Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e20383334.roa
File:                     3139352e37382e35362e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          uEaZeSMgJ03N/7di8KFTsUhBd1vGDE5lL31ZnBTRavg=
Subject key identifier:   AC:C9:F4:B8:D4:62:E9:F1:AA:AE:FD:9D:D2:E4:1F:C9:4D:F3:A5:BF
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       2BD700303ABA423669E117DFC28D421E52B39412
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e20383334.roa
Signing time:             Tue 26 Aug 2025 00:02:54 +0000
ROA not before:           Mon 25 Aug 2025 23:57:54 +0000
ROA not after:            Tue 25 Aug 2026 00:02:54 +0000
asID:                     834
IP address blocks:        195.78.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 10:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d7:00:30:3a:ba:42:36:69:e1:17:df:c2:8d:42:1e:52:b3:94:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 25 23:57:54 2025 GMT
            Not After : Aug 25 00:02:54 2026 GMT
        Subject: CN=ACC9F4B8D462E9F1AAAEFD9DD2E41FC94DF3A5BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6e:d1:e6:3f:c5:ee:36:ab:7e:19:37:bc:00:
                    73:f2:89:29:43:72:0d:c8:18:40:f8:91:b2:7b:2e:
                    21:4b:ce:01:17:16:f8:11:6d:13:c5:20:16:52:95:
                    7c:40:83:78:02:3a:3e:24:b9:92:97:70:5c:88:55:
                    97:09:68:d6:89:61:38:88:24:4d:76:a4:c8:05:42:
                    79:2f:b4:91:7d:6f:88:ed:04:66:97:e8:34:08:49:
                    26:26:2e:fe:65:37:dd:95:77:bf:a7:ed:dd:87:6e:
                    94:23:72:f3:70:32:10:c3:25:42:4c:ca:12:51:c5:
                    6a:f6:78:3e:cd:80:ff:47:17:89:b4:97:0b:fd:e7:
                    88:eb:e6:92:f9:e0:f9:83:b6:87:26:76:55:cb:11:
                    cc:73:31:4d:82:6d:c2:5e:36:a5:ae:36:b1:35:1c:
                    69:80:f3:8c:73:5d:a6:75:f5:ba:c3:4a:54:6c:63:
                    52:df:34:ad:f8:4b:0a:82:b9:72:90:f3:02:a8:6f:
                    4e:cd:e2:07:1d:ce:fe:e5:39:39:50:81:ef:55:6d:
                    4a:96:3d:f5:ed:46:67:41:6d:27:4c:62:68:ee:15:
                    cc:34:61:43:05:56:b3:4c:46:17:38:06:fe:99:a4:
                    35:8c:ae:d5:bf:ac:7e:18:5a:56:46:a5:87:45:ae:
                    8e:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C9:F4:B8:D4:62:E9:F1:AA:AE:FD:9D:D2:E4:1F:C9:4D:F3:A5:BF
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:1d:d3:ae:e0:40:15:e6:0d:0e:70:76:0b:35:50:df:d1:a7:
         fe:4c:d2:c3:e6:95:68:9f:c0:4c:a1:d4:9e:cb:bc:f7:2c:a6:
         d3:ef:25:0d:d4:92:84:ef:40:0d:31:60:03:77:5a:89:fe:e4:
         36:81:4f:c7:66:17:88:81:2b:3d:51:1b:9f:9d:5a:eb:51:50:
         b6:dd:47:4b:b9:c6:f4:ce:21:80:48:25:f7:a9:31:78:bf:23:
         a6:b1:7e:c0:29:ea:af:be:74:b9:ad:53:0b:89:67:1d:27:0e:
         2f:79:47:4c:41:78:ee:c7:8a:9c:f8:85:bd:f8:61:4b:c3:f6:
         89:87:53:61:8c:f1:3b:cd:c0:8b:cd:e2:78:5b:d6:82:48:47:
         11:d7:19:94:25:64:f1:fd:d6:1b:bf:4d:14:35:e5:d4:b2:da:
         8d:9c:a2:f7:16:bb:81:a3:a0:c5:f0:68:3d:96:ba:35:20:58:
         a0:f9:1a:4e:4d:2c:3d:5e:ab:e7:f4:43:04:77:1d:67:17:e3:
         b0:25:95:9e:8d:57:cb:af:0d:84:5f:07:ea:bf:27:1d:7f:05:
         b5:fa:0f:3d:68:34:1d:64:87:84:3b:5a:fc:5d:bc:2e:d1:f7:
         04:d5:01:a5:3d:85:28:55:82:93:99:6a:f8:c4:92:8f:b1:75:
         77:e1:11:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 20:00:09 2025 by rpki-client