Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203134393335.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e203134393335.roa (raw, json)
Hash identifier:          /XU8Xs4sMorz7RGCQDUlGgX26Up+TiFwv1DLwX++FCM=
Subject key identifier:   C9:EA:0F:57:92:A5:9A:EB:2C:53:8E:10:3C:74:0A:75:D6:CD:C0:0F
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       20F00D29661EDD11BF5B9C9390D6AD66C7AAE0E3
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203134393335.roa
Signing time:             Wed 17 Jun 2026 14:36:09 +0000
ROA not before:           Wed 17 Jun 2026 14:31:09 +0000
ROA not after:            Wed 16 Jun 2027 14:36:09 +0000
asID:                     14935
IP address blocks:        198.37.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:58:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:f0:0d:29:66:1e:dd:11:bf:5b:9c:93:90:d6:ad:66:c7:aa:e0:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun 17 14:31:09 2026 GMT
            Not After : Jun 16 14:36:09 2027 GMT
        Subject: CN=C9EA0F5792A59AEB2C538E103C740A75D6CDC00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:00:2a:39:7f:ba:1c:24:bc:f8:35:a6:42:
                    0c:9e:bd:0a:bb:b5:58:aa:48:6f:1b:80:f4:93:77:
                    6b:3e:b8:7c:5f:d9:fe:a5:5c:f2:be:75:89:e0:fc:
                    32:e9:aa:4c:2e:7c:86:d1:bb:f8:20:f3:c3:7d:f4:
                    58:a7:f7:43:42:c2:f5:68:7d:2e:8c:a1:45:4a:a1:
                    e8:55:c8:8e:54:2d:ba:22:de:3d:4a:07:37:dd:85:
                    e1:6a:09:09:53:ab:b6:a9:79:7c:dc:2b:cc:ca:12:
                    b7:f0:9d:e9:8a:b6:92:07:f9:0f:94:83:29:5b:4e:
                    02:30:78:f0:65:5a:72:01:5f:2f:32:83:01:f6:e3:
                    7d:68:35:cd:cd:28:22:33:53:92:1f:c5:29:96:e7:
                    58:cd:5d:34:a2:99:49:70:bc:b7:d3:c5:3a:4a:e3:
                    b3:4a:b1:54:fe:b0:7a:ca:d8:0a:ec:a8:b0:02:18:
                    db:d5:ce:61:1a:f1:11:7c:2b:b7:7e:4a:6f:ec:b6:
                    ad:97:e7:e6:2a:7c:06:c4:ec:71:79:72:05:52:d0:
                    65:79:cf:a7:ad:01:cf:a4:fd:03:b6:0a:db:a1:44:
                    47:2b:54:4c:8d:a7:d7:ab:7e:af:14:ad:70:90:e1:
                    79:9f:f1:90:cb:08:28:c1:c2:89:d1:1f:22:ce:45:
                    63:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EA:0F:57:92:A5:9A:EB:2C:53:8E:10:3C:74:0A:75:D6:CD:C0:0F
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203134393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:35:e9:0f:a2:99:ed:25:e4:d5:d4:0b:53:52:f5:bc:cd:77:
         c8:ef:67:fe:6f:f0:64:02:ae:1e:f7:73:2e:1d:9e:8f:48:fc:
         7a:3d:20:e0:16:24:c1:25:78:cd:65:7d:11:ef:01:49:36:d5:
         1a:a9:e3:ea:c2:ad:66:33:f9:8d:0a:9e:e8:f0:1c:82:2d:e3:
         1e:c9:f9:54:6c:50:98:6a:46:67:9e:8c:7a:eb:bd:18:86:69:
         e6:fb:e6:eb:78:1f:0f:7f:7c:57:1f:1d:6c:8a:16:b6:ba:50:
         9c:3b:f2:56:03:9e:46:1c:8e:51:e2:c0:f2:91:ae:cd:f4:26:
         4e:2c:58:82:10:22:d5:66:1f:04:b3:0a:c2:40:09:8e:6f:76:
         41:ba:44:ca:fc:bf:f8:84:4d:a1:0b:38:ca:53:fa:10:30:c6:
         85:08:ca:86:3c:8d:be:08:38:d1:cc:e1:64:08:8b:07:f6:83:
         7e:1d:d9:02:d9:9f:93:41:61:30:70:0f:28:77:e0:fb:a7:01:
         55:5a:2e:82:62:eb:40:f1:3a:5e:ca:88:a2:8c:42:7f:4d:c9:
         99:11:0e:da:15:bc:c3:50:9e:44:94:cc:b9:a7:ee:03:a2:b9:
         1e:50:72:11:50:9f:6e:c5:3a:89:2a:1d:ca:04:b2:6d:6a:8f:
         1b:8d:c2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:32:00 2026 by rpki-client