Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e203233343730.roa
File:                     38392e3230372e3137382e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          W9KRVPK6DmT60+zD9oNpxf1NohJAn82VVJydntpRi58=
Subject key identifier:   B4:BA:6D:68:CA:DD:62:AD:4A:5A:BD:72:24:ED:97:1C:11:9C:17:2A
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1AA0499C301A5EFAE99A63A3791CBBF4A8CEDA25
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e203233343730.roa
Signing time:             Sat 29 Aug 2026 17:44:43 +0000
ROA not before:           Sat 29 Aug 2026 17:39:43 +0000
ROA not after:            Sat 28 Aug 2027 17:44:43 +0000
asID:                     23470
IP address blocks:        89.207.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 13:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a0:49:9c:30:1a:5e:fa:e9:9a:63:a3:79:1c:bb:f4:a8:ce:da:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 29 17:39:43 2026 GMT
            Not After : Aug 28 17:44:43 2027 GMT
        Subject: CN=B4BA6D68CADD62AD4A5ABD7224ED971C119C172A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:63:c1:e6:3f:a2:7a:8a:67:84:51:68:b9:1e:
                    88:90:d8:16:6f:81:a7:5a:00:d5:d5:da:54:4d:90:
                    8a:43:92:04:c1:dd:98:8a:05:60:4d:ba:a1:92:b4:
                    81:de:20:b2:93:3f:12:18:f7:d3:30:db:e6:44:5d:
                    f0:08:c4:f0:e1:82:8a:1f:e9:be:52:04:54:34:78:
                    9b:fc:ed:18:f6:fe:5b:95:e1:26:0d:79:f2:34:0c:
                    af:8d:dc:39:ab:88:54:97:3c:87:fc:57:89:21:b7:
                    fe:34:35:6a:01:77:4b:15:5d:d3:28:e5:e8:f2:bd:
                    cb:ee:bd:61:15:ee:56:6d:46:70:ac:aa:35:70:1b:
                    ff:96:c9:f3:fe:10:6b:19:85:50:f4:61:e5:83:63:
                    eb:1c:c2:db:e8:a8:0c:d7:39:e3:33:d4:91:5c:a9:
                    e0:b4:fb:27:a1:f2:da:2d:7e:8a:1d:dd:a7:84:5c:
                    b7:2e:05:21:1c:b5:9e:fa:d4:8c:72:1e:5d:13:a5:
                    9c:cb:47:83:6f:51:5f:c3:8c:18:4e:97:c4:33:0f:
                    f0:34:fe:8e:b4:cc:82:a6:6c:7f:8d:7a:02:09:98:
                    3e:de:d2:af:cf:77:87:65:43:9c:e6:82:14:d6:a3:
                    36:d5:1b:88:13:c5:ba:72:c8:4a:44:64:2d:71:93:
                    1d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BA:6D:68:CA:DD:62:AD:4A:5A:BD:72:24:ED:97:1C:11:9C:17:2A
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137382e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:fc:5c:2a:53:c9:77:a8:d6:95:fd:29:0a:26:51:28:68:ef:
         3d:9f:8b:c5:71:05:97:00:91:34:e2:2e:e1:ca:6d:06:86:73:
         1a:3f:15:6b:06:b6:01:f7:c4:65:dd:f2:d8:20:55:c3:4a:fb:
         04:01:6d:9a:ba:ff:5c:df:5d:20:6f:de:88:2d:be:09:d2:a6:
         1d:28:33:63:88:ff:4b:0a:49:0e:8f:28:8c:c5:72:13:99:3e:
         a7:b8:d9:fb:fd:e8:c5:9f:a5:e7:07:a6:53:0d:2f:c5:05:68:
         72:03:75:c7:ae:ae:fc:98:db:c5:be:44:23:f0:92:e1:43:53:
         36:2e:ae:b5:49:22:c4:15:3d:6f:bd:3e:a2:24:89:72:4b:2b:
         95:53:9c:f1:47:6c:72:43:e2:fe:fc:15:ea:46:d5:ef:a0:89:
         1d:ab:93:8d:39:7e:28:72:45:42:5e:a0:56:f4:85:44:5d:ed:
         05:69:ce:f7:9d:1d:ab:4c:9b:e9:2d:6c:44:40:23:6d:c5:e8:
         1c:f3:ab:2e:4b:3d:99:d6:8f:66:08:9d:dd:ff:c4:a4:a3:b3:
         f8:08:e1:29:e4:3c:68:69:0e:28:d6:4c:ac:78:66:c9:51:95:
         7b:36:f4:7d:53:9d:c4:3d:8a:11:c6:40:bf:7e:f8:1f:97:fd:
         93:6f:f4:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:48:25 2026 by rpki-client