Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3136302e302f31392d3234203d3e203239373730.roa
File:                     3139382e312e3136302e302f31392d3234203d3e203239373730.roa (raw, json)
Hash identifier:          4w/M0oCbod7ZP4jtCIZ8cigdFzu5yvS2HeQS8MQ0GjA=
Subject key identifier:   72:61:26:94:D8:7D:73:78:2B:41:BE:C7:4E:C5:A6:C2:E3:91:30:EB
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       2207799F9C1CE427FE63FCD34E1324A979D8D5A9
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3136302e302f31392d3234203d3e203239373730.roa
Signing time:             Tue 09 Jun 2026 07:50:14 +0000
ROA not before:           Tue 09 Jun 2026 07:45:14 +0000
ROA not after:            Tue 08 Jun 2027 07:50:14 +0000
asID:                     29770
IP address blocks:        198.1.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Jun 2026 04:51:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:07:79:9f:9c:1c:e4:27:fe:63:fc:d3:4e:13:24:a9:79:d8:d5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun  9 07:45:14 2026 GMT
            Not After : Jun  8 07:50:14 2027 GMT
        Subject: CN=72612694D87D73782B41BEC74EC5A6C2E39130EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:5e:f4:e7:3e:cc:23:52:f8:0e:be:d7:84:
                    4a:d8:95:7a:d1:f4:3c:04:fd:7e:50:46:1d:c4:99:
                    08:e0:2c:df:11:bf:44:dd:9b:2b:fc:8d:b8:42:9e:
                    8c:b8:ca:21:c5:ef:6c:3e:83:9e:ee:df:7e:f7:50:
                    5d:8d:4a:55:9c:f4:34:4b:c4:1a:a6:8c:34:9c:52:
                    a3:da:39:09:b1:d5:5c:11:c7:e0:71:43:02:42:c8:
                    31:6e:0c:be:ac:3e:06:ab:2a:64:26:67:a7:5e:74:
                    70:e4:a2:75:38:b1:fb:a2:7f:49:3f:e8:b1:f3:8e:
                    12:b2:dc:e3:fe:1a:f0:81:03:c4:31:4c:27:ca:58:
                    b8:81:ec:e6:a3:10:ae:80:19:75:7a:e8:e7:06:a9:
                    4e:61:56:61:dc:05:2d:2a:40:3b:48:73:ab:1b:98:
                    9b:ff:76:78:77:89:a1:99:e2:d2:fe:4b:b9:e1:3a:
                    2b:d1:3b:1a:de:be:6d:52:28:07:d7:7c:69:89:c0:
                    b2:70:ea:37:2f:05:86:d2:91:0c:e5:56:64:55:33:
                    86:7f:df:e4:60:70:ca:62:7b:ae:bb:f6:b7:21:e7:
                    d7:59:16:cc:50:0e:b6:8d:ea:c6:6e:34:dc:a9:38:
                    d0:1e:23:38:81:74:a7:5b:c5:6a:28:3d:3d:79:b3:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:61:26:94:D8:7D:73:78:2B:41:BE:C7:4E:C5:A6:C2:E3:91:30:EB
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3136302e302f31392d3234203d3e203239373730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:d0:22:75:0c:af:9e:e4:47:7f:38:9c:32:ff:2d:7e:7c:b8:
         40:52:a1:fc:1a:d7:af:e0:de:30:fe:d5:0f:c4:bb:56:cf:d8:
         d4:6d:ee:e2:3a:b6:24:a9:50:08:70:32:a4:54:db:8b:c7:44:
         b9:0a:b3:6f:f4:74:0f:34:d7:cf:be:fc:70:10:44:e7:b7:0b:
         3a:73:30:84:50:bd:e0:c7:11:6b:21:ec:77:68:82:d6:4b:2b:
         58:a4:ef:d9:f1:78:6d:c6:93:36:43:be:e0:11:e0:e3:dd:35:
         96:7e:a1:c9:6b:3c:74:6a:37:a1:ab:76:f1:8e:dc:2f:e7:63:
         d2:27:60:f5:7a:f7:b2:3c:65:ff:d8:c2:04:d3:9a:3a:8d:99:
         1a:0c:3c:cc:f5:0c:2b:8b:f9:4f:9a:f7:35:c3:63:b9:01:e9:
         75:7c:d9:98:81:21:44:56:4a:d0:a1:70:e6:81:79:50:fa:9b:
         8f:de:11:91:7c:85:79:6e:b9:9c:de:0a:39:18:92:70:a2:70:
         ec:ad:2c:7e:bd:ec:34:82:3e:17:31:89:f4:2c:46:26:d6:1f:
         3e:e9:53:46:98:d4:ac:99:42:93:4c:d6:36:91:35:9d:d3:80:
         da:4f:86:65:74:9d:5f:e3:b5:f3:45:61:a9:f9:9b:31:2d:38:
         7a:f2:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 05:28:41 2026 by rpki-client