Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e2036303739.roa
File:                     3139352e37382e35372e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          qrf82rNfHWlxen38eVDiO1Z3DO8pxav7cioHzrdgRRg=
Subject key identifier:   65:60:C9:E4:9C:BB:E2:6F:F9:FB:94:4F:31:D9:13:48:AC:A3:27:B5
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       39AA3BEDE116AF908277EA8C928FB3B9BBA88AB2
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e2036303739.roa
Signing time:             Mon 06 Jul 2026 18:22:23 +0000
ROA not before:           Mon 06 Jul 2026 18:17:23 +0000
ROA not after:            Mon 05 Jul 2027 18:22:23 +0000
asID:                     6079
IP address blocks:        195.78.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:aa:3b:ed:e1:16:af:90:82:77:ea:8c:92:8f:b3:b9:bb:a8:8a:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jul  6 18:17:23 2026 GMT
            Not After : Jul  5 18:22:23 2027 GMT
        Subject: CN=6560C9E49CBBE26FF9FB944F31D91348ACA327B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:23:d6:e8:6a:b5:bf:0b:cc:ec:0e:82:ff:8f:
                    3c:58:0b:f6:1c:54:82:d3:e8:ae:b8:23:60:f9:45:
                    c0:4b:31:a9:6b:dc:dc:90:f5:89:30:44:bb:46:98:
                    09:9c:f7:83:1c:ce:35:d4:0c:d9:87:81:77:cf:72:
                    88:2f:ff:8f:47:e9:14:1e:f8:e2:de:24:16:9b:e6:
                    98:a2:fd:64:fe:dd:f3:74:ef:03:3b:9d:4e:d7:8c:
                    c1:e3:17:1a:d4:ac:72:db:fb:52:1a:79:1d:2c:65:
                    3d:6f:07:35:53:f7:aa:f9:ae:49:b7:21:c9:6c:7f:
                    55:1c:e8:7f:64:7f:54:22:dd:a2:63:3e:00:47:1a:
                    60:10:1c:27:8b:ad:83:69:da:04:4a:64:80:19:9a:
                    f5:20:23:b6:26:d5:13:0f:d4:1c:6c:46:e8:ff:d4:
                    fd:07:ef:8d:36:61:c3:88:e7:fb:46:19:b5:0f:df:
                    0e:0b:ca:3a:58:d6:5f:c4:c0:5e:f0:2d:6b:59:14:
                    6c:f3:26:cf:69:78:86:f5:4f:1e:d2:57:52:eb:4e:
                    53:b3:8f:cb:71:ab:85:d1:08:c4:b6:c2:9a:22:e3:
                    9f:e7:10:9e:c2:34:44:6f:08:b4:b3:f3:02:8c:e6:
                    8b:47:b1:b7:9e:1b:bb:94:39:c1:be:ad:f3:62:27:
                    64:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:60:C9:E4:9C:BB:E2:6F:F9:FB:94:4F:31:D9:13:48:AC:A3:27:B5
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:be:97:44:70:b5:56:ef:e9:42:da:78:f6:f4:c1:6a:3a:4a:
         53:11:ea:e3:7d:cd:fa:92:31:06:49:7d:d7:07:a9:b6:61:86:
         f9:37:e2:d9:b7:ba:bd:07:29:5b:e2:de:df:25:5c:be:9a:96:
         82:5c:9c:08:6a:94:d0:a3:ea:53:0a:e2:eb:cc:70:e8:8e:a9:
         5d:c7:8b:15:b8:22:d8:c3:7f:53:ea:65:00:f7:c0:a7:13:b6:
         9c:7a:89:b8:cd:14:13:33:aa:e5:97:5a:58:75:8d:88:0a:68:
         e5:e0:13:fe:98:34:6c:4e:5a:c0:71:20:3f:b0:bf:2b:25:ee:
         5e:c0:b5:67:87:09:18:d3:77:15:1c:a9:05:d5:2f:9e:5f:bf:
         dc:94:ad:8a:8b:d9:92:d0:67:e9:3e:5a:c3:90:2e:3f:72:b8:
         a3:a1:13:bc:38:6a:b7:ba:0b:91:e9:e9:f9:2d:08:dd:c6:56:
         9c:85:98:af:a3:9e:79:f4:42:9b:61:aa:98:b2:04:ff:ee:3e:
         80:cc:06:88:24:6c:5f:d8:0a:dc:b6:b1:36:de:e6:1e:65:04:
         56:dc:2b:41:b7:f7:f8:4d:37:49:ee:54:25:7a:3c:4f:34:92:
         48:e3:68:11:ab:f2:26:eb:ba:bb:47:00:27:ed:af:23:c0:6a:
         bc:97:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:27 2026 by rpki-client