Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e203133353337.roa
File:                     3139352e37382e35362e302f32342d3234203d3e203133353337.roa (raw, json)
Hash identifier:          QfkEXK+UDeZIK3iuyU9A/UsySpvxOA28Ltdpm6BGiIg=
Subject key identifier:   07:78:BC:C6:30:A0:9A:0D:15:C6:FA:DF:B9:77:A5:F4:54:64:8F:70
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       645D7B2DE0322948337A5DF6A96CF7035A5C5AEF
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e203133353337.roa
Signing time:             Mon 24 Aug 2026 09:45:16 +0000
ROA not before:           Mon 24 Aug 2026 09:40:16 +0000
ROA not after:            Mon 23 Aug 2027 09:45:16 +0000
asID:                     13537
IP address blocks:        195.78.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 13:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:5d:7b:2d:e0:32:29:48:33:7a:5d:f6:a9:6c:f7:03:5a:5c:5a:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 24 09:40:16 2026 GMT
            Not After : Aug 23 09:45:16 2027 GMT
        Subject: CN=0778BCC630A09A0D15C6FADFB977A5F454648F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:88:dd:70:3e:c8:3c:29:77:0c:34:fe:bf:ba:
                    96:cb:d4:35:b7:20:c2:cf:d8:80:17:d7:cb:25:8b:
                    92:c4:41:0b:72:90:32:ea:83:35:5d:92:a6:4f:39:
                    57:2e:f6:bb:72:d4:4e:06:59:a1:76:3e:d9:d6:ce:
                    bb:74:07:fa:c2:a8:14:13:47:90:9b:20:de:3c:ed:
                    93:31:91:07:ca:ad:2d:f8:d0:2c:e3:62:a5:6a:34:
                    8a:a3:b2:08:8f:89:8f:fa:2d:90:b6:ef:d5:4d:61:
                    2e:9c:44:e5:fc:b9:30:c1:48:dd:1a:27:67:72:93:
                    af:22:60:ca:c5:54:8f:c8:51:e5:df:e0:0c:1d:a1:
                    84:7d:f1:14:ed:ad:26:1d:8a:95:fc:e7:e0:3b:98:
                    d0:ad:5f:aa:b8:5f:be:75:43:ad:5a:d4:b6:50:bd:
                    48:a7:ed:a8:29:74:91:e0:2d:de:ff:83:a6:2b:58:
                    a3:fd:e3:3d:af:ea:9e:0e:d8:da:cb:1e:cf:8e:2e:
                    bf:f1:d3:9e:ff:a1:63:d0:5d:82:aa:b0:8e:33:d4:
                    19:cd:0b:66:80:fd:24:d3:63:5b:66:ad:f9:2c:42:
                    88:b5:88:8e:52:8d:0d:fd:28:30:df:8c:c7:6e:75:
                    7e:79:02:df:67:1c:e4:0a:77:53:a9:58:43:fe:28:
                    00:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:78:BC:C6:30:A0:9A:0D:15:C6:FA:DF:B9:77:A5:F4:54:64:8F:70
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e203133353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:88:ef:0a:09:34:07:6a:6c:4a:89:04:a7:56:d6:08:16:35:
         7a:0c:5b:2c:5a:3e:e3:32:12:6f:ce:ee:09:e1:08:9c:53:90:
         00:9d:93:4e:3a:da:5b:0d:c3:2c:66:08:9b:79:7f:b9:63:9a:
         cf:dc:7f:93:f9:1c:86:c7:16:87:cc:25:d6:73:5c:e7:9c:a5:
         41:b9:8a:1c:f8:0c:4d:88:92:a5:c1:d7:22:a1:8a:6a:a6:9d:
         2b:72:db:f6:4a:5d:9a:ea:31:0b:79:c4:dd:cd:00:aa:01:e7:
         50:bc:70:2d:61:0e:59:86:11:2a:82:36:ba:87:f4:aa:08:b6:
         4f:d6:c1:cc:79:0c:50:7f:a8:31:b4:30:78:b5:4a:f8:cf:41:
         6f:8e:af:cd:de:e6:8b:03:9b:71:ca:37:79:35:46:a5:41:34:
         d4:13:2d:1b:9f:4a:30:2e:e5:c1:23:8f:ce:5c:5c:51:b4:3c:
         dc:74:82:78:99:dc:bb:22:ee:eb:99:61:91:3b:a5:8f:60:ff:
         a5:dd:59:e5:18:00:0b:d7:90:c9:bf:eb:f6:4d:a3:b3:18:e2:
         73:e7:03:b1:33:ad:fe:87:8f:1a:16:2e:34:f7:fb:41:e3:f2:
         7d:53:20:ca:c8:33:75:25:ab:64:29:6f:1d:94:15:01:96:18:
         28:d0:eb:43
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUZF17LeAyKUgzel32qWz3A1pcWu8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwODI0MDk0MDE2WhcNMjcwODIzMDk0NTE2
WjAzMTEwLwYDVQQDEygwNzc4QkNDNjMwQTA5QTBEMTVDNkZBREZCOTc3QTVGNDU0
NjQ4RjcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4YjdcD7IPCl3
DDT+v7qWy9Q1tyDCz9iAF9fLJYuSxEELcpAy6oM1XZKmTzlXLva7ctROBlmhdj7Z
1s67dAf6wqgUE0eQmyDePO2TMZEHyq0t+NAs42KlajSKo7IIj4mP+i2Qtu/VTWEu
nETl/LkwwUjdGidncpOvImDKxVSPyFHl3+AMHaGEffEU7a0mHYqV/OfgO5jQrV+q
uF++dUOtWtS2UL1Ip+2oKXSR4C3e/4OmK1ij/eM9r+qeDtjayx7Pji6/8dOe/6Fj
0F2CqrCOM9QZzQtmgP0k02NbZq35LEKItYiOUo0N/Sgw34zHbnV+eQLfZxzkCndT
qVhD/igA0QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAd4vMYwoJoNFcb637l3pfRU
ZI9wMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzNTJlMzczODJlMzUzNjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMxMzMzNTMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDTjgwDQYJKoZIhvcNAQELBQAD
ggEBAI2I7woJNAdqbEqJBKdW1ggWNXoMWyxaPuMyEm/O7gnhCJxTkACdk0462lsN
wyxmCJt5f7ljms/cf5P5HIbHFofMJdZzXOecpUG5ihz4DE2IkqXB1yKhimqmnSty
2/ZKXZrqMQt5xN3NAKoB51C8cC1hDlmGESqCNrqH9KoItk/Wwcx5DFB/qDG0MHi1
SvjPQW+Or83e5osDm3HKN3k1RqVBNNQTLRufSjAu5cEjj85cXFG0PNx0gniZ3Lsi
7uuZYZE7pY9g/6XdWeUYAAvXkMm/6/ZNo7MY4nPnA7Ezrf6HjxoWLjT3+0Hj8n1T
IMrIM3Ulq2Qpbx2UFQGWGCjQ60M=
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:13 2026 by rpki-client