Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3138322e302f32342d3234203d3e2039333034.roa
File:                     3139342e33332e3138322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          YswKlby4dLzLn3XMiMfI/8Ge/3LnP/C0V8RSGvFde2o=
Subject key identifier:   38:4C:4C:B1:8E:77:23:09:E4:A6:FA:86:84:B0:A1:19:81:C5:EF:12
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5854E2ADD8368719FA8AFCEFC3EA0080743B96B8
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3138322e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 05 Jun 2026 13:51:42 +0000
ROA not before:           Fri 05 Jun 2026 13:46:42 +0000
ROA not after:            Fri 04 Jun 2027 13:51:42 +0000
asID:                     9304
IP address blocks:        194.33.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Jun 2026 19:32:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:54:e2:ad:d8:36:87:19:fa:8a:fc:ef:c3:ea:00:80:74:3b:96:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun  5 13:46:42 2026 GMT
            Not After : Jun  4 13:51:42 2027 GMT
        Subject: CN=384C4CB18E772309E4A6FA8684B0A11981C5EF12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f1:74:b9:d4:d8:c9:36:e6:eb:13:ed:f8:50:
                    79:95:44:e8:0f:e4:83:aa:2e:0e:99:98:9f:64:d0:
                    6c:55:4c:77:11:d0:6d:26:9c:9c:bd:51:51:64:a1:
                    d9:1f:49:65:d4:09:a8:5a:02:cc:12:4a:e8:50:32:
                    c4:ba:ef:14:83:64:91:dd:d1:dd:2d:e9:07:42:10:
                    4b:e3:a4:94:47:1b:7b:37:87:25:f7:b6:44:a7:52:
                    90:17:f7:fa:21:0e:c0:e6:73:d1:89:7d:1b:8a:0a:
                    50:30:17:b6:cb:8f:7f:09:fc:5f:a7:65:19:d4:03:
                    43:6a:62:88:10:9b:cb:ec:c7:af:5d:21:61:b9:b5:
                    84:fb:98:4e:c0:b6:0e:89:b9:67:6c:5d:c0:9c:81:
                    5c:2d:7d:ed:a8:f6:8e:e1:db:3a:80:d2:42:7a:53:
                    2e:5f:9a:2d:b6:13:99:68:5e:74:31:39:43:dd:69:
                    68:a2:ae:07:50:f5:7d:e0:14:ac:8f:0a:54:c1:ae:
                    f9:c6:0d:1a:4f:f6:f3:ed:1e:08:af:54:98:12:53:
                    b3:87:d2:84:d8:c5:9b:bb:d4:bc:88:e6:8b:7d:87:
                    a5:33:1e:75:90:88:aa:28:08:69:79:a3:a0:c1:99:
                    dc:64:96:b7:03:35:da:60:d3:d0:ab:d8:e4:99:96:
                    4f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:4C:4C:B1:8E:77:23:09:E4:A6:FA:86:84:B0:A1:19:81:C5:EF:12
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3138322e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:ae:b3:b7:3f:d5:10:83:5f:c8:a3:65:97:4c:63:37:18:f9:
         8a:bb:d2:6f:ac:01:31:f8:c0:90:a8:73:4e:8e:74:32:77:5e:
         3d:62:e0:0c:90:a4:fa:df:04:23:7e:e3:23:84:61:7e:8d:a8:
         f0:ef:2c:af:23:4f:ba:96:e7:27:01:3c:cf:c7:8d:b4:e0:45:
         f5:97:f6:77:2e:2c:4d:c6:39:a9:1f:84:e1:46:00:6f:9f:b1:
         1a:ce:0c:66:0d:22:2e:e2:4e:e8:60:6a:b9:a6:cd:c9:ee:95:
         86:a5:3a:43:ba:3c:34:73:9e:e5:ad:0a:19:d3:43:d1:ee:06:
         0f:40:d5:90:58:2f:26:64:0e:f8:f4:d7:64:06:1c:bd:37:23:
         ac:d8:26:a6:af:5e:fe:6c:59:2b:60:e4:35:3c:a0:e6:7b:00:
         23:6f:eb:b5:cc:96:9e:72:bc:3e:6a:08:66:ab:65:be:b7:54:
         da:63:e6:67:48:24:3d:ac:65:42:65:57:de:99:0b:b4:8a:b9:
         f9:f2:91:7b:7b:e9:e1:08:3a:70:d3:99:b9:8e:61:5a:74:29:
         09:7d:d5:81:9b:54:88:bb:a0:cd:1e:f4:f0:ab:37:d5:30:5c:
         38:38:a1:4a:0a:a4:17:14:87:00:bc:9d:7e:f0:01:c4:48:e5:
         d1:09:47:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:25:58 2026 by rpki-client