Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e312e302f32342d3234203d3e20323132383935.roa
File:                     3139322e3230382e312e302f32342d3234203d3e20323132383935.roa (raw, json)
Hash identifier:          uqrXjRkIjLRnIF2FNfl3fxLg31+6IcYrgYg0iJTtz3I=
Subject key identifier:   95:22:D5:E9:1E:AE:B5:6F:7B:2C:19:31:9E:29:A4:A2:71:05:71:81
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       6E056835E5970E045B5CFD4BA38572041E6A1E24
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e312e302f32342d3234203d3e20323132383935.roa
Signing time:             Thu 01 Oct 2026 08:36:20 +0000
ROA not before:           Thu 01 Oct 2026 08:31:20 +0000
ROA not after:            Thu 30 Sep 2027 08:36:20 +0000
asID:                     212895
IP address blocks:        192.208.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 26 Oct 2026 16:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:05:68:35:e5:97:0e:04:5b:5c:fd:4b:a3:85:72:04:1e:6a:1e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Oct  1 08:31:20 2026 GMT
            Not After : Sep 30 08:36:20 2027 GMT
        Subject: CN=9522D5E91EAEB56F7B2C19319E29A4A271057181
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:51:cb:a0:33:4c:6c:96:b4:ef:10:97:21:
                    ec:84:85:fa:05:ac:82:1e:4a:ae:c2:1b:aa:9b:e9:
                    0b:5f:c4:0d:51:79:fc:4d:83:bb:24:4d:47:ec:56:
                    e7:8d:01:e0:bf:9d:dd:f0:39:01:cf:58:dd:40:f2:
                    c7:49:e5:d1:b7:d4:b1:60:c8:3c:9c:b6:55:e3:96:
                    11:8b:c0:a8:36:cb:a0:ef:fa:19:cf:b7:41:a7:25:
                    81:91:b8:81:d1:50:52:a3:ea:45:b7:61:f0:82:23:
                    78:84:0e:d4:7b:ed:a0:0a:98:b2:3c:db:f0:7d:07:
                    d1:fb:33:7f:44:4c:f3:b9:99:bd:4c:ee:5a:00:5e:
                    8a:6b:50:66:34:d3:f5:db:87:13:8c:cb:e2:8f:0e:
                    f4:bd:cb:e3:6c:d8:0c:fb:e0:63:fb:d4:0c:1c:c1:
                    79:27:4f:28:a3:eb:a1:12:55:c8:4c:2a:34:96:bb:
                    69:bc:b4:c9:26:a6:e2:38:11:e8:62:b5:50:c5:41:
                    5c:c6:30:e2:e3:95:1b:e6:fe:88:95:18:a1:8a:b9:
                    75:d8:15:a7:b1:10:04:32:69:fd:d1:df:57:6c:ec:
                    9f:3a:0a:e5:f3:a5:92:c0:22:8f:59:45:fe:6a:c9:
                    54:dd:89:f8:af:5f:f6:50:c9:d2:01:c4:d2:a8:5a:
                    d0:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:22:D5:E9:1E:AE:B5:6F:7B:2C:19:31:9E:29:A4:A2:71:05:71:81
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e312e302f32342d3234203d3e20323132383935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:7b:35:35:82:ba:05:b1:42:be:6a:7a:7b:13:0b:38:74:9e:
         5d:d7:5d:bb:ca:26:4a:b9:47:4f:86:41:f3:c0:98:33:43:9c:
         5b:80:ca:42:91:1a:e5:6e:5f:f1:98:4b:08:9b:0b:5d:ff:89:
         f4:7b:57:42:9e:4d:fd:c3:32:94:69:46:f4:e1:41:48:31:33:
         7f:29:8f:cf:3a:79:61:d1:2e:cf:a2:95:12:3d:f3:1f:6f:44:
         27:78:4b:60:c5:02:39:fd:04:08:60:90:80:16:2d:fb:37:d0:
         bb:67:44:ef:0e:f0:e5:cc:a7:44:de:1f:c6:85:65:1b:7e:68:
         76:52:18:e2:52:f7:a7:02:e9:57:c6:f8:c4:72:3c:51:1b:0a:
         b2:10:d3:f3:86:33:54:41:db:b0:75:b9:01:bc:c3:67:5c:d7:
         b2:47:62:62:b3:d9:4c:c2:db:b4:6b:10:ac:c9:8a:df:07:c2:
         57:cb:16:ce:ab:a8:9e:da:e6:a9:68:f6:3a:d8:12:eb:a4:e1:
         cd:be:70:e7:6a:31:ec:c2:5a:f6:69:f5:76:29:1d:19:cf:06:
         e0:05:83:97:e3:fc:ec:7c:ab:41:ed:45:55:95:a3:a8:50:5a:
         1e:0c:21:bc:82:27:23:14:73:12:9a:62:e9:2b:f8:83:49:fe:
         82:bb:5b:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:12:27 2026 by rpki-client