Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32332d3234203d3e20383334.roa
File:                     38392e3230372e3137382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          CZY0DhQ9+jr5rTKacmPnXP43JbhOwdQFo8yKtsSYJKQ=
Subject key identifier:   F1:CD:8F:C7:20:22:82:2B:FE:0B:7F:F2:11:90:05:82:67:20:7F:67
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0B2EDD9C04A7EEEF4338602B927D651B73E90457
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32332d3234203d3e20383334.roa
Signing time:             Mon 06 Jul 2026 08:59:46 +0000
ROA not before:           Mon 06 Jul 2026 08:54:46 +0000
ROA not after:            Mon 05 Jul 2027 08:59:46 +0000
asID:                     834
IP address blocks:        89.207.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:50:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:2e:dd:9c:04:a7:ee:ef:43:38:60:2b:92:7d:65:1b:73:e9:04:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jul  6 08:54:46 2026 GMT
            Not After : Jul  5 08:59:46 2027 GMT
        Subject: CN=F1CD8FC72022822BFE0B7FF21190058267207F67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:5f:9e:8f:d2:1c:b5:c1:33:0a:74:15:a7:
                    53:a7:c9:8f:a0:88:21:d9:85:f8:ed:4a:1f:e9:94:
                    af:03:7c:60:25:78:2f:ad:8a:83:2b:45:02:9f:d2:
                    b5:76:82:4d:0e:05:e8:92:dc:40:ca:f8:05:c1:cd:
                    8e:e0:89:07:aa:3a:4d:16:b9:73:59:e8:dd:cd:8c:
                    46:a3:21:61:37:a5:d5:f4:59:06:92:3a:1c:9a:59:
                    60:0f:89:0c:41:4d:b3:97:ca:23:09:7a:17:bb:6c:
                    ac:ae:dd:fd:70:42:39:13:dc:e8:53:41:b8:4f:83:
                    81:d3:cf:17:39:22:0d:c9:2d:2c:ac:79:4a:a1:68:
                    79:98:11:1f:95:4f:8f:d6:b1:29:a7:78:93:cb:cc:
                    d1:ef:d6:47:e2:52:a6:c7:15:38:14:28:2a:1b:8f:
                    f7:a1:9e:1b:4b:8e:bc:f8:0a:ed:d5:0c:01:5b:8a:
                    0a:0e:29:1c:8c:2d:7d:ca:79:b6:44:c9:7f:cb:12:
                    f0:93:d8:51:57:1a:a4:c9:9e:74:bf:2b:bd:ff:ca:
                    95:37:f7:8d:cb:9b:46:e0:f4:39:6a:cb:9c:7c:1f:
                    50:9a:ca:6a:d0:12:00:30:da:3e:4b:ff:f0:a9:36:
                    76:6a:c7:5d:da:b2:19:47:ad:e5:c2:eb:48:6e:ee:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CD:8F:C7:20:22:82:2B:FE:0B:7F:F2:11:90:05:82:67:20:7F:67
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:b2:40:db:07:d2:12:96:92:f4:db:12:cb:21:9c:27:eb:fe:
         a4:c7:23:d4:fc:a9:7a:52:2f:56:42:1f:bf:5c:9e:90:b2:ed:
         82:b4:3d:f2:17:0e:24:a5:0a:8f:34:88:ee:9d:8d:06:7d:dd:
         30:bd:f9:9e:fa:0b:6b:1f:88:2f:50:15:9f:c0:bf:75:7b:39:
         22:e2:9a:e1:03:6f:96:97:50:54:cc:36:76:e4:3b:d9:1d:ee:
         55:b0:2b:f2:3d:82:02:d2:6b:83:19:d2:e4:13:ae:f4:90:46:
         4e:c6:46:c0:14:83:f4:92:f9:e6:82:58:f3:45:84:2d:c8:0a:
         65:e5:27:62:2b:82:2a:19:fc:ec:92:c3:6c:f0:09:6a:f9:c6:
         69:ae:39:68:8d:ae:d4:b0:91:f4:25:52:cc:53:e8:9f:0f:75:
         55:e4:0b:ee:e1:da:d8:79:fc:3b:56:df:82:67:23:12:f2:ab:
         fc:ca:ce:c5:a2:d1:2f:b5:0a:9b:ca:22:78:36:88:13:14:a9:
         16:fa:77:67:8d:dc:3a:79:4f:6f:8d:1a:8e:98:28:14:b1:19:
         8b:c5:05:e5:74:a5:be:73:5b:fe:f0:14:27:01:2f:4b:89:92:
         a8:00:a9:9d:42:1b:d8:13:e4:f9:a1:5a:8b:49:b8:3d:83:ec:
         02:b6:6b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:01:47 2026 by rpki-client