Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa
File:                     3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa (raw, json)
Hash identifier:          ITeqRPxXqHIjWLsuYTnmlV+xjVDK5AjcG0+A8bpfmo8=
Subject key identifier:   04:1C:B7:49:03:6F:C3:53:5E:F1:67:81:97:D2:61:81:D3:46:B7:AD
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       5E0423268C16A4ADF71800641EEDE2C2D6A7C2D8
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa
Signing time:             Fri 22 May 2026 10:01:31 +0000
ROA not before:           Fri 22 May 2026 09:56:31 +0000
ROA not after:            Fri 21 May 2027 10:01:31 +0000
asID:                     202294
IP address blocks:        192.209.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 May 2026 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:04:23:26:8c:16:a4:ad:f7:18:00:64:1e:ed:e2:c2:d6:a7:c2:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: May 22 09:56:31 2026 GMT
            Not After : May 21 10:01:31 2027 GMT
        Subject: CN=041CB749036FC3535EF1678197D26181D346B7AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:36:0f:08:39:78:cd:36:93:8a:38:b8:ac:80:
                    90:15:41:7a:92:3c:6e:b0:bd:a7:de:3e:64:c5:ac:
                    ac:82:37:7c:65:9b:da:fa:04:a8:f7:9b:79:fd:63:
                    55:7d:18:cc:71:b7:b4:7b:37:f2:64:30:2b:fc:a2:
                    f3:1d:db:c2:22:25:dc:5f:9d:9c:44:f0:9a:8e:7c:
                    e4:94:84:4f:1c:43:0b:7f:15:20:d6:d5:a5:7e:53:
                    a8:24:b4:9f:9a:fe:f7:c6:d0:69:73:d7:8f:42:d1:
                    ac:71:bc:65:cb:03:8e:ff:86:e9:1f:dc:6d:c9:03:
                    8a:07:f9:12:b5:47:b3:c1:7d:83:6e:09:35:6d:23:
                    de:f4:cb:be:ae:f3:1f:c8:f2:73:b3:b2:c1:cb:eb:
                    df:8c:29:1e:6c:ea:e9:4c:a1:74:6c:a9:b9:fe:aa:
                    cf:08:ee:8e:9b:e5:fa:98:c5:e6:8d:b5:70:a3:e7:
                    65:d1:f5:fb:a6:f0:4f:5b:16:1f:f1:b6:62:49:a2:
                    50:44:44:db:be:3b:da:6e:61:2f:8e:fc:98:d7:c1:
                    07:50:4f:f7:b9:c4:f7:50:8b:4e:ad:0a:4d:d3:75:
                    ef:8f:24:e6:1e:c7:89:ea:c8:da:66:63:77:39:01:
                    8c:7f:cb:7d:62:3c:c4:e5:b9:13:89:bb:40:8b:e0:
                    4a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1C:B7:49:03:6F:C3:53:5E:F1:67:81:97:D2:61:81:D3:46:B7:AD
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a1:b8:1e:de:02:4d:13:23:04:5b:b1:9a:83:ad:04:35:01:
         35:ae:00:d0:85:05:8d:ef:41:c7:0d:34:a0:b0:c4:8c:2f:0e:
         8a:75:42:43:b8:7b:77:52:c3:2a:df:f0:f5:63:79:12:43:67:
         aa:be:e3:24:09:21:e4:49:28:a4:e5:92:db:75:96:d4:9b:83:
         22:98:0f:79:37:5c:47:f8:ca:89:22:0f:07:d2:cb:a5:fd:48:
         73:57:b2:17:b0:81:70:85:9e:db:ce:a5:49:f7:bf:9f:cc:c5:
         7f:90:a2:8f:8c:aa:34:99:38:e9:f3:65:d0:5b:f3:77:5e:0e:
         e3:c4:3d:57:35:4a:07:5c:53:90:92:26:5a:54:dc:4c:fa:df:
         00:43:14:d7:91:8d:1f:26:1b:87:88:a2:0f:62:b2:c6:50:7b:
         3a:15:3e:3f:54:e8:cf:b9:61:13:06:30:c5:bb:e3:86:30:86:
         71:de:5b:8a:08:77:ec:3a:7e:26:e9:39:dc:17:24:6e:61:6e:
         3f:a6:98:64:7e:4d:5f:2d:19:5b:e6:b6:38:83:87:fb:1f:1c:
         2d:4d:53:af:d2:ea:74:f0:b8:90:ba:4f:93:d7:1c:c0:9d:49:
         9a:ef:cc:12:0c:1a:4a:44:f8:20:f7:8a:c0:82:23:e1:49:b7:
         ca:ff:1d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 25 16:36:59 2026 by rpki-client