Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e2036303739.roa
File:                     3139322e3230382e342e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          81oXVnahNl7dyTRikwtmEMdTVkfwVYjI8rqeug/uuww=
Subject key identifier:   55:40:CB:75:64:33:2B:2E:FE:F4:FE:1B:A6:17:24:9E:DC:CE:07:54
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       114A4BD07E6EFFB5D41ACD37CD82311332B5C41F
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e2036303739.roa
Signing time:             Mon 06 Jul 2026 18:22:44 +0000
ROA not before:           Mon 06 Jul 2026 18:17:44 +0000
ROA not after:            Mon 05 Jul 2027 18:22:44 +0000
asID:                     6079
IP address blocks:        192.208.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 12:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:4a:4b:d0:7e:6e:ff:b5:d4:1a:cd:37:cd:82:31:13:32:b5:c4:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jul  6 18:17:44 2026 GMT
            Not After : Jul  5 18:22:44 2027 GMT
        Subject: CN=5540CB7564332B2EFEF4FE1BA617249EDCCE0754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:32:97:f6:d8:e1:92:79:dc:10:0f:25:de:18:
                    5b:6c:0e:29:ec:e7:61:fa:71:72:81:1f:20:55:70:
                    ed:fe:e7:81:9e:8a:27:1d:28:8c:73:43:a2:bc:b2:
                    15:9e:c7:4b:bf:db:3e:80:d1:3e:7b:d9:00:1e:43:
                    c7:fe:1c:98:e8:6e:0b:34:f7:d9:b6:17:f7:87:54:
                    f6:72:01:02:f1:cb:a8:bf:46:b2:a3:8d:98:dc:1b:
                    5e:51:65:ae:2a:d0:1b:1f:5a:4e:e7:cf:0a:22:c1:
                    a4:b9:d4:2e:71:c0:e1:4c:3a:e9:a8:6c:f0:9c:e2:
                    06:9f:0a:15:40:4b:73:e0:f4:f9:7b:30:c0:50:03:
                    dd:49:12:92:7c:1d:f7:3c:62:1f:5b:84:f8:a2:9a:
                    38:8c:5d:35:19:aa:84:28:02:bd:ae:17:a7:8d:08:
                    6a:ae:c1:3c:fb:44:4c:a1:de:9d:ff:fd:34:1b:49:
                    92:59:32:c0:6d:18:c7:cf:65:0b:94:d2:8b:90:e5:
                    39:3f:87:f0:bf:c2:bc:83:d5:59:6c:54:7e:47:b1:
                    6a:56:d8:b2:4f:d5:a4:f7:c7:38:2b:15:48:20:08:
                    39:82:cb:c8:53:4f:22:f3:e1:68:38:9c:49:fd:15:
                    95:e9:e7:ce:99:4e:8a:36:fb:c2:4d:ed:2f:dc:61:
                    b1:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:40:CB:75:64:33:2B:2E:FE:F4:FE:1B:A6:17:24:9E:DC:CE:07:54
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:64:4c:40:01:26:a6:9e:b1:34:f8:01:35:05:9b:40:f8:f3:
         d6:25:0d:ec:8d:99:ea:6c:5d:40:f8:fd:3d:1b:bb:65:44:e8:
         5d:6a:22:7d:2f:e5:40:24:05:34:76:75:e4:c7:59:83:ae:3a:
         f3:e4:a5:99:a9:60:6f:38:f5:50:82:33:1c:11:10:d9:7b:4d:
         66:77:61:28:20:28:8b:ef:6e:bf:4b:ea:7e:c9:a2:2a:4c:93:
         ea:e5:cb:01:9d:d1:bf:66:78:86:e8:ee:5b:14:c6:4d:a0:02:
         af:71:79:d0:db:f0:08:1e:cb:84:52:99:b1:b6:a4:e6:c4:92:
         fe:1b:f2:8a:c8:d4:d3:0e:8d:5d:70:2a:62:91:e8:e2:b8:35:
         ec:fe:19:f0:1b:e1:33:0b:8b:b4:dc:7b:ce:f7:35:53:4d:08:
         3d:4b:50:20:23:27:10:93:ed:74:22:28:7a:7b:c1:17:f9:60:
         03:f4:be:c6:fb:d6:b8:16:44:f4:8a:ce:c6:87:98:46:1b:83:
         01:79:aa:79:b0:26:cd:62:b4:f1:9d:b4:51:e2:14:6c:65:45:
         7c:58:c1:e9:47:4b:62:ee:e9:b7:c9:1d:2d:57:46:c4:73:77:
         ab:55:85:9b:80:71:50:97:68:6e:2b:f9:f1:17:9f:21:0f:c5:
         99:35:67:85
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUEUpL0H5u/7XUGs03zYIxEzK1xB8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjYwNzA2MTgxNzQ0WhcNMjcwNzA1MTgyMjQ0
WjAzMTEwLwYDVQQDEyg1NTQwQ0I3NTY0MzMyQjJFRkVGNEZFMUJBNjE3MjQ5RURD
Q0UwNzU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jKX9tjhknnc
EA8l3hhbbA4p7Odh+nFygR8gVXDt/ueBnoonHSiMc0OivLIVnsdLv9s+gNE+e9kA
HkPH/hyY6G4LNPfZthf3h1T2cgEC8cuov0ayo42Y3BteUWWuKtAbH1pO588KIsGk
udQuccDhTDrpqGzwnOIGnwoVQEtz4PT5ezDAUAPdSRKSfB33PGIfW4T4opo4jF01
GaqEKAK9rhenjQhqrsE8+0RMod6d//00G0mSWTLAbRjHz2ULlNKLkOU5P4fwv8K8
g9VZbFR+R7FqVtiyT9Wk98c4KxVIIAg5gsvIU08i8+FoOJxJ/RWV6efOmU6KNvvC
Te0v3GGx9QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFVAy3VkMysu/vT+G6YXJJ7c
zgdUMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4
MzYxMTczOGZmLzAvMzEzOTMyMmUzMjMwMzgyZTM0MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADA0AQwDQYJKoZIhvcNAQELBQADggEB
ADhkTEABJqaesTT4ATUFm0D489YlDeyNmepsXUD4/T0bu2VE6F1qIn0v5UAkBTR2
deTHWYOuOvPkpZmpYG849VCCMxwRENl7TWZ3YSggKIvvbr9L6n7JoipMk+rlywGd
0b9meIbo7lsUxk2gAq9xedDb8Agey4RSmbG2pObEkv4b8orI1NMOjV1wKmKR6OK4
Nez+GfAb4TMLi7Tce873NVNNCD1LUCAjJxCT7XQiKHp7wRf5YAP0vsb71rgWRPSK
zsaHmEYbgwF5qnmwJs1itPGdtFHiFGxlRXxYwelHS2Lu6bfJHS1XRsRzd6tVhZuA
cVCXaG4r+fEXnyEPxZk1Z4U=
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:27 2026 by rpki-client