Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e2039333034.roa
File:                     39312e3233332e3139382e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          kz0R5ZlP9GoWJV3lwEKXBMbvlFIwFTBeP4z/gZ/Itck=
Subject key identifier:   FB:92:D9:BD:95:CA:D2:27:1E:8C:E2:AF:AD:80:1F:EA:BA:9F:66:BF
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       691DFE9075B3A897310C4CBFDDBB4951B2A857F0
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 05 Jun 2026 13:51:49 +0000
ROA not before:           Fri 05 Jun 2026 13:46:49 +0000
ROA not after:            Fri 04 Jun 2027 13:51:49 +0000
asID:                     9304
IP address blocks:        91.233.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 03:04:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:1d:fe:90:75:b3:a8:97:31:0c:4c:bf:dd:bb:49:51:b2:a8:57:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun  5 13:46:49 2026 GMT
            Not After : Jun  4 13:51:49 2027 GMT
        Subject: CN=FB92D9BD95CAD2271E8CE2AFAD801FEABA9F66BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:75:ad:d1:d7:21:f6:80:ec:82:be:7b:3c:4e:
                    13:b3:6e:7c:ea:63:4a:fa:4f:da:87:38:31:54:ba:
                    1f:99:9c:65:02:30:bd:4c:2d:13:cc:bb:68:91:49:
                    a9:3b:a6:ac:28:f8:8b:6a:b8:88:7e:3b:35:35:a5:
                    29:61:ab:9f:59:71:4c:61:16:cb:3f:ca:be:ea:82:
                    e3:f9:8a:b6:b9:b3:3f:4f:73:5f:9d:a9:1c:73:a3:
                    d8:17:42:55:d3:07:a9:d8:61:db:f8:22:21:b2:f3:
                    d9:53:05:80:8b:04:f0:27:44:8a:31:0c:3e:ad:12:
                    25:b0:d4:f7:07:e4:db:37:c9:d3:52:2e:1d:7d:2f:
                    af:de:02:66:af:5f:65:72:b2:1d:81:79:14:b4:7a:
                    cb:68:4d:9a:d0:2e:6b:a6:8c:ad:40:ac:df:68:c3:
                    25:1c:4c:51:d7:30:12:44:03:2c:84:fe:ab:d4:ef:
                    eb:d2:c3:e2:81:21:dd:e8:cb:98:53:76:02:1c:72:
                    22:7e:0e:9b:a4:6e:21:38:0f:90:b0:ed:cd:52:2e:
                    ef:02:a9:d6:ca:e1:fc:2c:e7:bd:4e:e7:9c:e0:1c:
                    87:f9:ef:6c:e3:d1:6a:db:8e:48:32:90:c9:5a:5f:
                    1b:5c:99:b4:d1:91:0c:f7:6a:b9:f8:42:b3:52:fa:
                    df:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:92:D9:BD:95:CA:D2:27:1E:8C:E2:AF:AD:80:1F:EA:BA:9F:66:BF
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:5e:fb:5c:97:2f:5e:dc:cd:54:74:da:4d:1a:29:a1:59:2b:
         68:a6:c8:8f:8c:70:a6:bb:90:39:47:93:9b:2b:97:d1:bf:83:
         bd:15:dd:f4:ac:f1:ec:72:13:03:f3:d4:ba:e4:85:f6:d1:d7:
         af:68:25:ed:3c:52:c8:19:18:d3:8d:4d:71:f8:59:31:8a:c2:
         f9:16:87:5f:01:8a:a0:a4:24:19:30:89:0d:fe:28:e9:17:46:
         43:79:78:44:d6:0a:37:95:08:a6:0d:fd:72:1e:bd:3b:69:5c:
         16:a0:4b:a7:f4:e2:5c:a6:d2:aa:4b:d3:79:fe:ae:2b:b3:14:
         1b:ee:f6:d0:a8:1c:4e:f0:a7:2b:09:a1:c7:39:57:34:3a:b7:
         6c:39:f6:c0:cc:07:8a:f1:a1:e2:67:04:74:59:f3:58:93:04:
         a0:51:64:30:45:36:34:30:c7:22:69:ab:fc:e6:5f:a7:00:fe:
         17:72:14:3d:53:2c:39:e8:22:ab:33:5e:75:64:81:29:80:49:
         97:5e:c0:99:b9:f8:28:39:91:12:48:82:de:89:d0:96:f8:f0:
         fe:70:99:5a:b4:85:13:df:d6:7e:c5:1d:73:84:65:13:e7:74:
         c2:68:00:d1:3d:30:f5:77:0c:79:6e:54:1a:bc:a1:1e:71:a5:
         c6:5a:f0:cf
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUaR3+kHWzqJcxDEy/3btJUbKoV/AwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNjA1MTM0NjQ5WhcNMjcwNjA0MTM1MTQ5
WjAzMTEwLwYDVQQDEyhGQjkyRDlCRDk1Q0FEMjI3MUU4Q0UyQUZBRDgwMUZFQUJB
OUY2NkJGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXWt0dch9oDs
gr57PE4Ts2586mNK+k/ahzgxVLofmZxlAjC9TC0TzLtokUmpO6asKPiLariIfjs1
NaUpYaufWXFMYRbLP8q+6oLj+Yq2ubM/T3Nfnakcc6PYF0JV0wep2GHb+CIhsvPZ
UwWAiwTwJ0SKMQw+rRIlsNT3B+TbN8nTUi4dfS+v3gJmr19lcrIdgXkUtHrLaE2a
0C5rpoytQKzfaMMlHExR1zASRAMshP6r1O/r0sPigSHd6MuYU3YCHHIifg6bpG4h
OA+QsO3NUi7vAqnWyuH8LOe9Tuec4ByH+e9s49Fq245IMpDJWl8bXJm00ZEM92q5
+EKzUvrf1wIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFPuS2b2VytInHozir62AH+q6
n2a/MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzM5MzEyZTMyMzMzMzJlMzEzOTM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABb6cYwDQYJKoZIhvcNAQELBQAD
ggEBAHRe+1yXL17czVR02k0aKaFZK2imyI+McKa7kDlHk5srl9G/g70V3fSs8exy
EwPz1LrkhfbR169oJe08UsgZGNONTXH4WTGKwvkWh18BiqCkJBkwiQ3+KOkXRkN5
eETWCjeVCKYN/XIevTtpXBagS6f04lym0qpL03n+riuzFBvu9tCoHE7wpysJocc5
VzQ6t2w59sDMB4rxoeJnBHRZ81iTBKBRZDBFNjQwxyJpq/zmX6cA/hdyFD1TLDno
IqszXnVkgSmASZdewJm5+Cg5kRJIgt6J0Jb48P5wmVq0hRPf1n7FHXOEZRPndMJo
ANE9MPV3DHluVBq8oR5xpcZa8M8=
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:02 2026 by rpki-client