Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/3139322e3138392e38392e302f32342d3234203d3e203332303432.roa
File:                     3139322e3138392e38392e302f32342d3234203d3e203332303432.roa (raw, json)
Hash identifier:          vp3HkvIYd4mRN9SCRMbdfm6TTLGiu7IsfJm2ALW9Pe4=
Subject key identifier:   C9:94:D5:7B:CA:16:3A:10:CA:3E:82:CC:0A:27:C6:A0:D5:BF:91:FD
Certificate issuer:       /CN=3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288
Certificate serial:       42DCA717BF30B0E5D6C4172D220847F47C55E8E9
Authority key identifier: A8:8F:B4:DD:1C:10:02:2B:6E:FD:B3:A5:27:36:61:A4:1E:27:52:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/3139322e3138392e38392e302f32342d3234203d3e203332303432.roa
Signing time:             Thu 02 Jul 2026 14:37:51 +0000
ROA not before:           Thu 02 Jul 2026 14:32:51 +0000
ROA not after:            Thu 01 Jul 2027 14:37:51 +0000
asID:                     32042
IP address blocks:        192.189.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.crl
                          rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 21:18:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:dc:a7:17:bf:30:b0:e5:d6:c4:17:2d:22:08:47:f4:7c:55:e8:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288
        Validity
            Not Before: Jul  2 14:32:51 2026 GMT
            Not After : Jul  1 14:37:51 2027 GMT
        Subject: CN=C994D57BCA163A10CA3E82CC0A27C6A0D5BF91FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:72:98:c8:8d:d8:c4:ec:23:b4:ad:c2:c2:13:
                    a6:cd:93:9d:61:1c:da:c2:09:72:02:f6:5f:fa:c2:
                    68:41:be:af:77:66:1a:a4:41:2d:26:6b:09:e8:7b:
                    9d:42:87:b0:3e:8a:06:ec:25:45:81:b8:43:9b:e8:
                    02:85:07:42:c5:f4:d0:c8:eb:7a:6c:2c:f8:22:86:
                    88:0b:01:58:21:5d:02:15:53:b6:8f:41:de:77:57:
                    17:da:fa:dc:0d:5d:6f:87:ae:93:96:01:7a:aa:44:
                    5c:eb:3f:88:f3:a9:b9:7e:15:b7:44:29:11:78:98:
                    ce:3b:01:47:c6:20:44:b9:29:53:18:df:fc:05:38:
                    e4:67:ec:dc:ff:92:a5:23:eb:a9:6a:4c:60:73:02:
                    5e:c3:ef:ed:46:7c:0a:3b:40:55:49:58:35:51:ae:
                    0b:31:36:ad:27:e0:79:ec:86:f4:a2:6b:07:6c:c9:
                    30:18:8d:b5:70:4f:8a:2b:44:82:93:18:f0:b2:12:
                    76:0c:9a:ba:92:39:21:44:f8:59:1f:d0:98:49:b5:
                    cc:b2:28:22:c5:1a:0d:84:08:8d:bb:56:d8:27:24:
                    b0:fd:9c:f8:30:e6:92:38:f0:a2:8d:00:cd:fa:f9:
                    e9:39:48:fb:1b:10:d1:d8:7c:2c:06:ee:2b:02:56:
                    ea:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:94:D5:7B:CA:16:3A:10:CA:3E:82:CC:0A:27:C6:A0:D5:BF:91:FD
            X509v3 Authority Key Identifier:
                keyid:A8:8F:B4:DD:1C:10:02:2B:6E:FD:B3:A5:27:36:61:A4:1E:27:52:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/A88FB4DD1C10022B6EFDB3A5273661A41E275233.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2cdb319-ae5d-4d45-8754-29f4bc31c46d/3c17a76cc4c7a9ae582e1d9e0577dd6fbd27d5955ea0947288.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/a347c04faa63423bac4fb11b7759b696/0/3139322e3138392e38392e302f32342d3234203d3e203332303432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.189.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:f7:70:3f:0d:6d:4c:cc:d7:00:95:ee:33:91:50:5b:22:c5:
         18:df:33:55:33:e7:c4:28:b3:cb:2d:f7:9a:f5:6b:54:94:a9:
         65:d6:ce:ca:3b:11:72:74:e4:58:fc:3b:e0:60:3d:35:9a:41:
         1a:a6:78:f1:29:d4:2e:11:fd:f5:cd:09:10:5f:31:7b:86:57:
         69:a6:25:64:b3:f0:14:07:e8:9a:f6:49:d8:d1:bb:49:d1:57:
         68:2d:f2:5b:f8:96:2c:74:25:c0:b8:9c:9f:eb:02:eb:3e:96:
         ba:76:38:70:6f:a2:ce:e4:39:ef:5a:64:28:1f:10:5d:06:6b:
         04:4d:67:a8:8a:31:10:04:55:e3:a9:b3:a1:2f:20:90:c2:ed:
         29:5c:f1:9c:02:3b:ba:be:5e:68:b8:85:6d:38:c0:b6:c5:75:
         e2:90:a0:b6:4d:ae:b4:60:bf:13:68:07:c6:1c:9a:f8:ba:08:
         ac:b0:23:ec:15:9a:d3:ff:b2:b2:f3:32:80:33:cb:2b:70:75:
         0c:1f:8f:3b:0a:fb:0d:fa:60:7e:a9:38:de:d4:a7:25:72:2d:
         f7:9b:ba:08:18:9c:03:31:1d:81:f6:fc:b9:9f:a8:ac:70:03:
         16:c7:aa:20:39:7c:95:be:84:92:22:af:9b:8a:53:b6:73:79:
         35:5c:61:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 02:44:38 2026 by rpki-client