Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e2036303739.roa
File:                     3139322e3230382e372e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          TvK3QQSNtM36IijPq5ziqs9RMVmkI4VQCRU/VXvnYW8=
Subject key identifier:   44:03:5C:45:8B:7B:3E:BD:65:16:FC:41:FB:0D:C9:DC:FC:27:F7:AA
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       6E812DFF78C94C922F15B5DF0C9C5EC66BB2963E
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e2036303739.roa
Signing time:             Mon 06 Jul 2026 18:22:46 +0000
ROA not before:           Mon 06 Jul 2026 18:17:46 +0000
ROA not after:            Mon 05 Jul 2027 18:22:46 +0000
asID:                     6079
IP address blocks:        192.208.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 12:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:81:2d:ff:78:c9:4c:92:2f:15:b5:df:0c:9c:5e:c6:6b:b2:96:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jul  6 18:17:46 2026 GMT
            Not After : Jul  5 18:22:46 2027 GMT
        Subject: CN=44035C458B7B3EBD6516FC41FB0DC9DCFC27F7AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:f1:9f:8f:2e:64:e0:ef:f2:5e:8a:fa:c4:
                    5d:57:51:c4:b6:9d:4a:0b:24:25:14:68:2c:5e:a1:
                    c1:3c:18:91:7f:c5:17:b3:3d:86:99:0e:32:89:32:
                    81:e1:09:ea:9b:c8:4f:38:f8:a0:14:3e:8b:90:65:
                    68:f2:4f:53:50:e1:78:61:d3:28:4f:a3:3e:bf:a0:
                    79:9f:10:fd:da:34:7d:5b:50:e1:97:72:d3:da:09:
                    db:95:34:6e:39:6b:69:6d:5c:d7:6c:b2:9b:c4:2a:
                    cc:12:40:56:4a:79:11:1a:ce:4a:f8:e1:d3:e9:98:
                    c6:35:a1:59:9d:14:6a:fa:ab:fb:5c:84:f7:8c:65:
                    88:b1:61:fb:1b:e9:0e:b5:71:16:04:ce:2b:6e:5e:
                    a1:fe:f5:a3:0f:0f:26:83:14:f8:ed:cf:d7:45:9b:
                    7f:3d:14:bf:1b:09:44:d8:30:09:b9:53:60:8f:36:
                    88:bb:2f:d8:34:6b:51:cd:10:e2:a9:bb:b7:19:f3:
                    81:c6:a6:58:27:91:97:e7:86:b9:cc:eb:e7:3b:42:
                    fc:02:07:9d:bd:46:3c:49:30:dd:25:0b:dc:48:04:
                    92:f1:1a:c5:86:8f:36:80:d2:b3:f6:c2:45:0d:14:
                    13:e7:0e:2f:5d:b4:a5:77:47:aa:ec:41:41:4e:e4:
                    0c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:03:5C:45:8B:7B:3E:BD:65:16:FC:41:FB:0D:C9:DC:FC:27:F7:AA
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:31:4e:e1:13:45:2a:76:bc:f5:5d:f8:00:35:94:13:e2:ca:
         08:9e:6c:0b:96:cd:ef:7c:a2:02:17:f0:21:ae:db:ec:21:23:
         75:59:31:85:79:9e:89:fa:c8:87:fd:67:9c:7f:b2:d3:c2:5e:
         d7:30:7d:ae:16:55:67:e2:ba:22:10:b6:77:b2:5f:13:a6:05:
         7d:80:eb:da:9b:c0:73:f9:10:db:82:b1:1d:99:44:4f:3a:70:
         82:6e:99:0c:36:a7:85:71:dc:35:ce:e8:94:57:e2:36:9f:5a:
         82:61:65:26:00:c4:23:7d:f6:5c:13:34:da:04:fb:dd:6e:63:
         4b:1e:09:1a:71:65:6a:b0:74:64:3b:0d:fd:df:26:49:c6:ae:
         95:e7:60:3c:72:03:07:10:6a:75:04:e0:a1:c7:c5:d8:0e:ea:
         21:ea:d4:8d:7e:8a:33:55:48:e6:09:c3:e8:4f:9e:fe:49:f6:
         fc:df:87:74:fd:71:ae:88:bd:62:f1:57:c6:35:5d:bd:4f:2f:
         93:9a:24:30:bf:59:22:1f:b8:b5:0b:33:2d:e0:49:86:10:97:
         e4:9b:3a:f8:b6:57:4d:fc:07:f0:ce:48:8e:b0:3d:0a:68:ff:
         4a:76:f3:8a:a7:20:84:ff:e8:e3:c7:a9:82:ef:68:b6:dd:9b:
         ad:96:15:67
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUboEt/3jJTJIvFbXfDJxexmuylj4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjYwNzA2MTgxNzQ2WhcNMjcwNzA1MTgyMjQ2
WjAzMTEwLwYDVQQDEyg0NDAzNUM0NThCN0IzRUJENjUxNkZDNDFGQjBEQzlEQ0ZD
MjdGN0FBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgvxn48uZODv
8l6K+sRdV1HEtp1KCyQlFGgsXqHBPBiRf8UXsz2GmQ4yiTKB4Qnqm8hPOPigFD6L
kGVo8k9TUOF4YdMoT6M+v6B5nxD92jR9W1Dhl3LT2gnblTRuOWtpbVzXbLKbxCrM
EkBWSnkRGs5K+OHT6ZjGNaFZnRRq+qv7XIT3jGWIsWH7G+kOtXEWBM4rbl6h/vWj
Dw8mgxT47c/XRZt/PRS/GwlE2DAJuVNgjzaIuy/YNGtRzRDiqbu3GfOBxqZYJ5GX
54a5zOvnO0L8AgedvUY8STDdJQvcSASS8RrFho82gNKz9sJFDRQT5w4vXbSld0eq
7EFBTuQMnwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFEQDXEWLez69ZRb8QfsNydz8
J/eqMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4
MzYxMTczOGZmLzAvMzEzOTMyMmUzMjMwMzgyZTM3MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzYzMDM3Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADA0AcwDQYJKoZIhvcNAQELBQADggEB
AEwxTuETRSp2vPVd+AA1lBPiygiebAuWze98ogIX8CGu2+whI3VZMYV5non6yIf9
Z5x/stPCXtcwfa4WVWfiuiIQtneyXxOmBX2A69qbwHP5ENuCsR2ZRE86cIJumQw2
p4Vx3DXO6JRX4jafWoJhZSYAxCN99lwTNNoE+91uY0seCRpxZWqwdGQ7Df3fJknG
rpXnYDxyAwcQanUE4KHHxdgO6iHq1I1+ijNVSOYJw+hPnv5J9vzfh3T9ca6IvWLx
V8Y1Xb1PL5OaJDC/WSIfuLULMy3gSYYQl+SbOvi2V038B/DOSI6wPQpo/0p284qn
IIT/6OPHqYLvaLbdm62WFWc=
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:27 2026 by rpki-client