Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e2039333034.roa
File:                     38392e3230372e3137372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          6Jklx+liC9YkyMooR+t/bXRFnIvb6WynLXzDP9BZIDg=
Subject key identifier:   B6:01:27:F2:6C:12:A3:DE:45:86:18:0F:3F:A6:B4:5D:F2:57:65:E9
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       59393C63979F4954ED47809C0581690E9D2B8A7B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 23 Aug 2026 08:34:27 +0000
ROA not before:           Sun 23 Aug 2026 08:29:27 +0000
ROA not after:            Sun 22 Aug 2027 08:34:27 +0000
asID:                     9304
IP address blocks:        89.207.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 17:55:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:39:3c:63:97:9f:49:54:ed:47:80:9c:05:81:69:0e:9d:2b:8a:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 23 08:29:27 2026 GMT
            Not After : Aug 22 08:34:27 2027 GMT
        Subject: CN=B60127F26C12A3DE4586180F3FA6B45DF25765E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9b:e1:3e:0b:07:c2:b1:26:f1:1f:82:90:64:
                    2c:46:12:a5:4f:28:f9:d5:93:77:00:8e:aa:9c:98:
                    ec:8b:a0:63:b4:34:7a:aa:76:ec:73:2e:0e:14:a3:
                    d5:43:59:d7:75:a5:ca:9d:2e:86:2c:5f:f6:50:45:
                    4c:5d:ed:ce:3b:45:66:7c:87:e1:10:0f:38:84:ed:
                    4d:40:76:44:6c:3c:e3:7b:a0:4f:9e:20:25:8d:2f:
                    e0:23:46:21:0c:b0:c1:c4:f9:2d:8c:b1:aa:98:0d:
                    e8:6a:6f:cc:c4:de:f9:13:22:81:c1:ee:a5:8e:aa:
                    cd:61:71:da:77:2b:8a:7b:9a:0c:21:da:fd:ed:54:
                    5d:71:b7:99:fb:5e:6c:39:53:df:a8:4d:21:0c:54:
                    4f:0f:ed:4b:98:1b:79:31:a0:f5:48:e0:0a:60:f1:
                    18:9f:a0:a9:b3:d7:53:62:59:64:7d:f1:84:3b:16:
                    26:3c:15:96:c9:30:e4:63:b2:5a:40:dc:9b:b7:7c:
                    e6:da:49:10:0e:a8:0e:15:f3:bb:d9:ca:24:35:9e:
                    60:08:92:e4:37:b0:9e:55:a3:d5:44:7f:49:ca:a4:
                    d6:37:5e:65:05:8f:8c:ab:a0:2b:0d:00:b6:50:e4:
                    a7:de:f5:27:23:65:b9:dd:8b:79:eb:35:d2:cf:ad:
                    dd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:01:27:F2:6C:12:A3:DE:45:86:18:0F:3F:A6:B4:5D:F2:57:65:E9
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:f5:1a:c4:c0:98:6d:ac:d7:f8:5c:1e:88:6a:3c:c2:2e:ed:
         32:20:e8:40:4c:a8:14:ba:c5:3d:46:34:5a:74:8f:08:4e:75:
         c8:2d:a4:65:98:f3:75:1d:fc:60:29:24:68:29:31:06:d2:42:
         2d:f4:96:d6:93:6b:75:07:e7:a4:34:4a:5b:6b:4c:fa:73:8b:
         80:c4:c9:8c:31:20:7a:d0:94:36:38:80:21:cd:90:ab:f4:3f:
         63:16:3f:24:db:7e:eb:f5:e4:92:03:ef:aa:4f:35:33:8a:c0:
         7e:36:00:fe:0d:b7:e5:96:c6:ef:9c:a7:ed:a9:5c:3a:8b:0f:
         d1:3f:a3:0a:65:9e:9e:f3:84:28:32:e8:0c:17:75:2f:cb:99:
         a8:bf:10:19:51:21:db:2a:3e:5c:67:89:cf:b8:91:ec:b4:53:
         5c:b5:c4:34:93:33:8b:be:73:b6:fc:92:0c:28:59:70:a6:65:
         23:f2:c3:1c:b5:aa:1e:8a:44:06:d3:85:2a:4c:7a:d7:96:f8:
         9e:7c:af:0a:5f:53:5f:70:2f:6b:81:61:4c:1f:44:e7:91:2b:
         eb:3b:3c:7c:b7:78:ea:a6:89:6e:c2:7e:b4:0b:f4:7f:25:a8:
         bf:32:c8:a6:b6:28:d0:65:ad:61:4f:1e:8c:80:f5:a0:8d:ff:
         92:f7:dc:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:53 2026 by rpki-client