Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20343032323336.roa
File:                     3139352e37382e35372e302f32342d3234203d3e20343032323336.roa (raw, json)
Hash identifier:          EY606p610JCFc/3maBL43tn2sFKcWU4yeeeyx04wjxA=
Subject key identifier:   8F:6A:7B:62:6E:1D:49:C0:23:FA:CC:8A:0F:55:B5:68:31:7E:8F:C2
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5687B440849F6866F72A12A019108EC55059CEC9
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20343032323336.roa
Signing time:             Mon 06 Jul 2026 18:22:23 +0000
ROA not before:           Mon 06 Jul 2026 18:17:23 +0000
ROA not after:            Mon 05 Jul 2027 18:22:23 +0000
asID:                     402236
IP address blocks:        195.78.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:87:b4:40:84:9f:68:66:f7:2a:12:a0:19:10:8e:c5:50:59:ce:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jul  6 18:17:23 2026 GMT
            Not After : Jul  5 18:22:23 2027 GMT
        Subject: CN=8F6A7B626E1D49C023FACC8A0F55B568317E8FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1c:64:10:94:d4:cf:ea:6f:1f:54:79:51:43:
                    ca:a1:45:f7:4f:6a:83:a4:3f:8b:f5:1d:aa:74:a3:
                    d4:9e:a3:e7:6b:f2:b9:f7:17:cc:61:9c:29:26:a8:
                    a3:4c:d5:8b:73:a8:77:58:ed:17:c3:5e:cc:f3:a4:
                    8a:42:c0:5b:2b:6c:d6:94:85:fd:99:67:3e:f4:a6:
                    51:65:28:d9:15:cc:c7:67:84:19:d8:bf:b1:45:c1:
                    1a:55:06:d0:22:f0:0f:be:25:25:12:2d:54:19:e7:
                    13:7d:63:3d:df:68:c2:3d:79:87:fa:8b:8a:d4:1f:
                    e3:b2:8f:67:dc:a4:85:1c:26:c9:79:b0:2d:27:14:
                    2d:2b:6c:fa:eb:e6:24:9e:d2:d7:53:94:63:47:76:
                    77:41:d7:38:9f:24:9a:44:11:65:62:cb:13:b1:88:
                    e8:76:67:ac:50:c4:78:6c:30:00:d6:79:43:dd:84:
                    3a:7a:c6:f3:78:9c:60:de:50:53:0d:18:d5:8b:3b:
                    93:3d:38:f9:4d:58:74:46:63:2a:98:7b:6c:eb:08:
                    a3:73:8d:85:2a:30:0c:dc:9b:8f:14:9d:37:ce:b1:
                    22:64:21:03:54:c9:2a:e9:39:b7:e6:82:db:24:49:
                    4f:57:f7:1c:32:b2:8b:a2:c6:b4:94:a6:76:70:de:
                    9e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6A:7B:62:6E:1D:49:C0:23:FA:CC:8A:0F:55:B5:68:31:7E:8F:C2
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20343032323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:3e:49:2a:c6:71:be:28:50:ff:0d:7a:2c:84:6c:f6:ce:94:
         3f:e2:8c:4e:47:f9:71:71:c3:5b:be:75:b8:f1:d0:ac:d5:ad:
         2e:47:bb:b7:e8:3a:67:3e:c7:05:3b:8b:f9:86:2a:94:61:49:
         82:78:d0:10:3c:5d:e1:50:ef:9d:04:5c:5a:24:03:a0:5d:95:
         b5:a8:09:99:52:fe:28:14:76:2c:34:cd:f3:b5:77:bc:a6:5d:
         04:6e:47:a7:fa:ab:d6:e5:6d:f2:7d:b8:20:ec:86:2e:bd:7a:
         55:04:0c:f4:ca:ab:f9:03:2c:ca:7f:f5:da:8a:e5:e3:7b:51:
         e8:f0:f6:63:1d:c1:3e:c9:76:c1:2f:4b:0e:96:4b:95:01:fc:
         5f:53:ab:15:19:60:ee:61:65:42:b5:56:20:ef:d2:55:a8:bc:
         4a:c8:b6:af:5e:9f:3e:0b:80:4c:1a:e3:7d:39:1c:0f:17:84:
         3c:56:c1:b0:3b:60:0f:4b:88:02:00:8a:94:bd:bb:04:eb:fb:
         60:c3:51:96:53:d0:fc:6d:aa:a3:a6:b2:c2:d7:f0:53:fb:10:
         02:6b:2b:95:27:d0:e0:2d:04:90:fe:25:d1:ce:9d:87:51:4f:
         f9:78:0c:b1:b3:ad:c4:f4:3f:d8:d4:a6:bc:a6:85:15:ac:1e:
         5c:72:7f:eb
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUVoe0QISfaGb3KhKgGRCOxVBZzskwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNzA2MTgxNzIzWhcNMjcwNzA1MTgyMjIz
WjAzMTEwLwYDVQQDEyg4RjZBN0I2MjZFMUQ0OUMwMjNGQUNDOEEwRjU1QjU2ODMx
N0U4RkMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRxkEJTUz+pv
H1R5UUPKoUX3T2qDpD+L9R2qdKPUnqPna/K59xfMYZwpJqijTNWLc6h3WO0Xw17M
86SKQsBbK2zWlIX9mWc+9KZRZSjZFczHZ4QZ2L+xRcEaVQbQIvAPviUlEi1UGecT
fWM932jCPXmH+ouK1B/jso9n3KSFHCbJebAtJxQtK2z66+YkntLXU5RjR3Z3Qdc4
nySaRBFlYssTsYjodmesUMR4bDAA1nlD3YQ6esbzeJxg3lBTDRjVizuTPTj5TVh0
RmMqmHts6wijc42FKjAM3JuPFJ03zrEiZCEDVMkq6Tm35oLbJElPV/ccMrKLosa0
lKZ2cN6eywIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFI9qe2JuHUnAI/rMig9VtWgx
fo/CMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzNTJlMzczODJlMzUzNzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM0MzAzMjMyMzMzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMNOOTANBgkqhkiG9w0BAQsF
AAOCAQEAXj5JKsZxvihQ/w16LIRs9s6UP+KMTkf5cXHDW751uPHQrNWtLke7t+g6
Zz7HBTuL+YYqlGFJgnjQEDxd4VDvnQRcWiQDoF2VtagJmVL+KBR2LDTN87V3vKZd
BG5Hp/qr1uVt8n24IOyGLr16VQQM9Mqr+QMsyn/12orl43tR6PD2Yx3BPsl2wS9L
DpZLlQH8X1OrFRlg7mFlQrVWIO/SVai8Ssi2r16fPguATBrjfTkcDxeEPFbBsDtg
D0uIAgCKlL27BOv7YMNRllPQ/G2qo6aywtfwU/sQAmsrlSfQ4C0EkP4l0c6dh1FP
+XgMsbOtxPQ/2NSmvKaFFaweXHJ/6w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:00:32 2026 by rpki-client