Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e2039333034.roa
File:                     3139352e37382e35362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          ZQgeG26g+ai6foEZSs/QBwqtqiaKkBhrxkaJVkvMtKo=
Subject key identifier:   73:9E:FC:A0:EB:F0:32:79:5C:3B:BB:4F:C0:F4:3B:22:D8:39:EA:89
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1DEBF1FD1DD5BCA517CF74473D43029670EC2973
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 05 Jun 2026 13:51:44 +0000
ROA not before:           Fri 05 Jun 2026 13:46:44 +0000
ROA not after:            Fri 04 Jun 2027 13:51:44 +0000
asID:                     9304
IP address blocks:        195.78.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:eb:f1:fd:1d:d5:bc:a5:17:cf:74:47:3d:43:02:96:70:ec:29:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun  5 13:46:44 2026 GMT
            Not After : Jun  4 13:51:44 2027 GMT
        Subject: CN=739EFCA0EBF032795C3BBB4FC0F43B22D839EA89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:66:12:db:60:56:21:ff:bd:c1:74:cc:ee:49:
                    ce:ba:ec:14:92:f3:ec:9d:bd:e7:94:d5:40:94:cc:
                    43:12:70:c6:0f:9e:99:2a:65:63:b7:11:4e:5b:e6:
                    22:3d:5d:0a:2c:42:97:10:e7:e5:10:f3:6d:29:ec:
                    64:d8:a6:77:46:13:52:cc:00:5a:65:ce:fe:1b:42:
                    e6:46:c8:cd:80:34:c6:df:5c:db:de:bb:19:25:26:
                    1b:ad:ba:b8:63:33:33:a2:a5:3e:98:58:80:3a:2b:
                    73:e4:20:90:85:86:21:64:ca:91:40:6d:b3:01:d9:
                    37:8d:11:99:b9:8b:ff:62:fa:24:2f:1b:fa:5d:22:
                    79:fb:18:d7:c7:5b:25:b7:4e:21:77:0d:89:fa:15:
                    c5:ba:64:8a:01:a4:ca:aa:2d:97:80:cb:6f:23:99:
                    ec:27:78:ee:2d:46:0f:8b:5d:0d:e1:09:e4:cb:4d:
                    12:01:f0:b5:2d:4c:ed:89:ec:07:46:a6:18:1b:f4:
                    b0:36:f4:fb:18:00:3a:35:e6:9a:0d:39:0d:2f:d2:
                    ae:f1:50:97:e3:35:28:d5:a5:e2:64:ad:72:18:3c:
                    ca:11:fc:9c:fb:d4:c8:5c:20:37:64:70:b3:20:2e:
                    0f:3c:a7:c7:27:a8:99:c0:e6:22:b3:a9:e7:12:70:
                    f9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:9E:FC:A0:EB:F0:32:79:5C:3B:BB:4F:C0:F4:3B:22:D8:39:EA:89
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35362e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:d9:03:73:40:78:9d:37:e7:3e:84:a3:a0:38:49:c0:df:82:
         40:3f:ac:b9:a1:0f:dc:82:ec:06:d3:bf:a9:a7:a9:a9:a9:ab:
         e4:0e:f8:35:e4:7c:d7:5c:36:e2:26:03:a0:32:b5:67:da:a0:
         5b:77:d1:dc:97:d4:16:ab:73:fd:cc:a5:91:2c:6e:40:a6:44:
         6a:92:97:0b:f4:fc:c9:44:dc:7b:13:4b:3b:1f:46:21:cb:03:
         e6:16:6b:c1:3d:c6:07:53:f4:7a:5b:ea:d9:10:3e:69:9e:c9:
         fa:f9:92:20:bc:e3:ce:27:04:da:2a:66:5c:8e:ce:ad:6d:2d:
         fe:15:96:e6:4a:58:c1:5e:13:0b:a6:d9:4b:e8:14:50:0d:7f:
         65:c8:58:1c:95:9f:77:f6:5b:8b:f6:df:91:d1:30:6c:cc:10:
         ab:80:06:82:45:49:cf:54:ff:d5:25:81:6c:f1:22:61:bd:ae:
         b9:25:6b:8e:ef:77:9d:da:83:11:fe:89:73:22:1e:42:ee:db:
         44:e6:54:fb:81:38:5e:eb:f8:c0:26:ca:0e:26:b1:99:57:c6:
         2c:0c:9d:77:95:fb:75:9b:5c:75:07:de:21:c7:9b:09:8a:e9:
         23:eb:6b:37:fb:0c:e4:f7:38:00:6f:67:f9:cf:53:bd:7f:51:
         43:d7:44:8a
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUHevx/R3VvKUXz3RHPUMClnDsKXMwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNjA1MTM0NjQ0WhcNMjcwNjA0MTM1MTQ0
WjAzMTEwLwYDVQQDEyg3MzlFRkNBMEVCRjAzMjc5NUMzQkJCNEZDMEY0M0IyMkQ4
MzlFQTg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGYS22BWIf+9
wXTM7knOuuwUkvPsnb3nlNVAlMxDEnDGD56ZKmVjtxFOW+YiPV0KLEKXEOflEPNt
Kexk2KZ3RhNSzABaZc7+G0LmRsjNgDTG31zb3rsZJSYbrbq4YzMzoqU+mFiAOitz
5CCQhYYhZMqRQG2zAdk3jRGZuYv/YvokLxv6XSJ5+xjXx1slt04hdw2J+hXFumSK
AaTKqi2XgMtvI5nsJ3juLUYPi10N4Qnky00SAfC1LUztiewHRqYYG/SwNvT7GAA6
NeaaDTkNL9Ku8VCX4zUo1aXiZK1yGDzKEfyc+9TIXCA3ZHCzIC4PPKfHJ6iZwOYi
s6nnEnD5awIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHOe/KDr8DJ5XDu7T8D0OyLY
OeqJMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzEvMzEzOTM1MmUzNzM4MmUzNTM2MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADDTjgwDQYJKoZIhvcNAQELBQADggEB
AKbZA3NAeJ035z6Eo6A4ScDfgkA/rLmhD9yC7AbTv6mnqampq+QO+DXkfNdcNuIm
A6AytWfaoFt30dyX1Barc/3MpZEsbkCmRGqSlwv0/MlE3HsTSzsfRiHLA+YWa8E9
xgdT9Hpb6tkQPmmeyfr5kiC8484nBNoqZlyOzq1tLf4VluZKWMFeEwum2UvoFFAN
f2XIWByVn3f2W4v235HRMGzMEKuABoJFSc9U/9UlgWzxImG9rrkla47vd53agxH+
iXMiHkLu20TmVPuBOF7r+MAmyg4msZlXxiwMnXeV+3WbXHUH3iHHmwmK6SPrazf7
DOT3OABvZ/nPU71/UUPXRIo=
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:50:24 2026 by rpki-client