Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3136382e302f32342d3234203d3e203133323133.roa
File:                     3139332e3135302e3136382e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          NNUgU4vP70qAhY+3KXJA/Jl6UOeUTX9TiHp+yn7SX60=
Subject key identifier:   24:DC:95:91:B9:82:F4:EA:A6:4B:BF:35:F2:28:6E:7A:F9:85:2D:B3
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       20802101D5912F0A4485C45F8BBF462D9164A517
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3136382e302f32342d3234203d3e203133323133.roa
Signing time:             Fri 27 Mar 2026 14:35:54 +0000
ROA not before:           Fri 27 Mar 2026 14:30:54 +0000
ROA not after:            Fri 26 Mar 2027 14:35:54 +0000
asID:                     13213
IP address blocks:        193.150.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:80:21:01:d5:91:2f:0a:44:85:c4:5f:8b:bf:46:2d:91:64:a5:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Mar 27 14:30:54 2026 GMT
            Not After : Mar 26 14:35:54 2027 GMT
        Subject: CN=24DC9591B982F4EAA64BBF35F2286E7AF9852DB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7a:84:86:63:16:35:75:28:50:7d:84:7a:e2:
                    6e:ff:e7:f8:af:32:c6:f7:71:79:e2:e3:51:32:cf:
                    d8:ca:3c:63:e1:63:16:cd:98:09:d6:08:5a:d6:7e:
                    7d:59:e3:0f:1d:f3:76:b4:82:02:13:dd:a4:f5:54:
                    ad:4a:75:ae:44:1d:d9:98:49:44:02:69:02:6f:64:
                    4d:e9:48:ae:f8:ad:9f:b6:ad:e8:f0:bb:56:cd:75:
                    17:92:29:cb:57:87:1e:c1:fd:04:23:3a:5f:0c:75:
                    bb:fc:27:f2:84:c1:15:ae:63:19:18:af:6e:7c:20:
                    b7:08:77:2b:2e:23:19:d0:99:0b:5c:e5:c5:d6:9c:
                    55:99:5c:20:4f:fe:15:a8:4b:7e:81:be:20:5a:a9:
                    f2:0d:eb:6d:79:71:c1:c6:73:81:9b:a9:5d:f8:1b:
                    a8:a8:98:0e:5c:d2:96:02:8e:26:70:9a:df:3a:0f:
                    e1:21:46:52:9b:8d:44:8b:0d:6f:be:ac:2a:f6:54:
                    7e:6c:98:a3:92:49:0e:dc:25:7f:e7:88:72:54:01:
                    10:e8:30:73:90:fb:59:37:88:15:5d:96:4a:d2:71:
                    97:cd:d1:de:12:e7:37:db:63:35:2b:22:2c:e4:96:
                    61:8c:f6:e5:b6:1b:81:6c:90:cb:31:96:b2:ab:83:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DC:95:91:B9:82:F4:EA:A6:4B:BF:35:F2:28:6E:7A:F9:85:2D:B3
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3136382e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:de:c7:00:87:84:e1:51:57:e1:b0:37:53:3a:d9:b8:bd:
         81:ba:8d:1c:10:c0:be:9c:59:5b:c4:5e:b1:94:e1:89:97:15:
         7a:24:64:f4:09:b3:e3:e3:8a:8a:1c:d1:5f:49:62:7c:6f:e6:
         df:d3:19:64:e2:9e:3b:5e:4e:3d:04:38:1d:73:b5:a3:4a:b4:
         1e:7d:6b:93:64:25:67:3c:da:c0:bf:2b:93:2c:ab:91:d1:ca:
         39:27:14:93:b5:d9:5d:5f:f8:18:c7:5b:4d:39:0b:6f:bd:89:
         d4:8b:c2:fd:5c:a9:18:2f:5e:d6:72:6a:6d:37:85:d4:e1:78:
         20:39:ce:be:3b:d0:37:16:72:28:61:e9:80:88:2c:be:6e:ed:
         81:b4:2f:47:f2:a0:3d:65:90:ef:bc:80:ee:9d:90:2a:d7:c3:
         4a:00:ef:a5:c0:fe:65:15:26:bc:3d:6b:6b:c2:f2:59:b2:f5:
         bb:32:22:5f:f2:16:fd:de:4a:ee:93:38:9d:4e:9c:29:ba:3d:
         e0:fb:ec:50:53:c0:db:cc:4f:ce:8a:6c:57:56:b9:e2:a4:03:
         00:8d:4b:d3:e3:f3:ce:51:1e:40:37:3e:fa:32:36:73:4b:54:
         3f:61:7e:31:ca:de:34:91:60:61:72:6f:98:cb:5a:88:97:36:
         b9:13:c7:9d
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUIIAhAdWRLwpEhcRfi79GLZFkpRcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwMzI3MTQzMDU0WhcNMjcwMzI2MTQzNTU0
WjAzMTEwLwYDVQQDEygyNERDOTU5MUI5ODJGNEVBQTY0QkJGMzVGMjI4NkU3QUY5
ODUyREIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HqEhmMWNXUo
UH2EeuJu/+f4rzLG93F54uNRMs/Yyjxj4WMWzZgJ1gha1n59WeMPHfN2tIICE92k
9VStSnWuRB3ZmElEAmkCb2RN6Uiu+K2ftq3o8LtWzXUXkinLV4cewf0EIzpfDHW7
/CfyhMEVrmMZGK9ufCC3CHcrLiMZ0JkLXOXF1pxVmVwgT/4VqEt+gb4gWqnyDett
eXHBxnOBm6ld+BuoqJgOXNKWAo4mcJrfOg/hIUZSm41Eiw1vvqwq9lR+bJijkkkO
3CV/54hyVAEQ6DBzkPtZN4gVXZZK0nGXzdHeEuc322M1KyIs5JZhjPblthuBbJDL
MZayq4M9GQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCTclZG5gvTqpku/NfIobnr5
hS2zMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzEzNTMwMmUzMTM2MzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzIzMTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZaoMA0GCSqGSIb3DQEB
CwUAA4IBAQAfZd7HAIeE4VFX4bA3UzrZuL2Buo0cEMC+nFlbxF6xlOGJlxV6JGT0
CbPj44qKHNFfSWJ8b+bf0xlk4p47Xk49BDgdc7WjSrQefWuTZCVnPNrAvyuTLKuR
0co5JxSTtdldX/gYx1tNOQtvvYnUi8L9XKkYL17WcmptN4XU4XggOc6+O9A3FnIo
YemAiCy+bu2BtC9H8qA9ZZDvvIDunZAq18NKAO+lwP5lFSa8PWtrwvJZsvW7MiJf
8hb93krukzidTpwpuj3g++xQU8DbzE/OimxXVrnipAMAjUvT4/POUR5ANz76MjZz
S1Q/YX4xyt40kWBhcm+Yy1qIlza5E8ed
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:31:27 2026 by rpki-client