Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e2039333034.roa
File:                     38392e3230372e3137372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          JzamyRj7e++scojECYffiT7OPxsVkQSPOQGWgXbqQKs=
Subject key identifier:   2F:C4:E6:BD:87:D3:6E:FD:20:58:DE:67:52:09:A4:95:A8:75:75:51
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0F2185C982BF805DF04A11AB3EA4A2EC85B318FC
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 05 Jun 2026 13:51:46 +0000
ROA not before:           Fri 05 Jun 2026 13:46:46 +0000
ROA not after:            Fri 04 Jun 2027 13:51:46 +0000
asID:                     9304
IP address blocks:        89.207.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:21:85:c9:82:bf:80:5d:f0:4a:11:ab:3e:a4:a2:ec:85:b3:18:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun  5 13:46:46 2026 GMT
            Not After : Jun  4 13:51:46 2027 GMT
        Subject: CN=2FC4E6BD87D36EFD2058DE675209A495A8757551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f5:aa:23:79:47:82:6f:3b:c9:b1:57:2b:6b:
                    73:c7:3e:ea:4a:1c:ea:de:5e:b1:28:fb:64:29:b5:
                    82:94:d7:3a:9e:6d:9a:ea:c9:a7:53:f4:f8:da:70:
                    ba:84:94:80:74:90:b7:13:24:a0:18:ca:a8:8f:3e:
                    5f:9d:8b:0c:03:1d:6d:9c:75:b3:14:9a:8e:ec:d0:
                    bc:72:36:8c:e9:30:11:8e:ab:8c:d1:04:65:10:96:
                    57:24:68:4d:c3:0e:ab:14:36:09:bf:5c:e5:b8:8f:
                    82:3d:12:7a:b3:3d:60:69:75:b3:99:5c:38:94:c0:
                    e8:be:90:67:df:de:9b:7f:7b:b8:c6:c7:89:68:55:
                    7d:01:d5:43:27:e3:51:54:8d:d7:07:3c:d8:7e:74:
                    1b:ca:40:23:14:d6:b1:88:60:57:e5:61:ec:b9:13:
                    1e:81:7f:af:aa:27:58:6c:5e:ad:4f:9a:20:88:50:
                    77:07:c7:5c:09:70:2e:5a:75:3e:53:f4:b9:00:6b:
                    75:86:20:b3:b7:a2:1b:eb:36:21:5d:8a:bd:21:cb:
                    0b:c6:1b:8e:62:df:6e:6a:67:96:88:da:26:4d:c3:
                    db:22:1d:ea:ea:b5:e7:5d:cd:dd:69:1f:6d:d9:12:
                    e9:fc:14:ca:f9:16:ee:48:ff:fa:76:9f:d8:3d:b6:
                    c2:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C4:E6:BD:87:D3:6E:FD:20:58:DE:67:52:09:A4:95:A8:75:75:51
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137372e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:6d:5c:5b:53:58:18:fd:73:e9:e5:0f:45:81:b2:67:0c:2f:
         62:43:10:a5:d7:02:60:ab:97:ed:20:c2:c5:26:85:c2:cd:f5:
         87:c2:e0:86:8d:c0:8f:da:c4:5a:3f:94:16:9a:45:06:c4:bc:
         f4:4a:45:b2:6f:8f:a1:57:55:42:71:79:7f:c9:d1:4d:74:b3:
         58:6f:98:dc:fb:d4:db:39:85:bf:bd:f0:51:78:2f:56:0d:ff:
         78:f3:b7:f5:b8:1f:63:2b:cc:a5:52:30:02:b1:b2:d5:d0:ce:
         f0:4f:2c:73:1f:ec:15:1b:2e:51:05:c2:be:7a:28:b2:01:be:
         30:b6:5f:30:f4:2c:b4:20:ba:3a:9a:d5:da:55:2e:eb:d7:09:
         fc:4f:5e:93:88:be:c4:cf:2f:9a:73:04:fa:57:e2:f2:87:07:
         b1:e5:22:ff:65:46:b6:fd:7b:5c:c4:97:29:aa:aa:2c:ae:b9:
         eb:ac:2c:27:ba:8b:de:3e:d5:20:b1:5c:72:0f:20:8f:c6:45:
         68:7c:cd:9f:2a:0b:27:b5:00:9e:ed:3f:35:35:f7:24:17:71:
         58:9b:3e:c6:f8:e9:9e:25:e6:b3:24:85:09:3f:90:93:1a:22:
         d1:0f:0d:76:4a:e0:8c:91:08:7a:00:fd:44:a0:d6:b0:4e:95:
         ec:80:d4:40
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUDyGFyYK/gF3wShGrPqSi7IWzGPwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNjA1MTM0NjQ2WhcNMjcwNjA0MTM1MTQ2
WjAzMTEwLwYDVQQDEygyRkM0RTZCRDg3RDM2RUZEMjA1OERFNjc1MjA5QTQ5NUE4
NzU3NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPWqI3lHgm87
ybFXK2tzxz7qShzq3l6xKPtkKbWClNc6nm2a6smnU/T42nC6hJSAdJC3EySgGMqo
jz5fnYsMAx1tnHWzFJqO7NC8cjaM6TARjquM0QRlEJZXJGhNww6rFDYJv1zluI+C
PRJ6sz1gaXWzmVw4lMDovpBn396bf3u4xseJaFV9AdVDJ+NRVI3XBzzYfnQbykAj
FNaxiGBX5WHsuRMegX+vqidYbF6tT5ogiFB3B8dcCXAuWnU+U/S5AGt1hiCzt6Ib
6zYhXYq9IcsLxhuOYt9uameWiNomTcPbIh3q6rXnXc3daR9t2RLp/BTK+RbuSP/6
dp/YPbbCKQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFC/E5r2H0279IFjeZ1IJpJWo
dXVRMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzM4MzkyZTMyMzAzNzJlMzEzNzM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABZz7EwDQYJKoZIhvcNAQELBQAD
ggEBADNtXFtTWBj9c+nlD0WBsmcML2JDEKXXAmCrl+0gwsUmhcLN9YfC4IaNwI/a
xFo/lBaaRQbEvPRKRbJvj6FXVUJxeX/J0U10s1hvmNz71Ns5hb+98FF4L1YN/3jz
t/W4H2MrzKVSMAKxstXQzvBPLHMf7BUbLlEFwr56KLIBvjC2XzD0LLQgujqa1dpV
LuvXCfxPXpOIvsTPL5pzBPpX4vKHB7HlIv9lRrb9e1zElymqqiyuueusLCe6i94+
1SCxXHIPII/GRWh8zZ8qCye1AJ7tPzU19yQXcVibPsb46Z4l5rMkhQk/kJMaItEP
DXZK4IyRCHoA/USg1rBOleyA1EA=
-----END CERTIFICATE-----
Generated at Sat Jun 13 06:40:04 2026 by rpki-client