Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e20343032353637.roa
File:                     39312e3233332e3139382e302f32342d3234203d3e20343032353637.roa (raw, json)
Hash identifier:          EJbWsWmXgjY6BHhm/7h3BUSjk/eQvzNxEi0haNUBjwk=
Subject key identifier:   A7:AB:EC:8A:5F:05:55:66:6A:4D:72:7D:9D:BB:CC:9F:A3:78:09:30
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       756F232FF536DA2CB1B65597A1C40C13F9D21F64
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e20343032353637.roa
Signing time:             Sat 17 Oct 2026 06:19:43 +0000
ROA not before:           Sat 17 Oct 2026 06:14:43 +0000
ROA not after:            Sat 16 Oct 2027 06:19:43 +0000
asID:                     402567
IP address blocks:        91.233.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 22 Oct 2026 12:40:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:6f:23:2f:f5:36:da:2c:b1:b6:55:97:a1:c4:0c:13:f9:d2:1f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Oct 17 06:14:43 2026 GMT
            Not After : Oct 16 06:19:43 2027 GMT
        Subject: CN=A7ABEC8A5F0555666A4D727D9DBBCC9FA3780930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:60:f1:5f:b9:5c:96:70:af:0a:89:28:ad:7f:
                    99:89:ad:ba:ac:b6:66:ac:1b:c5:c1:51:9a:9d:c2:
                    0b:25:6e:10:ac:73:d2:f8:43:6d:9d:9d:08:43:ae:
                    d3:ba:9a:fd:d4:2e:87:fe:b4:9e:f9:1d:35:6e:ef:
                    31:f2:c4:f2:59:fb:71:83:58:81:13:3d:31:7d:9c:
                    f1:20:bd:d0:be:9c:ec:49:ec:d6:ad:ec:1d:03:eb:
                    f7:d1:c5:a9:4e:f9:4f:9c:a0:0d:75:7d:da:4d:1b:
                    f5:23:84:f2:f4:8e:1a:a7:e9:a0:e7:c2:27:35:d1:
                    48:f2:26:ac:df:4e:4f:a4:3d:1c:90:9b:ee:2d:30:
                    5a:f6:55:bc:54:17:dd:b2:d0:8e:e6:fd:8b:dc:9e:
                    38:4e:f1:34:c9:b0:fa:28:c4:e4:e3:77:bc:00:6f:
                    24:67:fe:e6:62:80:fd:ca:c1:b2:52:9a:63:4d:52:
                    80:50:82:f6:73:29:f6:b6:05:0b:49:2c:c5:0a:a5:
                    4e:bc:b5:98:22:5a:a6:54:0d:cb:a1:fa:ec:7f:53:
                    93:c5:75:c1:40:b5:a4:27:3a:ba:00:ed:97:dd:06:
                    cc:c7:f4:31:67:c0:2d:cb:c8:db:e6:32:df:79:de:
                    de:1e:3b:fb:5f:f2:2f:1f:47:4e:18:fb:bd:e3:fe:
                    47:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:AB:EC:8A:5F:05:55:66:6A:4D:72:7D:9D:BB:CC:9F:A3:78:09:30
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e20343032353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:61:34:61:bb:c8:e0:cf:6d:03:28:2f:08:51:cc:42:0b:fe:
         c4:e4:1d:5e:ef:a1:b8:7e:f9:c6:83:43:34:32:8f:70:c7:34:
         12:b5:c4:6d:f2:52:1e:6b:04:40:c5:94:b2:7d:29:d5:f8:bc:
         e4:c3:47:a6:28:a5:e3:e0:d1:df:88:12:af:8a:d4:1e:66:2a:
         c8:3d:57:73:32:3d:d9:1e:10:8c:e9:36:b4:c5:4e:1c:e9:fa:
         2f:30:d7:d3:4e:5f:27:ce:4a:24:d2:c1:0c:8b:d4:a5:44:7c:
         2f:19:7c:4e:c8:0c:4d:93:2a:62:78:5c:9b:67:59:a2:02:88:
         5b:a3:cf:47:46:b4:bd:f9:40:34:8c:0b:b3:8c:7b:b6:14:c7:
         6a:02:b9:20:9a:13:22:37:58:88:1c:64:74:0c:ab:d5:51:06:
         b4:73:02:f5:ae:27:ba:c3:e5:a7:1d:2f:11:66:b6:f5:7d:45:
         0f:87:41:cc:93:ad:ab:23:e7:91:04:b3:09:e1:6e:fd:32:d1:
         bd:5b:d7:7b:06:80:45:56:d9:37:c8:69:f1:6b:a1:f2:09:a9:
         01:cc:00:34:65:82:17:cb:db:2f:6d:fe:85:6f:66:19:6c:02:
         11:da:a1:df:0f:14:41:83:f9:95:ba:bf:37:e6:14:3c:a0:7b:
         15:b0:58:c3
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUdW8jL/U22iyxtlWXocQME/nSH2QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYxMDE3MDYxNDQzWhcNMjcxMDE2MDYxOTQz
WjAzMTEwLwYDVQQDEyhBN0FCRUM4QTVGMDU1NTY2NkE0RDcyN0Q5REJCQ0M5RkEz
NzgwOTMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2DxX7lclnCv
CokorX+Zia26rLZmrBvFwVGancILJW4QrHPS+ENtnZ0IQ67Tupr91C6H/rSe+R01
bu8x8sTyWftxg1iBEz0xfZzxIL3QvpzsSezWrewdA+v30cWpTvlPnKANdX3aTRv1
I4Ty9I4ap+mg58InNdFI8ias305PpD0ckJvuLTBa9lW8VBfdstCO5v2L3J44TvE0
ybD6KMTk43e8AG8kZ/7mYoD9ysGyUppjTVKAUIL2cyn2tgULSSzFCqVOvLWYIlqm
VA3Lofrsf1OTxXXBQLWkJzq6AO2X3QbMx/QxZ8Aty8jb5jLfed7eHjv7X/IvH0dO
GPu94/5H9wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFKer7IpfBVVmak1yfZ27zJ+j
eAkwMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzM5MzEyZTMyMzMzMzJlMzEzOTM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzQzMDMyMzUzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+nGMA0GCSqGSIb3DQEB
CwUAA4IBAQBcYTRhu8jgz20DKC8IUcxCC/7E5B1e76G4fvnGg0M0Mo9wxzQStcRt
8lIeawRAxZSyfSnV+Lzkw0emKKXj4NHfiBKvitQeZirIPVdzMj3ZHhCM6Ta0xU4c
6fovMNfTTl8nzkok0sEMi9SlRHwvGXxOyAxNkypieFybZ1miAohbo89HRrS9+UA0
jAuzjHu2FMdqArkgmhMiN1iIHGR0DKvVUQa0cwL1rie6w+WnHS8RZrb1fUUPh0HM
k62rI+eRBLMJ4W79MtG9W9d7BoBFVtk3yGnxa6HyCakBzAA0ZYIXy9svbf6Fb2YZ
bAIR2qHfDxRBg/mVur835hQ8oHsVsFjD
-----END CERTIFICATE-----
Generated at Wed Oct 21 15:22:05 2026 by rpki-client