Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137392e302f32342d3234203d3e2039333034.roa
File:                     38392e3230372e3137392e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          JyUTiqYDFeOnWHo8zhixvAPQZ0rv3k9lGWCsSDOJJsY=
Subject key identifier:   67:8B:DD:0B:1B:D3:14:AB:BB:CD:21:DF:1B:5D:C4:7C:D0:0E:11:5C
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0BA0BB7584332C1489FFB16393B2D67D824C1872
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137392e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 08 Sep 2026 06:25:16 +0000
ROA not before:           Tue 08 Sep 2026 06:20:16 +0000
ROA not after:            Tue 07 Sep 2027 06:25:16 +0000
asID:                     9304
IP address blocks:        89.207.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Sep 2026 01:29:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:a0:bb:75:84:33:2c:14:89:ff:b1:63:93:b2:d6:7d:82:4c:18:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep  8 06:20:16 2026 GMT
            Not After : Sep  7 06:25:16 2027 GMT
        Subject: CN=678BDD0B1BD314ABBBCD21DF1B5DC47CD00E115C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3b:73:bb:cc:c2:2c:c8:a0:c3:54:69:1a:3c:
                    5f:99:d8:6f:b7:90:da:f6:3a:95:71:e4:d3:f8:94:
                    d4:f2:c3:23:92:0c:9d:94:42:9d:b0:45:8a:79:c6:
                    f0:68:c3:9b:d0:94:96:ac:8d:1e:25:06:fa:58:f3:
                    38:1d:8b:8e:ff:89:d7:10:26:10:a2:31:b7:c9:04:
                    d1:13:59:e4:0e:b2:4a:ae:97:0e:9c:0e:13:d5:49:
                    db:34:a0:d1:ea:8e:67:b1:3a:2b:13:88:d6:18:45:
                    ff:98:2d:20:cb:e9:d6:c7:29:9e:1a:3a:64:8a:a0:
                    26:fe:89:97:54:3f:3d:06:b7:47:3a:bd:ea:a0:a8:
                    bf:98:b4:05:36:21:e3:bb:ca:a9:55:af:9e:05:52:
                    bd:aa:6c:d9:ec:bc:0a:8a:85:cf:be:71:9c:b2:22:
                    90:b2:df:ff:ed:21:19:9e:08:10:ae:82:47:a4:54:
                    04:fd:b9:cd:20:1c:08:1f:8a:82:02:10:d1:d9:4c:
                    b5:c8:2b:a3:a8:4c:af:f0:75:08:c6:61:08:6d:1a:
                    f2:6b:46:25:1b:69:8b:3c:60:9c:8d:28:ae:61:9e:
                    52:20:b9:e4:8a:04:6a:cd:48:a8:ef:a3:f8:19:6f:
                    4c:fa:21:ee:56:ce:ce:94:7f:3e:dd:ac:d2:a7:c7:
                    5a:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:8B:DD:0B:1B:D3:14:AB:BB:CD:21:DF:1B:5D:C4:7C:D0:0E:11:5C
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137392e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:24:40:50:2c:57:e2:cb:82:58:82:f6:e9:9f:8c:4c:79:83:
         83:fc:50:cc:f8:2d:ef:a0:b1:8a:34:5c:db:6e:39:50:c0:31:
         15:c8:dc:4c:f0:bb:d1:6b:b6:71:75:3c:58:c6:f8:ea:9f:14:
         3f:af:87:c7:c3:db:a6:7a:16:aa:83:74:2d:66:b2:d3:57:fc:
         bf:27:44:2d:52:48:0b:bf:6e:30:47:33:fa:a7:06:82:e4:ad:
         b2:3c:27:16:e9:b4:8a:bb:24:d4:ba:8e:31:8f:71:20:ee:ba:
         48:55:ac:8b:f3:3f:90:88:21:42:a9:d4:62:ae:76:a6:5d:2b:
         f1:0c:8e:2c:c1:e2:c6:d3:5a:b3:2d:16:4f:1f:32:13:b5:3c:
         25:9a:fb:c0:00:4f:e8:75:8b:48:fe:43:15:77:4b:97:8f:55:
         51:dc:66:6e:76:8e:12:96:75:3d:5c:20:a5:b2:a5:bc:aa:b9:
         32:be:bd:01:d2:7e:2f:07:a6:78:23:bc:ae:fa:51:cd:53:32:
         d7:a0:8b:15:9b:4e:36:ea:90:f1:16:a0:52:d4:34:02:92:ef:
         1b:a2:25:21:01:51:19:8a:c8:f1:89:25:ce:9b:1f:d7:c5:50:
         2c:2e:80:25:83:33:e4:b7:8c:6a:5b:0b:6a:a3:07:25:3b:fd:
         23:bd:fb:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:32:34 2026 by rpki-client