Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
File:                     3139382e33372e3131302e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          Fgv5FNXrvCvhf7Qdc3yaXbdxLfkLKkLLYig6POev9Bc=
Subject key identifier:   74:2A:DF:5E:21:4E:FD:CF:FA:B5:0E:A6:7B:E2:4A:19:F1:A9:C4:57
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       294A48AEC4850A3AF0AAEA47AD62A16B3436811C
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
Signing time:             Mon 03 Aug 2026 13:36:09 +0000
ROA not before:           Mon 03 Aug 2026 13:31:09 +0000
ROA not after:            Mon 02 Aug 2027 13:36:09 +0000
asID:                     53340
IP address blocks:        198.37.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 13:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:4a:48:ae:c4:85:0a:3a:f0:aa:ea:47:ad:62:a1:6b:34:36:81:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug  3 13:31:09 2026 GMT
            Not After : Aug  2 13:36:09 2027 GMT
        Subject: CN=742ADF5E214EFDCFFAB50EA67BE24A19F1A9C457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:9f:15:a8:67:1a:87:cb:a8:b7:e9:f4:d1:
                    ce:b8:c0:81:f7:8b:0f:b6:94:0f:c4:7a:d2:8e:68:
                    9d:a5:4e:8d:ed:a4:58:c7:c5:49:c9:82:a3:b7:7b:
                    3d:97:52:31:90:bb:8a:e4:95:f4:84:9f:c0:2b:f3:
                    8b:64:0f:06:bc:79:f9:a2:30:3b:87:40:f9:30:99:
                    69:4b:02:a3:bc:36:e2:28:e0:11:a2:2a:4d:21:46:
                    1d:68:d3:56:93:67:1b:f6:06:61:63:98:ea:43:f6:
                    19:9a:86:d6:09:12:d5:ff:3d:5c:3b:d6:af:43:39:
                    62:91:4d:1b:42:18:b5:6a:59:80:6d:7a:6a:a9:f5:
                    45:c5:b2:a3:05:99:a3:c0:1f:83:6d:a1:32:36:c9:
                    25:8b:97:d6:06:2b:c2:ba:f6:d1:21:ed:f2:97:1d:
                    a3:d1:35:8a:29:dc:d9:73:99:88:9b:c6:2c:1b:0c:
                    51:d1:08:c5:85:88:a4:6b:76:fd:67:08:1a:f6:a3:
                    4d:8d:6e:f3:53:18:a0:08:d3:3a:ce:30:a1:41:9f:
                    b6:89:94:de:ff:23:b7:da:f2:81:c2:51:bf:b8:0f:
                    10:b9:dd:1e:be:0b:61:93:9f:42:97:b2:eb:b5:0a:
                    6a:01:30:b4:df:14:e7:2b:07:f4:2f:5e:3e:b4:bc:
                    ef:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:2A:DF:5E:21:4E:FD:CF:FA:B5:0E:A6:7B:E2:4A:19:F1:A9:C4:57
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:43:07:5d:0d:34:f5:3a:eb:4f:20:d4:04:2d:c2:59:99:1e:
         b4:e6:5e:48:cc:6e:cb:8c:49:5f:a0:84:2b:09:30:ce:5a:c3:
         76:5b:a3:9e:7c:25:6f:8d:ff:40:54:30:51:6d:56:70:c5:e7:
         ac:90:ca:d8:31:fb:04:e8:a7:98:85:6c:7e:fa:75:9b:e4:08:
         3e:ab:6a:37:12:e1:00:c6:8b:93:e0:72:af:db:0c:fd:c1:6b:
         fe:97:86:49:47:8a:02:1f:48:5e:5e:24:e2:6b:ba:ec:ff:f4:
         fa:a1:84:47:b8:46:ab:70:e8:e4:ba:9d:94:df:c7:6b:9d:6b:
         c2:da:c6:c1:8a:82:48:79:91:5c:f4:af:e4:62:3a:b2:f6:63:
         9b:77:85:0f:57:47:6b:34:f0:a6:f8:e9:3c:1d:28:ac:5e:14:
         6c:3d:9e:73:cc:07:c4:f5:88:23:81:4e:b1:fd:14:5d:2b:44:
         db:34:77:bc:2c:d3:d9:5c:d9:a3:d9:76:f4:8a:5f:59:91:eb:
         16:3b:07:66:31:7e:6e:46:17:51:0d:31:1d:b2:c9:9a:bf:56:
         c8:1c:d5:25:4a:0a:0f:fb:9b:5b:c5:43:ab:ce:11:af:66:b0:
         bf:a7:48:82:35:3a:df:ab:a5:bd:45:5b:38:bf:e0:f6:f3:fc:
         1d:0a:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:44:42 2026 by rpki-client