Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e20323035383836.roa
File:                     39312e3233332e3139382e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier:          T6jTrhHb3VPl9swftEAeJ75SXJQiWatEaJIOOGVxQuM=
Subject key identifier:   66:25:66:78:F8:EE:54:75:4A:5C:A8:8F:D0:D2:8A:77:04:45:93:00
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       445C17E328D2E1B8B6DD36542126FCABD8DF34AF
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e20323035383836.roa
Signing time:             Wed 29 Oct 2025 13:50:55 +0000
ROA not before:           Wed 29 Oct 2025 13:45:55 +0000
ROA not after:            Wed 28 Oct 2026 13:50:55 +0000
asID:                     205886
IP address blocks:        91.233.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Nov 2025 23:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5c:17:e3:28:d2:e1:b8:b6:dd:36:54:21:26:fc:ab:d8:df:34:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 29 13:45:55 2025 GMT
            Not After : Oct 28 13:50:55 2026 GMT
        Subject: CN=66256678F8EE54754A5CA88FD0D28A7704459300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a6:d7:7b:93:d2:09:6b:67:e6:33:68:d5:4d:
                    74:84:fd:86:74:ff:ef:9f:b2:05:04:87:54:bb:ec:
                    1f:59:ef:39:33:62:b6:87:fd:bf:d7:e1:63:b9:48:
                    89:2a:8d:44:69:44:7b:6e:07:e5:9c:06:22:93:55:
                    ed:f4:60:54:05:9f:1f:82:f4:3e:4e:50:fd:48:48:
                    8d:a8:9f:3c:c4:83:81:15:f6:5a:a9:14:7b:7f:56:
                    4b:ca:61:72:1a:5c:93:85:49:3f:9d:68:c7:58:b5:
                    34:fb:57:67:ef:47:78:64:14:72:05:aa:71:83:14:
                    9a:ab:c5:79:5f:8f:03:6a:d2:b2:c9:a5:08:10:ac:
                    cb:0a:05:0b:11:22:53:4b:33:0a:89:08:c7:59:09:
                    7a:a3:fe:2d:23:72:43:0f:6f:fb:d4:bd:a7:2a:b6:
                    c1:a5:c8:55:11:84:94:49:a8:fe:78:26:3b:98:40:
                    73:5a:a3:36:46:f7:c7:b3:50:0d:b0:01:ee:b8:70:
                    3c:ea:a8:da:cf:2b:a6:63:6f:94:f3:12:72:34:04:
                    46:76:5a:5d:09:f5:bf:99:39:7a:59:90:18:6e:5b:
                    69:8e:3c:08:df:1e:f4:e2:c1:c7:0d:ff:6f:85:2b:
                    8c:db:e6:02:1c:a6:30:5e:d9:57:0c:e3:00:64:20:
                    fd:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:25:66:78:F8:EE:54:75:4A:5C:A8:8F:D0:D2:8A:77:04:45:93:00
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e20323035383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:48:0d:45:a8:6e:f1:bc:0e:9e:65:1b:37:8f:ec:37:ca:95:
         5d:4b:a9:67:0d:84:a6:bf:f7:95:0c:a4:b8:86:aa:2b:03:ff:
         66:cb:ee:e4:e8:af:99:89:8f:83:3f:63:db:79:38:de:62:1d:
         6e:47:11:24:ee:b7:d5:9b:e2:ae:15:7a:45:c9:c1:78:bc:36:
         1e:db:55:58:4c:a9:5f:c6:33:00:bd:a5:cb:48:58:3c:87:c3:
         c2:c5:8d:af:87:d1:db:1a:7d:c6:4d:61:11:f9:8c:34:ef:43:
         37:99:12:e6:80:b9:dc:77:25:75:6f:20:93:5e:81:22:46:ce:
         7c:5b:46:0b:0f:f0:73:3d:80:4d:31:e9:3d:cd:bf:c8:68:2e:
         79:0f:f7:3a:03:ee:c5:c1:43:29:77:e3:b1:74:0b:ea:0a:be:
         79:39:fa:6b:f5:b4:56:cf:67:4f:af:19:a4:0a:d0:c9:fd:32:
         84:77:4e:38:a5:c8:fd:62:79:ea:78:ae:f3:09:96:0e:c1:26:
         33:3f:c7:56:46:99:19:bd:9e:3f:74:bd:8c:49:38:de:b6:e0:
         65:89:f6:7b:cd:c6:6b:f2:2b:0f:8a:b7:c4:00:97:00:f8:29:
         23:a6:04:4e:1d:15:b1:5e:d4:5a:2b:3e:2f:4a:97:71:ea:9b:
         76:86:b2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 1 08:28:44 2025 by rpki-client