Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e203133323133.roa
File:                     3139342e33342e3133392e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          Hmk0a8rOS4SDsWffg9IsvFR8w/rGbnaVl8lBxJRpNfg=
Subject key identifier:   3D:F5:7B:5B:E1:64:B6:41:F9:63:19:AC:49:C9:1F:B6:B5:41:1D:9D
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7BA7C469207697326A3D07DB3256597768FD29B9
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e203133323133.roa
Signing time:             Fri 27 Mar 2026 14:35:54 +0000
ROA not before:           Fri 27 Mar 2026 14:30:54 +0000
ROA not after:            Fri 26 Mar 2027 14:35:54 +0000
asID:                     13213
IP address blocks:        194.34.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:32:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:a7:c4:69:20:76:97:32:6a:3d:07:db:32:56:59:77:68:fd:29:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Mar 27 14:30:54 2026 GMT
            Not After : Mar 26 14:35:54 2027 GMT
        Subject: CN=3DF57B5BE164B641F96319AC49C91FB6B5411D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:34:36:22:e8:d1:97:d5:86:8c:d0:07:67:4d:
                    54:6d:17:17:63:88:20:ac:f6:7d:4c:87:ad:c6:d2:
                    b2:8c:e7:13:5c:eb:ec:a2:0f:90:45:76:c3:bb:02:
                    08:0d:82:a1:bc:a8:60:1f:bc:06:ad:7e:bb:2d:05:
                    fa:3a:ac:cc:d3:b2:45:f5:b4:aa:75:4d:f7:a2:f8:
                    ea:e8:c5:26:d6:2a:83:8c:ab:9e:63:8f:7e:55:4f:
                    6e:b6:b4:63:23:e8:15:3f:3b:fb:ae:6d:bf:69:d6:
                    79:b4:de:65:d3:6e:f7:8a:11:a5:7e:5d:4a:9f:4f:
                    df:4f:07:fb:b0:e0:c6:34:03:a7:07:b4:dd:09:7f:
                    c1:e1:90:92:f4:7d:5f:b6:a5:50:2d:9a:a6:11:39:
                    73:30:ec:39:d6:91:69:35:9c:ce:2e:49:04:17:1b:
                    7c:e8:d5:d5:c4:76:63:2b:8b:00:a2:20:6d:37:1c:
                    1b:36:85:66:87:4e:a6:f8:8a:1b:40:26:18:a0:87:
                    27:b3:a4:a5:46:b7:e0:22:40:24:a2:05:8c:af:bd:
                    29:a4:05:00:c4:0a:c5:ab:06:d2:45:fd:21:ba:6d:
                    e8:d5:2b:31:10:13:6d:27:95:7a:ac:2f:30:f1:fe:
                    b8:7b:52:6e:1c:78:51:7b:bb:ec:a5:a9:1c:ec:4e:
                    47:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F5:7B:5B:E1:64:B6:41:F9:63:19:AC:49:C9:1F:B6:B5:41:1D:9D
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:2e:1c:7d:3e:e7:76:71:ca:58:9c:7c:ac:91:d7:08:46:d6:
         09:e3:1c:24:bf:4c:03:0a:34:67:f2:77:4e:79:8f:10:d9:75:
         12:ee:d8:8d:92:63:c5:85:e0:9b:fe:75:69:05:09:65:53:e3:
         dd:d5:50:1c:db:3a:ed:aa:49:6f:56:37:e2:26:9f:77:9b:f1:
         d4:e4:dd:e1:45:4e:1f:ea:87:14:57:0b:83:37:81:d8:5e:cd:
         fc:b9:7c:66:0c:d0:cb:b1:52:6c:bd:08:21:d4:80:7a:58:d6:
         37:ad:e4:6a:47:58:68:59:dc:21:16:9a:5a:33:8c:87:f8:42:
         c1:a5:0f:16:b8:a6:f9:81:92:ab:c2:b2:64:49:aa:00:97:a2:
         85:95:c0:aa:be:67:d4:2d:69:c7:2b:de:ca:d6:2a:00:ff:96:
         1f:01:2d:19:77:9b:bd:13:98:12:62:93:d1:4a:39:e7:17:79:
         7e:54:d8:73:38:56:49:94:56:0e:f6:88:71:81:85:00:2f:1a:
         62:ea:fa:b2:60:c2:13:16:59:47:e0:17:48:4f:11:8a:fd:9c:
         51:4f:e0:77:94:af:b0:ab:a1:b8:0e:e2:34:62:e0:8e:9f:51:
         cb:da:34:cc:5e:2c:e8:06:52:18:4d:f3:56:2a:4b:ff:3d:9f:
         5d:76:d9:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:05 2026 by rpki-client