Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e20343032333639.roa
File:                     38392e3230372e3137372e302f32342d3234203d3e20343032333639.roa (raw, json)
Hash identifier:          txEfyMo5Y3Qexx1xE6zUPGCrj+k7LWG6XVpLKuNDtG4=
Subject key identifier:   0D:94:65:6A:F7:37:BA:C0:02:52:01:45:15:4E:38:94:B2:84:6D:5C
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7FDC1BE649652CA9A5E236645CA33BD871A1206E
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e20343032333639.roa
Signing time:             Mon 03 Aug 2026 04:04:06 +0000
ROA not before:           Mon 03 Aug 2026 03:59:06 +0000
ROA not after:            Mon 02 Aug 2027 04:04:06 +0000
asID:                     402369
IP address blocks:        89.207.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 08 Aug 2026 05:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:dc:1b:e6:49:65:2c:a9:a5:e2:36:64:5c:a3:3b:d8:71:a1:20:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug  3 03:59:06 2026 GMT
            Not After : Aug  2 04:04:06 2027 GMT
        Subject: CN=0D94656AF737BAC002520145154E3894B2846D5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:34:6e:bb:eb:7a:e9:40:e0:e5:0d:e3:5a:6f:
                    c3:43:79:83:3b:c4:05:1d:89:f3:a9:54:60:46:82:
                    0d:33:34:ba:34:8a:9d:a1:10:e2:c5:f0:62:81:32:
                    6d:b7:c0:19:3f:03:85:d4:c3:f2:27:f3:6d:a7:5d:
                    02:22:50:6a:eb:b7:42:25:c6:a2:78:cd:28:61:22:
                    19:0c:20:cd:ea:11:58:64:4d:c4:aa:23:16:b4:8b:
                    0f:f8:85:7c:82:57:94:d5:51:89:88:08:2b:35:a5:
                    27:6d:a2:03:04:75:52:a1:e5:e8:98:76:ab:1f:d2:
                    f4:ca:6c:27:24:95:d2:6d:91:33:55:6c:6f:b7:85:
                    ce:c5:80:1a:16:b6:aa:d7:08:e0:fd:1e:1a:2e:27:
                    72:00:3b:c5:68:7a:7a:36:1f:6f:6e:6f:5f:64:d4:
                    a9:51:a4:ee:80:b2:b7:1f:fa:f6:86:dd:4e:8a:11:
                    19:16:28:66:cf:bf:ab:c0:1a:0c:01:b5:14:bd:f3:
                    a2:3f:13:df:4b:89:c5:c2:9c:d9:f2:7e:b6:48:37:
                    79:25:06:6a:62:03:2b:18:7e:ea:da:46:53:b6:52:
                    fc:61:99:e0:71:2a:89:95:31:fe:67:f6:f3:05:15:
                    46:80:81:8e:b5:61:bf:cf:b2:1b:34:c4:17:0c:89:
                    c7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:94:65:6A:F7:37:BA:C0:02:52:01:45:15:4E:38:94:B2:84:6D:5C
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e20343032333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:c2:04:01:63:ca:fc:39:b6:b7:99:5b:a2:39:e7:36:57:e3:
         98:00:32:7f:11:58:73:db:4f:82:2d:fb:d5:06:2a:ff:d9:f0:
         e5:46:43:ba:19:39:2f:6c:8a:f9:7d:9e:7c:1a:fc:96:2b:4b:
         63:86:32:31:79:98:8a:e1:9f:f4:46:47:1b:fe:ac:d4:90:25:
         51:73:ad:de:56:8c:84:80:f7:60:ad:ba:be:81:15:da:6f:37:
         64:8a:a9:1b:c2:1b:4c:ae:b2:6b:91:11:4a:38:d0:f1:40:6e:
         50:a4:fa:4d:63:68:25:5a:85:40:67:20:fc:11:fd:a2:4f:09:
         af:cc:bd:a2:63:2f:82:79:f1:16:bd:e4:10:61:18:1c:bc:1e:
         4b:07:c6:cc:ce:47:ff:a2:22:b2:e0:e7:8b:e4:6a:f8:19:d6:
         90:1c:84:21:88:18:1b:cd:d4:59:8a:77:a9:82:3f:e8:85:da:
         3a:cc:d6:d0:7a:31:e2:ba:06:e3:e0:64:e7:7f:c9:c7:95:c5:
         2e:03:d8:c5:80:f4:d8:48:7c:5a:a9:da:54:e2:b3:0b:44:3e:
         a3:10:e4:95:0c:80:a5:27:89:91:6b:86:37:b5:74:f1:01:aa:
         80:55:91:83:c6:f6:bc:02:0a:42:1d:60:a8:5c:03:f3:6d:46:
         5b:c6:a6:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 16:08:07 2026 by rpki-client