct 2026 14:31:21 +0000
ROA not after:            Sat 16 Oct 2027 14:36:21 +0000
asID:                     401494
IP address blocks:        195.78.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 23 Oct 2026 07:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:5e:49:b6:d6:65:8f:71:9d:4c:82:3a:82:7a:61:39:0c:0c:84:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 17 14:31:21 2026 GMT
            Not After : Oct 16 14:36:21 2027 GMT
        Subject: CN=D440CA795C949510085C47B2E72E8FD741F408B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f1:80:d8:05:59:f4:b5:47:6a:0a:d9:9a:fa:
                    7a:f5:e7:0b:dd:ec:87:65:89:89:7d:39:67:db:49:
                    af:94:22:2a:16:c4:ec:c6:4b:cc:3d:7e:65:79:2b:
                    53:32:2b:0c:0d:df:e4:6b:68:27:0d:81:bb:c7:7f:
                    31:fd:bb:c6:c6:8a:0f:d1:ea:26:12:8e:6e:71:32:
                    73:32:f6:3e:90:c3:f1:5b:4c:03:99:96:40:4f:f4:
                    ce:1a:86:40:cf:6d:57:f8:de:1c:92:c4:17:2e:17:
                    88:ee:ea:b2:26:b8:07:32:fe:28:77:de:d9:4c:bb:
                    38:3f:6a:ae:20:19:5d:61:4a:2e:1c:9d:f2:86:09:
                    c1:8b:26:d1:82:6e:49:a2:25:e6:d0:d3:48:d6:d9:
                    2b:ea:d5:71:ca:eb:f1:72:25:7d:d7:52:bf:17:db:
                    7f:80:50:c0:8e:66:f9:36:9c:6a:a0:13:86:3f:9d:
                    06:3b:73:fd:8f:19:67:22:c6:44:af:1f:b3:e6:4a:
                    7e:bb:97:66:69:b4:e9:81:d2:fa:ce:61:a9:09:ca:
                    c6:68:5f:37:67:a4:78:33:7b:08:54:37:ff:4f:e3:
                    8e:e0:87:25:36:f3:aa:5c:ac:08:37:ad:37:2a:26:
                    07:a5:55:9f:ca:5f:3e:f6:27:ac:be:7b:28:c8:ba:
                    82:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:40:CA:79:5C:94:95:10:08:5C:47:B2:E7:2E:8F:D7:41:F4:08:B6
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35352e302f32342d3234203d3e20343031343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:e8:cd:36:04:15:39:a4:44:7e:07:e2:aa:45:16:94:f3:66:
         0c:1e:e1:4f:67:0f:38:a6:0f:d0:8d:f7:b2:27:32:66:50:e5:
         19:6d:d0:32:a8:08:1b:56:80:9a:5c:2c:a1:1c:75:28:45:fc:
         00:4a:4a:30:f4:06:1b:01:24:6e:4a:c0:63:7b:f9:59:f1:d1:
         9c:b2:bc:1f:ec:48:86:dc:2e:25:fc:10:47:65:24:7c:3f:98:
         e2:83:5a:da:ea:9d:b6:83:7a:ba:92:39:ca:95:fa:95:f3:9a:
         ed:ef:ce:ae:be:a7:1e:01:aa:bf:ee:34:46:c2:5f:61:81:50:
         3b:c2:8b:41:b4:ae:26:38:10:ef:aa:59:d7:2d:a2:47:fa:09:
         88:ce:7f:8d:1b:48:13:20:0c:8b:6b:0f:ed:5f:c1:d6:7e:f4:
         35:41:20:a4:ad:fd:00:01:82:d5:73:0b:11:8c:e6:67:ba:bc:
         05:82:c7:ec:21:83:28:f4:45:04:8d:ba:a0:60:84:19:2e:f9:
         05:e7:ab:90:87:88:ba:24:8c:88:fd:ed:75:9c:7c:d1:39:fe:
         9d:98:f5:12:52:83:ff:00:ab:78:b3:d6:ef:6a:81:aa:a2:5d:
         5f:0b:5d:a1:4e:07:7a:07:50:c2:61:09:c2:de:38:5b:00:22:
         f1:ad:53:98
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUal5JttZlj3GdTII6gnphOQwMhHEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYxMDE3MTQzMTIxWhcNMjcxMDE2MTQzNjIx
WjAzMTEwLwYDVQQDEyhENDQwQ0E3OTVDOTQ5NTEwMDg1QzQ3QjJFNzJFOEZENzQx
RjQwOEI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPGA2AVZ9LVH
agrZmvp69ecL3eyHZYmJfTln20mvlCIqFsTsxkvMPX5leStTMisMDd/ka2gnDYG7
x38x/bvGxooP0eomEo5ucTJzMvY+kMPxW0wDmZZAT/TOGoZAz21X+N4cksQXLheI
7uqyJrgHMv4od97ZTLs4P2quIBldYUouHJ3yhgnBiybRgm5JoiXm0NNI1tkr6tVx
yuvxciV911K/F9t/gFDAjmb5NpxqoBOGP50GO3P9jxlnIsZErx+z5kp+u5dmabTp
gdL6zmGpCcrGaF83Z6R4M3sIVDf/T+OO4IclNvOqXKwIN603KiYHpVWfyl8+9ies
vnsoyLqCzwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFNRAynlclJUQCFxHsucuj9dB
9Ai2MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzNTJlMzczODJlMzUzNTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM0MzAzMTM0MzkzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNONzANBgkqhkiG9w0BAQsF
AAOCAQEApujNNgQVOaREfgfiqkUWlPNmDB7hT2cPOKYP0I33sicyZlDlGW3QMqgI
G1aAmlwsoRx1KEX8AEpKMPQGGwEkbkrAY3v5WfHRnLK8H+xIhtwuJfwQR2UkfD+Y
4oNa2uqdtoN6upI5ypX6lfOa7e/Orr6nHgGqv+40RsJfYYFQO8KLQbSuJjgQ76pZ
1y2iR/oJiM5/jRtIEyAMi2sP7V/B1n70NUEgpK39AAGC1XMLEYzmZ7q8BYLH7CGD
KPRFBI26oGCEGS75BeerkIeIuiSMiP3tdZx80Tn+nZj1ElKD/wCreLPW72qBqqJd
XwtdoU4HegdQwmEJwt44WwAi8a1TmA==
-----END CERTIFICATE-----
Generated at Fri Oct 23 01:23:28 2026 by rpki-client