Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa
File:                     3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa (raw, json)
Hash identifier:          9CqTRrnOk0GoJzx1VgfQ2YL7o0gh4xPkaARb+/g3qT4=
Subject key identifier:   69:83:3E:8A:AB:F3:0B:06:71:24:6F:C8:BB:6C:FA:89:43:14:40:6D
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       5E3666902EAE13EDCB34DD391B00FE473E5D0958
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa
Signing time:             Thu 18 Jun 2026 21:59:00 +0000
ROA not before:           Thu 18 Jun 2026 21:54:00 +0000
ROA not after:            Thu 17 Jun 2027 21:59:00 +0000
asID:                     202294
IP address blocks:        192.209.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 11 Jul 2026 15:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:36:66:90:2e:ae:13:ed:cb:34:dd:39:1b:00:fe:47:3e:5d:09:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jun 18 21:54:00 2026 GMT
            Not After : Jun 17 21:59:00 2027 GMT
        Subject: CN=69833E8AABF30B0671246FC8BB6CFA894314406D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2c:d8:82:83:ed:ed:a7:db:81:0e:18:60:20:
                    48:93:d0:a5:12:40:3e:21:d5:44:40:55:07:d6:6d:
                    f6:87:cc:97:10:59:8c:e5:4a:8e:96:f4:4c:26:b5:
                    2f:45:0c:0d:db:ec:cd:40:8a:71:6e:40:7c:1f:b2:
                    e4:60:e4:c0:e7:5c:73:d7:7f:dc:9c:aa:2c:98:20:
                    66:c2:01:ab:b1:08:a2:9d:87:73:d9:a5:5a:2b:19:
                    a9:32:9f:d3:eb:68:53:4d:60:da:c5:cd:0e:ac:c1:
                    0f:e9:96:35:3b:2e:bc:65:e6:9a:7b:f0:6c:db:67:
                    04:40:c2:f9:3d:e8:d1:63:c5:c5:d2:2e:fc:db:f0:
                    0b:90:76:e3:5f:fb:28:f5:5a:62:af:1c:00:2c:c4:
                    f0:d4:d4:94:a5:11:a5:5f:cb:be:30:4c:08:47:8b:
                    82:34:07:8f:67:95:98:f0:6b:37:e6:ee:e3:e5:7e:
                    75:e2:66:d4:72:86:05:15:c4:a8:80:98:4a:b2:30:
                    a6:de:52:42:d6:0d:86:88:d0:00:c3:5e:53:6f:80:
                    fd:dc:8b:80:9d:f5:91:71:42:c3:22:8d:b2:a5:92:
                    3e:5d:8a:1c:57:73:ec:6f:93:37:40:9b:a9:06:e4:
                    2f:58:88:6b:87:c1:12:5b:43:dd:2a:e6:4e:f3:39:
                    91:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:83:3E:8A:AB:F3:0B:06:71:24:6F:C8:BB:6C:FA:89:43:14:40:6D
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:a2:99:14:cc:f3:52:ae:5a:9c:d0:7d:bb:ec:67:d4:54:51:
         b3:62:5b:48:bc:fc:b8:06:89:16:f1:3c:b7:30:62:b6:a7:9d:
         44:78:17:26:d0:4b:22:60:85:85:7a:b2:ee:a5:d3:24:fc:1d:
         4e:df:0e:b7:22:fa:bc:f3:13:a5:bd:5e:eb:a6:46:dc:15:0e:
         ce:10:94:dd:bf:2f:5b:27:f2:43:c7:46:eb:cb:a7:5e:8a:62:
         8f:f0:d5:c1:67:ac:8a:6c:09:68:5d:53:cf:fd:63:9b:ca:dc:
         c7:c4:19:46:5a:23:02:4c:ad:39:93:2a:65:fd:53:a4:ac:13:
         26:e4:1b:72:58:5a:f4:cf:23:73:1e:9e:de:5e:30:2b:1f:e3:
         d8:0d:e6:51:66:ca:54:68:72:75:05:82:35:f9:c6:12:cf:a2:
         7a:3a:5f:89:4e:85:6c:d6:32:68:17:ae:75:99:9f:20:c9:58:
         ae:6c:9d:53:3a:56:f3:b7:5b:fd:c0:f6:11:f7:5c:14:09:85:
         53:34:3e:13:ad:69:1a:5d:28:85:51:3e:a0:84:42:41:f9:a6:
         01:53:0d:01:a7:55:2b:4e:f8:f3:a6:73:56:c6:8c:63:fc:e9:
         d3:3b:2e:82:2a:b1:42:9b:5b:21:04:97:bc:da:a6:31:b5:4a:
         ce:52:05:48
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUXjZmkC6uE+3LNN05GwD+Rz5dCVgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjYwNjE4MjE1NDAwWhcNMjcwNjE3MjE1OTAw
WjAzMTEwLwYDVQQDEyg2OTgzM0U4QUFCRjMwQjA2NzEyNDZGQzhCQjZDRkE4OTQz
MTQ0MDZEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0izYgoPt7afb
gQ4YYCBIk9ClEkA+IdVEQFUH1m32h8yXEFmM5UqOlvRMJrUvRQwN2+zNQIpxbkB8
H7LkYOTA51xz13/cnKosmCBmwgGrsQiinYdz2aVaKxmpMp/T62hTTWDaxc0OrMEP
6ZY1Oy68Zeaae/Bs22cEQML5PejRY8XF0i782/ALkHbjX/so9VpirxwALMTw1NSU
pRGlX8u+MEwIR4uCNAePZ5WY8Gs35u7j5X514mbUcoYFFcSogJhKsjCm3lJC1g2G
iNAAw15Tb4D93IuAnfWRcULDIo2ypZI+XYocV3Psb5M3QJupBuQvWIhrh8ESW0Pd
KuZO8zmRuwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGmDPoqr8wsGcSRvyLts+olD
FEBtMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMxMzkzMjJlMzIzMDM5MmUzNjMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMDMyMzIzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNE+MA0GCSqGSIb3DQEB
CwUAA4IBAQDHopkUzPNSrlqc0H277GfUVFGzYltIvPy4BokW8Ty3MGK2p51EeBcm
0EsiYIWFerLupdMk/B1O3w63Ivq88xOlvV7rpkbcFQ7OEJTdvy9bJ/JDx0bry6de
imKP8NXBZ6yKbAloXVPP/WObytzHxBlGWiMCTK05kypl/VOkrBMm5BtyWFr0zyNz
Hp7eXjArH+PYDeZRZspUaHJ1BYI1+cYSz6J6Ol+JToVs1jJoF651mZ8gyViubJ1T
Olbzt1v9wPYR91wUCYVTND4TrWkaXSiFUT6ghEJB+aYBUw0Bp1UrTvjzpnNWxoxj
/OnTOy6CKrFCm1shBJe82qYxtUrOUgVI
-----END CERTIFICATE-----
Generated at Fri Jul 10 18:07:05 2026 by rpki-client