Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134382e3235352e302f32342d3234203d3e203130363438.roa
File:                     3139332e3134382e3235352e302f32342d3234203d3e203130363438.roa (raw, json)
Hash identifier:          kjDhE4icbcCaKSS1+CQwApdbseoT0zd34nFZFpX5gNc=
Subject key identifier:   E2:1F:EE:F1:13:05:D9:97:D9:6F:D7:ED:96:D1:7E:B4:0F:10:14:75
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       73ABE245C96004A96F79E70D91375A340599322F
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134382e3235352e302f32342d3234203d3e203130363438.roa
Signing time:             Tue 15 Sep 2026 06:25:27 +0000
ROA not before:           Tue 15 Sep 2026 06:20:27 +0000
ROA not after:            Tue 14 Sep 2027 06:25:27 +0000
asID:                     10648
IP address blocks:        193.148.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 05:51:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:ab:e2:45:c9:60:04:a9:6f:79:e7:0d:91:37:5a:34:05:99:32:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 15 06:20:27 2026 GMT
            Not After : Sep 14 06:25:27 2027 GMT
        Subject: CN=E21FEEF11305D997D96FD7ED96D17EB40F101475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:bb:5d:31:44:b5:c2:f9:fc:d1:d9:18:4c:7a:
                    78:35:d7:3a:50:85:94:2f:83:10:08:23:e7:fb:19:
                    ad:b8:e9:cb:5a:d9:be:d8:cb:a0:93:5c:f9:84:90:
                    1c:cf:16:4f:fc:05:4c:c6:3b:3b:bc:03:f9:f0:43:
                    fe:f6:fa:fa:75:1b:d4:23:bf:8b:21:4d:ab:33:2a:
                    5a:41:26:9f:06:b3:09:82:23:38:63:9f:4f:ea:32:
                    96:55:52:db:42:79:a0:c6:e8:aa:16:d1:02:5b:93:
                    e6:76:ee:ef:5e:2c:79:7a:01:78:4d:db:94:2b:4f:
                    99:b1:a8:d6:0b:f9:ce:d8:c6:f7:41:43:2f:c8:7f:
                    a4:c9:27:e5:e4:75:2a:08:dc:be:9c:86:3b:20:5e:
                    54:17:45:0d:17:1f:98:ab:a1:27:50:39:7c:2b:78:
                    ed:24:d9:e7:e4:bc:56:c9:ea:14:f6:ba:6c:71:ed:
                    ff:79:ee:da:e0:f8:d2:46:a1:c0:e2:a3:41:55:b8:
                    7a:24:ca:ee:9a:25:2c:ca:91:eb:a0:94:3b:c0:33:
                    2c:67:12:d3:74:38:75:d1:e2:5c:37:0a:d5:80:c1:
                    bc:4a:28:a2:a5:e3:9c:cc:b1:93:5c:ff:f4:58:5a:
                    5f:14:a0:e3:00:57:07:03:c8:d3:55:d9:cf:44:13:
                    04:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:1F:EE:F1:13:05:D9:97:D9:6F:D7:ED:96:D1:7E:B4:0F:10:14:75
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134382e3235352e302f32342d3234203d3e203130363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.148.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:3a:5f:ee:bd:21:7b:fd:08:ee:3d:72:9c:bb:d2:45:9e:c0:
         43:24:a3:e5:76:1d:57:2f:75:5e:3b:7b:af:d5:28:06:9b:f4:
         00:4a:a4:84:10:e1:cb:32:17:da:2d:7d:67:6f:a5:89:92:b6:
         cf:d1:5f:d0:ec:7c:d2:05:15:d2:39:18:d4:ba:cd:4e:9a:0f:
         13:36:ac:8f:4c:18:21:9b:c1:51:0e:2b:c8:96:9c:83:81:02:
         43:11:3d:14:ca:5d:71:9b:d2:61:15:b1:e1:4c:d6:17:f3:92:
         b6:ba:a5:81:c3:85:54:eb:07:1c:77:5e:5c:12:be:cc:89:01:
         e4:58:3e:78:b4:a7:fc:a3:78:20:a7:1c:b3:94:58:6b:a5:9e:
         11:66:e1:b2:48:4b:22:bb:b8:be:23:46:47:c1:13:1e:e2:15:
         6d:bb:15:65:0f:14:79:89:8b:81:d9:35:a7:1a:53:00:e4:2e:
         93:76:3b:84:b1:03:a1:af:eb:7b:38:a1:c2:9c:28:0b:d2:a8:
         d9:2a:ce:bf:d2:f4:0f:90:83:20:78:37:3f:75:37:95:a7:4a:
         86:ba:06:dd:33:7f:08:a1:8c:4c:aa:9b:c7:e0:4c:cd:b6:03:
         29:7a:ff:7b:96:c9:14:92:4e:cd:92:f0:b6:a8:6a:b4:7a:71:
         6c:1a:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:59:31 2026 by rpki-client