Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32342d3234203d3e203239383032.roa
File:                     38392e3230372e3137362e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          rh10wwt9IawTSfKGcwXTOYy7gqlF7sHcCfMO2ek/cwc=
Subject key identifier:   1D:3A:35:A9:57:94:CF:19:CC:A6:E6:ED:CE:F9:C6:FA:52:AD:89:F6
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       677F5B8827C7C96655A4183383D38B5E3A998882
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32342d3234203d3e203239383032.roa
Signing time:             Fri 17 Jul 2026 13:21:52 +0000
ROA not before:           Fri 17 Jul 2026 13:16:52 +0000
ROA not after:            Fri 16 Jul 2027 13:21:52 +0000
asID:                     29802
IP address blocks:        89.207.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7f:5b:88:27:c7:c9:66:55:a4:18:33:83:d3:8b:5e:3a:99:88:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jul 17 13:16:52 2026 GMT
            Not After : Jul 16 13:21:52 2027 GMT
        Subject: CN=1D3A35A95794CF19CCA6E6EDCEF9C6FA52AD89F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e5:97:00:19:2d:6a:02:c7:ac:33:8e:18:51:
                    b8:0e:c4:04:54:6a:f1:62:8b:8e:e1:83:5d:70:df:
                    6f:02:2a:07:c3:cc:b8:5d:26:9f:25:a0:98:5b:c4:
                    90:da:8e:88:99:01:23:a4:67:2c:24:4c:3a:f9:3e:
                    eb:52:43:d9:21:5d:d2:76:db:6d:b8:06:6e:24:c7:
                    c7:ca:9b:fa:7f:8e:fb:e3:18:63:98:bc:73:64:2d:
                    77:bf:31:4e:df:ce:0c:f4:bf:72:7b:48:c0:da:90:
                    3d:44:85:75:76:bb:b3:ee:17:43:29:9c:e8:6b:11:
                    bb:37:b6:94:01:d1:f3:32:21:e7:94:02:a1:3d:fb:
                    87:5f:e0:3c:0b:4a:e4:0c:a5:c6:01:3b:ba:5f:bb:
                    e9:02:be:f8:59:77:d8:fe:d9:45:9d:2f:1c:bf:f8:
                    4c:0e:67:e5:c6:eb:ed:75:97:39:ef:48:a5:0a:13:
                    81:59:29:39:29:76:89:63:cc:a4:97:05:9d:09:10:
                    7c:8b:78:08:a6:90:95:20:3c:fb:ba:de:f3:3a:96:
                    8e:b6:ba:c5:0e:6c:b3:f9:2b:ab:23:3f:ae:38:37:
                    b9:6f:fd:08:5e:96:6a:09:1e:f8:6e:f7:48:58:23:
                    b0:1b:e3:7c:4f:e9:78:7c:0a:ca:fd:3f:00:3e:7b:
                    6d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3A:35:A9:57:94:CF:19:CC:A6:E6:ED:CE:F9:C6:FA:52:AD:89:F6
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:55:3e:98:d7:3c:2f:3d:71:06:b6:1d:ab:17:1e:23:9c:ee:
         6a:b5:6d:03:6b:b2:ba:e3:97:6a:4a:4d:c3:9f:79:b4:c6:d8:
         6e:52:e9:87:59:38:f7:4e:e0:55:3d:d7:5e:34:46:e4:31:74:
         04:61:8e:ec:27:e4:ae:9c:86:a5:19:74:c4:fb:5f:9e:1a:6d:
         7b:54:d3:4d:bf:1e:8f:34:8e:c4:2f:6e:56:54:6d:9c:82:ab:
         12:8c:62:90:c7:37:21:b6:55:bd:cf:ba:3e:e6:e6:68:1c:53:
         e0:45:f4:0c:e1:89:31:93:89:43:45:4a:c2:d2:07:8a:58:f3:
         51:88:c5:b4:cc:94:35:5d:46:9a:cb:f4:29:2c:e1:9f:49:df:
         fe:49:3d:38:a6:a2:b1:b1:2c:a1:37:77:ca:c8:4d:99:fc:25:
         3c:43:a8:43:5b:56:f0:07:7a:a0:eb:fa:3e:9d:21:33:39:ef:
         8e:bf:f6:25:8a:85:a7:de:78:2a:fb:37:ab:b2:0c:09:78:2c:
         3f:c4:e8:e3:5b:94:7e:03:38:c4:0d:21:d0:b4:ee:8a:87:e1:
         af:f2:41:b3:48:57:9e:cb:9a:84:d6:63:70:57:06:7f:6b:03:
         a1:7a:bd:bf:77:cc:c6:89:21:ef:7f:db:df:92:46:63:3d:0f:
         bf:7e:7c:74
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUZ39biCfHyWZVpBgzg9OLXjqZiIIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNzE3MTMxNjUyWhcNMjcwNzE2MTMyMTUy
WjAzMTEwLwYDVQQDEygxRDNBMzVBOTU3OTRDRjE5Q0NBNkU2RURDRUY5QzZGQTUy
QUQ4OUY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8OWXABktagLH
rDOOGFG4DsQEVGrxYouO4YNdcN9vAioHw8y4XSafJaCYW8SQ2o6ImQEjpGcsJEw6
+T7rUkPZIV3SdtttuAZuJMfHypv6f4774xhjmLxzZC13vzFO384M9L9ye0jA2pA9
RIV1druz7hdDKZzoaxG7N7aUAdHzMiHnlAKhPfuHX+A8C0rkDKXGATu6X7vpAr74
WXfY/tlFnS8cv/hMDmflxuvtdZc570ilChOBWSk5KXaJY8yklwWdCRB8i3gIppCV
IDz7ut7zOpaOtrrFDmyz+SurIz+uODe5b/0IXpZqCR74bvdIWCOwG+N8T+l4fArK
/T8APnttMQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFB06NalXlM8ZzKbm7c75xvpS
rYn2MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzM4MzkyZTMyMzAzNzJlMzEzNzM2MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzOTM4MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFnPsDANBgkqhkiG9w0BAQsF
AAOCAQEAkVU+mNc8Lz1xBrYdqxceI5zuarVtA2uyuuOXakpNw595tMbYblLph1k4
907gVT3XXjRG5DF0BGGO7CfkrpyGpRl0xPtfnhpte1TTTb8ejzSOxC9uVlRtnIKr
EoxikMc3IbZVvc+6PubmaBxT4EX0DOGJMZOJQ0VKwtIHiljzUYjFtMyUNV1Gmsv0
KSzhn0nf/kk9OKaisbEsoTd3yshNmfwlPEOoQ1tW8Ad6oOv6Pp0hMznvjr/2JYqF
p954Kvs3q7IMCXgsP8To41uUfgM4xA0h0LTuiofhr/JBs0hXnsuahNZjcFcGf2sD
oXq9v3fMxokh73/b35JGYz0Pv358dA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:00:32 2026 by rpki-client