Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3132302e302f32342d3234203d3e203133323133.roa
File:                     3139332e3135302e3132302e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          FRW19+D7KwNm/LTeq3F9NlzCoolskHhH1pGyMBKAL7I=
Subject key identifier:   47:07:77:75:8E:84:D3:73:9B:4A:4F:8C:E4:A9:67:8B:94:7A:BF:70
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       54C9D13E31FC4F9D5AE14DF44979F216982E2D11
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3132302e302f32342d3234203d3e203133323133.roa
Signing time:             Fri 27 Mar 2026 14:35:54 +0000
ROA not before:           Fri 27 Mar 2026 14:30:54 +0000
ROA not after:            Fri 26 Mar 2027 14:35:54 +0000
asID:                     13213
IP address blocks:        193.150.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c9:d1:3e:31:fc:4f:9d:5a:e1:4d:f4:49:79:f2:16:98:2e:2d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Mar 27 14:30:54 2026 GMT
            Not After : Mar 26 14:35:54 2027 GMT
        Subject: CN=470777758E84D3739B4A4F8CE4A9678B947ABF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a1:09:60:eb:8f:8a:8b:af:6d:73:4f:13:89:
                    4e:2d:a1:65:e1:8e:c5:3f:c5:53:17:fa:cd:44:f5:
                    6f:e7:6c:03:fc:56:26:53:e4:0b:5f:9f:18:c4:e6:
                    61:c3:f3:5d:f0:4d:c1:8d:28:18:64:82:35:12:75:
                    27:b0:a8:22:d7:6d:52:db:84:fc:aa:f4:18:6a:86:
                    41:d8:2c:08:1f:7c:58:f9:8b:86:b9:b1:e1:cb:bc:
                    ef:75:ad:28:26:af:c0:d1:e9:98:c3:82:51:e9:fe:
                    48:54:27:68:ec:2f:f8:56:c2:6e:ea:c1:4d:6f:4c:
                    bd:d4:f3:1e:41:e7:e2:96:bf:56:23:11:42:05:38:
                    d6:3b:9a:df:fd:68:36:bc:af:ae:54:c5:71:c5:0d:
                    a2:e2:cb:3c:40:19:dc:94:64:7d:8b:b1:10:31:1d:
                    32:6f:d5:24:e6:1d:23:de:28:ad:8c:b3:07:cc:ee:
                    be:78:1d:55:ae:db:18:cb:e6:0d:22:07:49:61:a3:
                    af:21:5a:cd:0a:ec:e9:fc:65:4f:b7:63:dd:34:85:
                    d7:b9:46:ba:24:c0:af:45:4b:71:de:01:0a:81:91:
                    e4:c3:1c:04:03:3e:b5:77:14:fa:db:19:a9:dd:89:
                    54:99:b7:65:4c:10:22:06:5b:a8:86:f5:e5:cf:39:
                    9c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:07:77:75:8E:84:D3:73:9B:4A:4F:8C:E4:A9:67:8B:94:7A:BF:70
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3132302e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:cf:b9:a9:70:2d:5c:0c:5e:bf:53:41:60:f0:4f:d0:e3:2b:
         61:20:80:27:43:d9:68:ec:d1:f4:50:6b:98:7a:b2:c5:a2:d1:
         66:cd:ba:72:d8:e4:45:11:74:89:0d:ce:7c:4e:bb:7d:35:04:
         36:6a:d5:c3:2c:ab:d3:a1:43:c4:49:df:67:7d:31:ab:93:f3:
         03:c3:5e:fc:67:b4:66:37:2d:71:30:af:7f:c2:86:e9:f0:98:
         4c:ff:dd:dd:29:d8:32:9f:b8:a2:7f:8d:91:de:20:53:d6:45:
         6c:21:71:96:ba:b9:18:85:c7:72:3c:89:ff:44:20:7e:0d:90:
         dd:78:ce:c2:22:18:78:65:9d:13:65:38:a2:e2:c2:e0:2c:19:
         0c:15:9c:4e:d7:12:cc:09:1b:9b:bd:ab:a0:84:09:f4:f1:ca:
         07:1a:74:d4:d3:b3:6b:ae:b7:3a:7c:1b:4a:dd:bf:e6:d2:1f:
         b1:21:7e:24:d4:30:3b:ec:e1:50:59:f2:a7:19:43:d8:48:95:
         ae:c7:a4:b1:23:9f:b2:a5:25:a4:cf:2a:d4:0a:27:10:5a:26:
         57:3a:7b:25:e6:2c:7b:de:9c:37:55:44:0b:6b:24:7f:3d:aa:
         a6:c6:14:c1:be:0f:21:c1:ce:56:57:c9:36:c1:c8:e4:f7:79:
         2d:8c:1a:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:59 2026 by rpki-client