Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e203533333430.roa (raw, json)
Hash identifier:          sShpUaOfVapSVK+5+q/o2d8Aq1visb338KBLHUQYgMc=
Subject key identifier:   61:07:10:C0:2F:D9:B2:62:B1:59:E5:2D:7D:24:FA:E1:30:A0:75:B2
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0BF5258617601D0BF13ECC7B90AB1F868E11711C
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa
Signing time:             Wed 17 Jun 2026 15:36:09 +0000
ROA not before:           Wed 17 Jun 2026 15:31:09 +0000
ROA not after:            Wed 16 Jun 2027 15:36:09 +0000
asID:                     53340
IP address blocks:        198.37.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:f5:25:86:17:60:1d:0b:f1:3e:cc:7b:90:ab:1f:86:8e:11:71:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun 17 15:31:09 2026 GMT
            Not After : Jun 16 15:36:09 2027 GMT
        Subject: CN=610710C02FD9B262B159E52D7D24FAE130A075B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d0:ab:9d:f6:bd:4f:4a:b2:de:89:95:99:18:
                    2a:d7:ae:d6:39:41:ae:58:54:0e:b1:d0:bc:07:3f:
                    b3:dc:ec:de:1d:b5:e5:3a:b8:80:c6:a6:e4:98:56:
                    11:18:60:34:0b:39:46:76:ed:78:c9:c8:04:e2:c9:
                    6e:40:6c:a3:be:2b:30:b5:a0:9c:34:5d:60:1b:9b:
                    4d:7a:dd:3f:1c:d0:f2:91:b9:1a:0f:31:d5:5f:5c:
                    b9:eb:01:06:db:10:88:5c:27:eb:2a:f9:3d:1d:62:
                    fb:fc:86:4c:85:38:16:56:34:71:05:42:a9:29:56:
                    9b:f6:34:f9:4e:23:f1:4e:56:05:e9:f9:ed:e9:11:
                    6e:d1:8e:af:1a:5e:cd:b0:8d:a7:2c:66:bc:88:c2:
                    ae:70:87:2f:68:76:a6:95:85:cb:7a:fc:97:72:80:
                    ce:c9:7b:74:42:4e:61:e8:dc:04:88:3f:46:d5:07:
                    72:a5:7a:25:ad:a6:76:8b:b1:83:4b:5c:16:9e:b4:
                    de:65:d6:fb:88:0c:ea:48:d2:65:79:01:15:30:14:
                    22:a2:ad:a1:75:b6:b8:1e:67:96:66:17:63:ff:6a:
                    87:30:fa:15:73:59:e1:32:47:e5:66:73:84:3c:38:
                    12:91:e0:26:51:7e:e7:13:44:b8:ac:04:8b:2d:f5:
                    79:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:07:10:C0:2F:D9:B2:62:B1:59:E5:2D:7D:24:FA:E1:30:A0:75:B2
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:7c:de:c2:52:df:f7:fb:27:b9:a0:61:b4:16:d3:5c:a7:98:
         73:c1:22:5f:3a:8a:a9:ad:6b:eb:e0:d4:6f:75:96:46:71:3f:
         b3:1c:4c:d8:7b:a9:49:6e:dd:3d:3e:44:a2:a2:36:59:17:c9:
         f0:a3:8b:3a:de:3a:22:6c:f4:77:2f:b7:df:c6:ff:ee:fc:31:
         eb:76:1c:f1:26:8b:05:86:33:70:c6:51:e4:12:c4:84:2b:e6:
         b8:ce:04:20:1d:2d:31:89:e2:67:49:b6:26:16:07:2f:fc:88:
         f6:9e:e3:51:8a:8e:25:1d:e1:a2:f4:bd:8e:6b:e5:bf:b3:ab:
         92:70:eb:92:d1:d8:9f:46:4e:7c:97:72:3d:04:a0:d4:a9:57:
         a7:0f:b2:20:c1:af:93:f3:5c:29:4f:13:d2:e9:28:8f:4d:92:
         d7:b2:88:c4:77:77:68:0c:0e:4a:5e:0e:34:b3:15:b8:91:a0:
         32:e8:89:32:07:ca:82:f7:e3:0a:7b:91:c5:10:72:95:bd:32:
         8b:98:ef:2e:27:e9:c6:4a:4d:34:65:e3:a6:9e:bc:6c:77:29:
         17:9e:42:c1:8b:33:02:45:2d:b5:80:67:f8:24:14:0b:a0:4f:
         be:c1:b7:55:94:2c:fc:ff:fd:df:f2:0c:49:3f:c1:ba:85:ca:
         9a:48:eb:a2
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUC/UlhhdgHQvxPsx7kKsfho4RcRwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNjE3MTUzMTA5WhcNMjcwNjE2MTUzNjA5
WjAzMTEwLwYDVQQDEyg2MTA3MTBDMDJGRDlCMjYyQjE1OUU1MkQ3RDI0RkFFMTMw
QTA3NUIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NCrnfa9T0qy
3omVmRgq167WOUGuWFQOsdC8Bz+z3OzeHbXlOriAxqbkmFYRGGA0CzlGdu14ycgE
4sluQGyjviswtaCcNF1gG5tNet0/HNDykbkaDzHVX1y56wEG2xCIXCfrKvk9HWL7
/IZMhTgWVjRxBUKpKVab9jT5TiPxTlYF6fnt6RFu0Y6vGl7NsI2nLGa8iMKucIcv
aHamlYXLevyXcoDOyXt0Qk5h6NwEiD9G1QdypXolraZ2i7GDS1wWnrTeZdb7iAzq
SNJleQEVMBQioq2hdba4HmeWZhdj/2qHMPoVc1nhMkflZnOEPDgSkeAmUX7nE0S4
rASLLfV5jQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFGEHEMAv2bJisVnlLX0k+uEw
oHWyMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzEzMTMyMmUzMDJmMzIzMDJkMzIz
NDIwM2QzZTIwMzUzMzMzMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMYlcDANBgkqhkiG9w0BAQsF
AAOCAQEAJXzewlLf9/snuaBhtBbTXKeYc8EiXzqKqa1r6+DUb3WWRnE/sxxM2Hup
SW7dPT5EoqI2WRfJ8KOLOt46Imz0dy+338b/7vwx63Yc8SaLBYYzcMZR5BLEhCvm
uM4EIB0tMYniZ0m2JhYHL/yI9p7jUYqOJR3hovS9jmvlv7OrknDrktHYn0ZOfJdy
PQSg1KlXpw+yIMGvk/NcKU8T0ukoj02S17KIxHd3aAwOSl4ONLMVuJGgMuiJMgfK
gvfjCnuRxRBylb0yi5jvLifpxkpNNGXjpp68bHcpF55CwYszAkUttYBn+CQUC6BP
vsG3VZQs/P/93/IMST/BuoXKmkjrog==
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:02:01 2026 by rpki-client