Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
File:                     3139382e33372e39362e302f32302d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          4SzeB04XWpm8Du9yEdHczJWUql664WAbdZ2vvPJ2/wc=
Subject key identifier:   A0:40:3A:F7:74:99:01:1B:0D:10:05:68:F7:7D:5F:2F:FE:0F:BB:04
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       47E590B54B7A41E2FE02867AE819A20F1DF26260
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
Signing time:             Mon 03 Aug 2026 13:36:09 +0000
ROA not before:           Mon 03 Aug 2026 13:31:09 +0000
ROA not after:            Mon 02 Aug 2027 13:36:09 +0000
asID:                     397373
IP address blocks:        198.37.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 13:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:e5:90:b5:4b:7a:41:e2:fe:02:86:7a:e8:19:a2:0f:1d:f2:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug  3 13:31:09 2026 GMT
            Not After : Aug  2 13:36:09 2027 GMT
        Subject: CN=A0403AF77499011B0D100568F77D5F2FFE0FBB04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ea:eb:c0:de:e4:c9:61:86:8d:ab:6a:65:43:
                    72:15:8e:3b:aa:4c:bb:bc:7d:0b:5e:8a:7d:47:36:
                    6a:76:7b:f5:de:a6:1c:8c:f8:0f:33:86:9f:c5:3e:
                    27:39:af:a3:26:34:3e:57:21:2a:61:88:f5:94:dc:
                    86:83:6f:49:9a:e3:97:cf:79:9b:04:1e:78:dc:11:
                    df:1d:a4:ee:f2:92:bc:2e:3a:66:70:c0:3a:4d:71:
                    3e:14:a7:43:d8:ae:0e:f7:7c:76:7f:56:68:03:c1:
                    e3:73:52:3d:e8:62:35:8e:76:a2:e5:45:91:07:75:
                    01:0c:1b:c9:3f:5c:57:fe:c1:c2:7b:a0:c3:49:ee:
                    ee:8b:8b:a3:61:4a:c0:0f:19:76:83:97:84:ee:86:
                    d6:c5:c1:0a:9a:6e:f2:af:b7:94:25:d2:c1:2e:df:
                    1d:91:f1:8d:b6:71:0f:3f:9e:e4:40:30:bc:7a:3c:
                    7a:6f:84:39:e8:fd:93:0e:f8:62:e1:56:52:22:47:
                    13:61:b8:c0:74:a1:12:73:49:81:8d:ba:a7:2a:28:
                    b6:70:aa:52:67:6f:f7:67:fd:75:63:47:4d:3b:4d:
                    62:69:aa:fc:f8:69:20:74:c8:7f:cc:04:85:83:1b:
                    c0:2c:45:48:1f:c5:c6:33:0f:29:b2:d3:32:19:90:
                    0e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:40:3A:F7:74:99:01:1B:0D:10:05:68:F7:7D:5F:2F:FE:0F:BB:04
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:b6:aa:70:b3:17:7c:72:3f:be:f9:9a:da:74:ff:27:30:82:
         85:73:7c:88:1b:0c:31:d0:17:ca:29:d9:3b:94:5c:93:e2:f3:
         96:41:e4:16:79:32:82:90:08:68:b2:21:4c:6c:53:54:68:90:
         70:04:90:4f:0f:d3:f7:6f:7b:ed:63:84:5b:c2:13:53:a6:7d:
         b4:e5:ee:d1:c0:29:4a:16:47:34:69:b2:10:85:72:d1:17:4f:
         95:c5:e2:59:cd:26:ec:ac:65:18:28:ab:f2:ed:7f:78:f6:be:
         a3:c3:1b:f4:f3:dd:74:8f:ef:dc:13:0d:63:5a:6f:d4:5a:e2:
         7c:cc:46:d5:cc:ad:58:ca:fe:08:c9:73:b6:d1:f3:9b:5a:d1:
         59:7e:61:af:de:fb:80:fa:2d:40:36:a5:6c:e5:ad:89:67:b4:
         70:a0:77:dc:64:8c:f0:db:1d:ca:71:b5:f1:e7:3a:1d:4e:59:
         9a:7d:a1:0e:a2:bc:7c:87:c6:f3:ac:e4:5e:a5:60:77:50:77:
         f6:69:83:dc:53:83:6b:7c:6c:8a:8e:d0:3f:4c:60:aa:44:f3:
         a9:89:1e:52:6a:50:c2:92:a1:48:9e:11:03:cf:3a:04:e2:29:
         d4:8d:58:8c:87:a6:9a:73:3a:45:00:80:b4:e9:c9:dd:fb:6a:
         1d:31:14:c8
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUR+WQtUt6QeL+AoZ66BmiDx3yYmAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwODAzMTMzMTA5WhcNMjcwODAyMTMzNjA5
WjAzMTEwLwYDVQQDEyhBMDQwM0FGNzc0OTkwMTFCMEQxMDA1NjhGNzdENUYyRkZF
MEZCQjA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOrrwN7kyWGG
jatqZUNyFY47qky7vH0LXop9RzZqdnv13qYcjPgPM4afxT4nOa+jJjQ+VyEqYYj1
lNyGg29JmuOXz3mbBB543BHfHaTu8pK8LjpmcMA6TXE+FKdD2K4O93x2f1ZoA8Hj
c1I96GI1jnai5UWRB3UBDBvJP1xX/sHCe6DDSe7ui4ujYUrADxl2g5eE7obWxcEK
mm7yr7eUJdLBLt8dkfGNtnEPP57kQDC8ejx6b4Q56P2TDvhi4VZSIkcTYbjAdKES
c0mBjbqnKii2cKpSZ2/3Z/11Y0dNO01iaar8+GkgdMh/zASFgxvALEVIH8XGMw8p
stMyGZAOfwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFKBAOvd0mQEbDRAFaPd9Xy/+
D7sEMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzkzNjJlMzAyZjMyMzAyZDMyMzQy
MDNkM2UyMDMzMzkzNzMzMzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMYlYDANBgkqhkiG9w0BAQsF
AAOCAQEAHbaqcLMXfHI/vvma2nT/JzCChXN8iBsMMdAXyinZO5Rck+LzlkHkFnky
gpAIaLIhTGxTVGiQcASQTw/T92977WOEW8ITU6Z9tOXu0cApShZHNGmyEIVy0RdP
lcXiWc0m7KxlGCir8u1/ePa+o8Mb9PPddI/v3BMNY1pv1FrifMxG1cytWMr+CMlz
ttHzm1rRWX5hr977gPotQDalbOWtiWe0cKB33GSM8NsdynG18ec6HU5Zmn2hDqK8
fIfG86zkXqVgd1B39mmD3FODa3xsio7QP0xgqkTzqYkeUmpQwpKhSJ4RA886BOIp
1I1YjIemmnM6RQCAtOnJ3ftqHTEUyA==
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:26:34 2026 by rpki-client