Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20313532393030.roa
File:                     3139322e3230392e36332e302f32342d3234203d3e20313532393030.roa (raw, json)
Hash identifier:          oVVXH0TboyPXyq2ZzbIHrpmUoyF5jmmnzXc7oQF2kHs=
Subject key identifier:   09:B2:E5:29:9F:02:36:99:19:0E:CC:AA:74:77:30:A4:D7:81:A8:20
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       3B579E714D46A91ADE13D5AFD3D47CC5611A75C7
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20313532393030.roa
Signing time:             Fri 30 Jan 2026 00:58:46 +0000
ROA not before:           Fri 30 Jan 2026 00:53:46 +0000
ROA not after:            Fri 29 Jan 2027 00:58:46 +0000
asID:                     152900
IP address blocks:        192.209.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 10:59:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:57:9e:71:4d:46:a9:1a:de:13:d5:af:d3:d4:7c:c5:61:1a:75:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jan 30 00:53:46 2026 GMT
            Not After : Jan 29 00:58:46 2027 GMT
        Subject: CN=09B2E5299F023699190ECCAA747730A4D781A820
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:1f:86:9d:24:7e:3a:47:cd:6b:34:0c:6a:3b:
                    a1:f4:55:66:69:87:d7:92:32:29:f0:ba:0c:79:39:
                    c8:cf:d3:b4:ca:27:9f:d2:7c:2d:7c:29:72:fb:94:
                    e0:27:a4:f4:0e:36:43:28:6a:fd:37:6e:67:ef:da:
                    f2:16:d7:e0:88:16:e0:00:fe:33:39:56:f6:70:eb:
                    1c:38:6e:56:4a:c7:46:a5:87:d2:66:19:9b:04:1f:
                    1f:66:1c:77:2d:f1:ea:b5:af:49:a5:5e:8a:a6:71:
                    2a:d9:d5:dd:de:28:a6:3b:86:7c:c9:3f:ac:27:5c:
                    d9:78:a1:51:ba:8c:ab:a5:88:c8:c3:af:fb:ed:d6:
                    a9:86:2e:c1:33:0b:46:f0:10:3d:cb:e2:8e:42:11:
                    47:fd:d5:83:e5:02:c8:82:42:22:32:12:24:60:a3:
                    3c:76:a6:25:a1:01:bc:56:42:4f:45:79:f2:f8:0f:
                    64:10:9e:20:12:6a:3c:b7:f0:0f:b0:2c:a6:c5:c7:
                    5d:b6:e9:7d:1d:27:12:0a:a1:ca:3b:b3:55:ad:bf:
                    d9:03:6a:2f:1f:9e:e3:11:58:06:39:3f:ba:00:da:
                    ce:18:fc:9f:a1:9c:a7:ae:26:42:7f:4b:36:a1:6a:
                    fc:89:75:0a:31:67:ba:4c:d9:9a:12:d1:24:18:61:
                    24:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B2:E5:29:9F:02:36:99:19:0E:CC:AA:74:77:30:A4:D7:81:A8:20
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36332e302f32342d3234203d3e20313532393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:1a:90:20:57:e4:e4:5d:74:8c:bc:bc:11:35:0d:b5:33:4b:
         65:d3:20:ce:3c:40:c3:e6:de:ae:c3:73:43:11:2f:0b:49:b9:
         aa:d7:e0:47:39:2b:b9:19:6c:49:de:e6:e2:29:da:cd:da:99:
         83:be:eb:7a:95:d2:f1:1a:44:bc:47:c2:04:7b:b7:ec:00:ec:
         e1:0c:3c:9f:b8:df:72:96:71:0d:d3:8b:51:ad:37:6d:76:ae:
         0b:ab:f2:93:98:ad:b3:73:c9:b3:a8:12:41:1f:63:70:0d:c1:
         cf:2a:37:c6:f0:48:88:4f:b4:d3:ec:49:04:2b:eb:82:9e:3a:
         55:be:fd:af:82:9b:94:a2:a7:ef:5b:8c:8a:09:61:3f:62:76:
         49:3f:0a:b9:04:45:cf:e1:9a:6e:9f:76:40:7d:ec:ec:e8:ad:
         d2:01:1b:b2:f8:0e:8d:98:71:d5:1a:f0:5d:4f:a2:ca:eb:55:
         87:cd:79:e9:e2:fd:40:8b:4e:f2:11:88:aa:1c:ab:78:03:eb:
         09:26:d5:30:ff:8e:85:a8:15:0b:03:3c:bf:4d:6f:3f:4b:06:
         13:67:06:b2:00:41:9f:c8:84:32:5b:58:4b:90:d7:98:db:f9:
         0d:13:83:7a:8b:03:f7:8f:e6:82:36:fc:63:d2:cf:35:ff:9f:
         cd:60:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:08:09 2026 by rpki-client