Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3137352e302f32342d3234203d3e2039333034.roa
File:                     3139342e33342e3137352e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          yLKLlMQkMbaSDx7Fs2qAWbyvHhEKt7nibTVAHbNdHio=
Subject key identifier:   E2:E3:E1:1D:67:C9:1E:8D:3F:04:16:44:DA:AB:5F:3F:A7:56:58:6A
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1B1AA0326349773398C700E207981470D06760B2
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3137352e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 05 Jun 2026 13:51:42 +0000
ROA not before:           Fri 05 Jun 2026 13:46:42 +0000
ROA not after:            Fri 04 Jun 2027 13:51:42 +0000
asID:                     9304
IP address blocks:        194.34.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:1a:a0:32:63:49:77:33:98:c7:00:e2:07:98:14:70:d0:67:60:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun  5 13:46:42 2026 GMT
            Not After : Jun  4 13:51:42 2027 GMT
        Subject: CN=E2E3E11D67C91E8D3F041644DAAB5F3FA756586A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:ea:f7:cd:12:13:60:50:34:2b:5e:3b:d3:71:
                    fd:36:ec:57:31:58:dd:f7:12:5e:b8:0e:4a:0f:bc:
                    f2:88:f2:4f:93:78:27:7e:c1:2e:9d:c6:52:8b:d4:
                    c8:8c:39:0c:23:90:3e:22:8c:f0:3a:6e:eb:82:21:
                    ce:df:e6:73:a7:e6:63:dd:f1:24:3a:97:2f:d5:c8:
                    27:e2:11:49:a3:4d:30:4e:8b:64:7d:65:c5:cd:dc:
                    ce:14:e3:41:c3:9a:79:40:28:4c:36:d4:68:80:95:
                    6e:2d:a5:67:94:d0:d6:01:ab:15:27:88:e1:b8:e6:
                    ef:0f:e7:55:10:a3:ba:e5:8e:ce:d2:a7:e3:1a:99:
                    98:7e:7e:de:91:86:0b:98:f8:9c:73:ea:15:14:1d:
                    21:92:0d:52:2b:71:b8:76:8d:b5:04:7c:e6:53:80:
                    2a:bd:d4:7d:f7:c2:da:65:a1:15:e2:a4:e4:b9:6c:
                    0c:9c:85:3a:7f:81:9e:c6:bd:8a:ed:2d:aa:0c:72:
                    5b:dd:32:3f:cc:23:74:c2:e5:90:cf:7f:a6:4e:93:
                    8b:5b:91:16:c3:26:5e:27:2b:ea:65:b8:77:74:97:
                    f5:3c:83:1b:c3:fb:cc:b1:33:73:0c:7b:d0:01:21:
                    f9:b8:7f:95:ce:af:8a:c0:80:2c:9f:5f:7c:a9:5a:
                    94:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:E3:E1:1D:67:C9:1E:8D:3F:04:16:44:DA:AB:5F:3F:A7:56:58:6A
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3137352e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:9a:43:83:52:e7:2a:e2:f1:aa:55:8a:35:39:a8:90:1c:c7:
         49:89:e8:d6:08:2a:69:19:21:b9:b2:01:57:58:01:ca:73:f8:
         46:65:8e:34:a6:23:28:f6:a7:68:8a:50:52:fc:06:9b:c0:2d:
         91:89:e0:70:78:5f:10:40:bb:29:f6:d3:b3:4e:cd:8b:45:71:
         74:ae:83:c6:d9:e6:cb:4c:4e:82:3a:6d:56:d5:ee:42:19:f9:
         c2:69:cd:0d:8e:c8:d2:66:5e:a1:62:45:2b:98:67:67:73:60:
         63:17:53:cf:43:b8:92:2a:56:17:dc:ad:c2:3e:70:50:a6:4b:
         3d:91:c5:ee:75:12:3a:a8:fa:6f:59:0a:27:3b:42:70:84:5c:
         c3:a7:3e:c2:5c:ac:53:e5:d9:13:aa:9e:1a:6d:49:eb:25:8b:
         70:a4:04:23:05:9a:4f:c6:84:12:a5:3e:05:c4:28:0f:aa:ca:
         f4:93:81:0f:d0:d5:7a:f9:ee:bc:7a:42:c9:a2:e1:b9:12:e3:
         2a:6b:af:02:02:88:90:c0:a9:77:f2:f4:f5:b7:4a:af:08:b5:
         cc:da:24:02:c1:7f:92:da:7f:8b:48:37:79:c6:48:94:cd:e1:
         1f:1d:74:04:bf:30:fd:40:8f:19:98:46:4c:e0:4a:96:18:6f:
         4e:d2:fd:30
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUGxqgMmNJdzOYxwDiB5gUcNBnYLIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNjA1MTM0NjQyWhcNMjcwNjA0MTM1MTQy
WjAzMTEwLwYDVQQDEyhFMkUzRTExRDY3QzkxRThEM0YwNDE2NDREQUFCNUYzRkE3
NTY1ODZBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8er3zRITYFA0
K14703H9NuxXMVjd9xJeuA5KD7zyiPJPk3gnfsEuncZSi9TIjDkMI5A+IozwOm7r
giHO3+Zzp+Zj3fEkOpcv1cgn4hFJo00wTotkfWXFzdzOFONBw5p5QChMNtRogJVu
LaVnlNDWAasVJ4jhuObvD+dVEKO65Y7O0qfjGpmYfn7ekYYLmPicc+oVFB0hkg1S
K3G4do21BHzmU4AqvdR998LaZaEV4qTkuWwMnIU6f4Gexr2K7S2qDHJb3TI/zCN0
wuWQz3+mTpOLW5EWwyZeJyvqZbh3dJf1PIMbw/vMsTNzDHvQASH5uH+Vzq+KwIAs
n198qVqUwQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFOLj4R1nyR6NPwQWRNqrXz+n
VlhqMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzNDJlMzMzNDJlMzEzNzM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADCIq8wDQYJKoZIhvcNAQELBQAD
ggEBAC2aQ4NS5yri8apVijU5qJAcx0mJ6NYIKmkZIbmyAVdYAcpz+EZljjSmIyj2
p2iKUFL8BpvALZGJ4HB4XxBAuyn207NOzYtFcXSug8bZ5stMToI6bVbV7kIZ+cJp
zQ2OyNJmXqFiRSuYZ2dzYGMXU89DuJIqVhfcrcI+cFCmSz2Rxe51Ejqo+m9ZCic7
QnCEXMOnPsJcrFPl2ROqnhptSesli3CkBCMFmk/GhBKlPgXEKA+qyvSTgQ/Q1Xr5
7rx6Qsmi4bkS4yprrwICiJDAqXfy9PW3Sq8ItczaJALBf5Laf4tIN3nGSJTN4R8d
dAS/MP1AjxmYRkzgSpYYb07S/TA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:43 2026 by rpki-client