Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32342d3234203d3e2039333034.roa
File:                     38392e3230372e3137362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          2PCOduc6eaFGv4smHBpfsB4JK4C/wenqa7OvwFW0J34=
Subject key identifier:   B2:B7:A0:BB:FB:5D:AF:87:3C:C0:30:9E:92:0A:94:12:F1:FD:7F:27
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       6FE5B08899A636F786B94A1C4B87DC1B5D76734B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 05 Jun 2026 13:51:45 +0000
ROA not before:           Fri 05 Jun 2026 13:46:45 +0000
ROA not after:            Fri 04 Jun 2027 13:51:45 +0000
asID:                     9304
IP address blocks:        89.207.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e5:b0:88:99:a6:36:f7:86:b9:4a:1c:4b:87:dc:1b:5d:76:73:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun  5 13:46:45 2026 GMT
            Not After : Jun  4 13:51:45 2027 GMT
        Subject: CN=B2B7A0BBFB5DAF873CC0309E920A9412F1FD7F27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:20:da:7d:d0:5f:a0:6e:33:af:42:21:bc:9d:
                    c7:98:3d:7c:4a:57:7d:9d:ab:66:67:03:82:34:44:
                    59:9f:c9:84:9b:af:2a:cf:ee:c5:b7:b7:c3:e8:19:
                    07:6e:7d:2d:2b:ce:03:a8:39:10:da:c0:06:04:d4:
                    87:db:11:08:cc:89:a0:ab:0c:90:28:5f:1a:9b:56:
                    75:8a:35:f5:c6:50:70:cb:d3:2f:63:36:dd:8b:9b:
                    0e:67:1a:88:bb:ee:59:3f:08:90:b5:76:68:88:f3:
                    a1:f2:ed:a5:0c:07:c2:b4:26:b2:bf:fb:4d:e4:3a:
                    5c:64:65:63:6a:fa:85:dc:2b:4b:dc:ed:40:a8:48:
                    f5:93:91:d7:51:9a:f5:e0:24:20:68:c3:fe:1b:e8:
                    88:40:d1:25:b7:2a:01:f8:d1:a5:cd:ab:cb:c4:02:
                    74:19:e5:d0:80:9a:3b:65:00:a8:95:4f:1b:52:08:
                    45:92:ce:e2:f9:09:c9:12:30:64:8e:0a:8a:16:63:
                    6c:95:bc:5e:91:31:69:9b:fa:67:0c:69:b7:1e:0e:
                    15:67:62:4d:15:8d:4b:c6:1e:8a:c3:ec:b7:76:a3:
                    ac:8d:dc:98:ba:bc:77:39:1d:e0:47:e6:8f:80:e6:
                    66:cf:5c:29:d2:e8:40:41:b2:4f:41:07:33:8b:c0:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B7:A0:BB:FB:5D:AF:87:3C:C0:30:9E:92:0A:94:12:F1:FD:7F:27
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e8:e2:7d:4e:d9:8d:0e:19:a9:28:76:ec:17:79:8d:b8:ae:
         e6:a9:5b:27:18:cd:c2:d5:73:89:d0:97:00:d3:c7:55:1d:b1:
         63:12:90:65:1b:a2:fb:ed:98:54:f0:7c:07:ea:62:bf:f2:e0:
         d3:86:1b:e7:c1:d8:df:75:c8:a3:c0:ff:d5:76:cb:d7:82:d4:
         01:e6:01:41:66:f3:e4:1c:09:f6:57:c8:66:0d:92:1a:c9:ce:
         bb:e5:e5:00:5f:88:f7:1b:3e:ef:6f:0b:92:4a:95:16:e1:7f:
         ad:c6:15:a9:a3:68:2a:61:c4:94:c8:5f:34:d3:30:7d:63:1d:
         a9:51:06:c5:83:02:86:dd:82:37:10:7c:3a:70:e2:26:88:21:
         c3:ac:94:6b:26:16:93:49:ca:7d:5d:a8:71:1c:76:51:87:80:
         bb:88:40:63:5f:96:98:37:4f:22:e3:c2:e6:85:9b:81:e8:54:
         1a:a9:04:00:7e:54:d4:dd:cd:f5:a0:b0:60:e8:df:9d:1c:cc:
         ba:12:06:40:50:10:7f:37:45:06:3f:ca:61:40:d9:fe:f2:0c:
         63:6d:3c:f7:83:ee:d5:80:19:76:11:16:c2:f1:b9:9c:e6:b5:
         29:28:e3:07:b5:2f:cf:b0:ef:43:aa:39:cd:eb:7f:a0:93:69:
         7e:68:1d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:35:34 2026 by rpki-client