Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e2039333034.roa
File:                     3139322e3130392e3131392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          GedYB1y1gcXQzvA+OPRtcNZQY1gY/4Vh/gDrJVqXWR8=
Subject key identifier:   7D:99:8F:0A:73:07:2A:BD:F0:79:DC:FA:B4:B8:DC:17:73:71:52:E5
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7A32BA19DE7935E77ED13B4DC6BB2C76E9AAE65B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 05 Jun 2026 13:51:39 +0000
ROA not before:           Fri 05 Jun 2026 13:46:39 +0000
ROA not after:            Fri 04 Jun 2027 13:51:39 +0000
asID:                     9304
IP address blocks:        192.109.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:32:ba:19:de:79:35:e7:7e:d1:3b:4d:c6:bb:2c:76:e9:aa:e6:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun  5 13:46:39 2026 GMT
            Not After : Jun  4 13:51:39 2027 GMT
        Subject: CN=7D998F0A73072ABDF079DCFAB4B8DC17737152E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:31:46:ab:4c:c3:0b:57:f6:01:e5:19:0d:
                    5e:3d:05:35:61:bb:cd:24:5f:e4:a8:87:f7:3d:94:
                    a6:51:15:3f:fa:40:70:a4:ea:7c:e8:06:93:29:80:
                    33:8a:65:ee:be:46:e6:cd:60:fa:f0:46:7c:f1:90:
                    1d:65:c9:d6:c8:4a:01:63:e5:54:2c:b0:4b:21:b1:
                    b8:ab:05:27:65:e2:2c:5f:0d:49:d7:4a:77:c8:8f:
                    d1:92:fd:b9:39:ba:93:85:f3:3d:7a:c9:ea:4e:34:
                    24:85:fd:be:1b:e0:b1:26:64:59:95:d4:ca:48:9b:
                    d8:2c:90:e0:0d:07:c8:32:16:49:70:e6:98:89:08:
                    02:d6:d5:fb:f1:9e:50:85:ae:af:52:ec:ba:65:6f:
                    8a:b3:fd:05:44:38:62:18:6b:b4:7d:9b:3d:55:13:
                    65:ec:7b:f4:7a:18:63:54:e1:7c:8b:cd:b5:1d:9a:
                    a8:55:c0:bc:dc:f0:fb:4a:09:ab:67:fa:04:31:b6:
                    f1:07:fe:ce:51:a1:ac:ad:e2:90:9a:c4:1b:fd:bd:
                    7b:e2:2a:97:b9:6c:40:90:85:cb:59:e3:34:c7:d5:
                    73:39:7d:8a:79:4c:49:8d:38:75:a9:d7:e3:ee:6c:
                    3d:32:6f:58:4d:fd:b9:31:50:28:5c:24:b3:5c:01:
                    8c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:99:8F:0A:73:07:2A:BD:F0:79:DC:FA:B4:B8:DC:17:73:71:52:E5
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3131392e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:f9:ab:ba:bd:df:66:3e:87:17:f7:e1:35:6b:7b:60:1c:37:
         7f:ff:23:4d:e6:d7:2e:d5:1e:48:f9:6d:24:b5:b8:ca:1f:da:
         a5:14:ff:fb:81:50:46:4d:4e:78:0d:58:d1:38:84:97:23:52:
         ec:35:b4:38:8b:1c:62:4f:bc:28:0a:82:e8:36:34:03:1a:a4:
         e9:a2:10:f2:8e:1c:db:94:a0:7a:19:23:96:38:ae:24:49:ba:
         3a:ee:d7:13:24:b9:95:24:aa:94:17:f5:02:b2:91:e1:c9:b2:
         bc:f9:e5:1a:f3:90:75:01:77:1a:5b:78:ec:28:ea:f6:54:80:
         a5:09:b8:09:12:08:17:67:23:fc:f8:31:2c:4f:a3:b8:44:e2:
         f5:13:35:61:31:8e:26:5f:7e:d0:4c:07:9c:3f:61:3d:ab:73:
         ac:1f:1c:0e:3f:0f:90:f6:e1:3a:5f:17:78:75:e8:53:4a:28:
         5c:43:4b:6f:e3:05:57:88:37:34:e8:e8:e1:50:ad:cc:4a:8e:
         c3:8e:3a:26:2b:25:56:e3:fc:a4:76:2f:2f:9f:c6:e2:47:83:
         99:f9:f0:c6:41:65:08:73:e7:65:27:62:3b:ad:65:da:36:45:
         bc:68:5a:1e:75:c4:70:e7:46:9f:2c:51:ab:16:f5:88:65:5e:
         e3:dc:cc:36
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUejK6Gd55Ned+0TtNxrssdumq5lswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNjA1MTM0NjM5WhcNMjcwNjA0MTM1MTM5
WjAzMTEwLwYDVQQDEyg3RDk5OEYwQTczMDcyQUJERjA3OURDRkFCNEI4REMxNzcz
NzE1MkU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE8xRqtMwwtX
9gHlGQ1ePQU1YbvNJF/kqIf3PZSmURU/+kBwpOp86AaTKYAzimXuvkbmzWD68EZ8
8ZAdZcnWyEoBY+VULLBLIbG4qwUnZeIsXw1J10p3yI/Rkv25ObqThfM9esnqTjQk
hf2+G+CxJmRZldTKSJvYLJDgDQfIMhZJcOaYiQgC1tX78Z5Qha6vUuy6ZW+Ks/0F
RDhiGGu0fZs9VRNl7Hv0ehhjVOF8i821HZqoVcC83PD7SgmrZ/oEMbbxB/7OUaGs
reKQmsQb/b174iqXuWxAkIXLWeM0x9VzOX2KeUxJjTh1qdfj7mw9Mm9YTf25MVAo
XCSzXAGMNQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFH2ZjwpzByq98Hnc+rS43Bdz
cVLlMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMjJlMzEzMDM5MmUzMTMxMzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzOTMzMzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBtdzANBgkqhkiG9w0BAQsF
AAOCAQEAsfmrur3fZj6HF/fhNWt7YBw3f/8jTebXLtUeSPltJLW4yh/apRT/+4FQ
Rk1OeA1Y0TiElyNS7DW0OIscYk+8KAqC6DY0Axqk6aIQ8o4c25SgehkjljiuJEm6
Ou7XEyS5lSSqlBf1ArKR4cmyvPnlGvOQdQF3Glt47Cjq9lSApQm4CRIIF2cj/Pgx
LE+juETi9RM1YTGOJl9+0EwHnD9hPatzrB8cDj8PkPbhOl8XeHXoU0ooXENLb+MF
V4g3NOjo4VCtzEqOw446JislVuP8pHYvL5/G4keDmfnwxkFlCHPnZSdiO61l2jZF
vGhaHnXEcOdGnyxRqxb1iGVe49zMNg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:39:38 2026 by rpki-client