Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa
File:                     3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          nPULBsdLNyUyyh2BBgG+N3Wjo64kl4nXOy/ZV5eDxH4=
Subject key identifier:   17:C1:C6:92:31:FA:EB:FA:42:5E:1E:0E:E9:EA:AC:FD:58:10:BD:78
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       512F64A1509B638E0D43C7F4D5F46A7AD90D334A
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa
Signing time:             Tue 24 Mar 2026 08:35:54 +0000
ROA not before:           Tue 24 Mar 2026 08:30:54 +0000
ROA not after:            Tue 23 Mar 2027 08:35:54 +0000
asID:                     9009
IP address blocks:        192.109.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:2f:64:a1:50:9b:63:8e:0d:43:c7:f4:d5:f4:6a:7a:d9:0d:33:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Mar 24 08:30:54 2026 GMT
            Not After : Mar 23 08:35:54 2027 GMT
        Subject: CN=17C1C69231FAEBFA425E1E0EE9EAACFD5810BD78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:fe:b8:2a:04:ac:09:2a:f0:42:fb:31:dd:
                    85:c3:29:85:bd:2b:23:1a:e2:1c:f2:9a:2d:11:1d:
                    0f:08:43:95:46:04:23:fa:31:2f:e9:65:c9:67:bc:
                    d9:0f:9e:a1:d7:5e:77:f3:25:cb:44:91:ab:ca:59:
                    23:18:7c:8c:0d:ae:eb:bf:0b:0f:f9:05:3d:e9:a2:
                    4c:3d:c8:39:ad:3f:41:93:ab:db:6f:2f:e6:e0:d3:
                    fc:2b:ec:ba:80:36:b9:9f:a9:72:15:ce:0e:64:57:
                    74:01:f1:2a:9e:69:e8:d9:59:1c:6f:af:09:c3:8a:
                    85:1c:7b:12:87:54:39:c2:80:d2:9b:5a:9b:18:65:
                    23:9e:a1:d2:62:8c:0d:91:64:b6:3c:1b:7c:b7:d1:
                    55:f9:50:02:39:da:14:9b:49:52:84:7d:70:a7:7c:
                    f9:b7:47:93:f1:de:8e:c8:e3:dc:45:5e:58:9d:0c:
                    1d:61:b3:5b:c5:3f:d0:2d:4a:b5:3a:7a:d9:51:67:
                    2a:31:c2:83:32:f0:f1:fe:43:d7:f9:a5:e4:57:2c:
                    32:10:57:7c:13:12:ab:aa:1e:4b:83:a6:1a:eb:7d:
                    d3:63:30:c3:c9:d5:fc:a1:ff:25:83:6b:45:da:74:
                    5f:86:c7:03:41:d4:05:0d:ab:a4:83:0f:28:f7:c3:
                    d2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:C1:C6:92:31:FA:EB:FA:42:5E:1E:0E:E9:EA:AC:FD:58:10:BD:78
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:3e:e0:89:bd:b9:85:a7:84:53:ff:6f:e2:00:97:c9:3e:13:
         f6:fd:b7:37:29:36:ab:3c:e6:12:b4:12:4e:7c:40:55:a1:49:
         28:6b:ef:5a:65:d5:08:53:58:4b:60:46:5c:8c:86:68:7d:fc:
         f0:41:28:42:26:f9:b4:dc:bd:c2:4e:bb:48:9e:b1:7e:2c:f5:
         c4:c4:6d:69:8b:58:9b:51:40:6a:66:0e:1e:4b:19:8d:a4:16:
         e2:cc:d4:eb:8d:bc:7a:36:99:1c:5c:db:f3:fb:a6:39:44:90:
         06:93:ad:62:48:9d:39:fe:cd:ff:fd:42:f4:03:07:47:7d:cb:
         0b:34:38:ea:61:fd:8d:5f:3c:39:72:a2:0a:64:80:d6:2a:cc:
         90:47:78:e2:ff:7a:80:0c:f4:42:14:e1:7d:b6:3f:8c:2c:1a:
         86:cb:a2:7f:be:d6:1f:9a:40:c3:ac:4b:fc:c6:72:ba:09:eb:
         a2:6f:bb:cd:73:7d:78:e6:15:89:66:0a:c7:83:43:44:87:d2:
         9a:7a:01:ff:0b:15:ef:a6:ae:02:36:18:33:67:a4:9d:d9:85:
         0c:6a:76:bb:46:84:44:54:fb:85:2b:91:62:78:fb:c4:c0:a7:
         24:c2:7f:7d:d6:7b:23:b8:60:97:e7:3e:10:26:d7:94:8b:58:
         70:9f:ca:af
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUUS9koVCbY44NQ8f01fRqetkNM0owDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwMzI0MDgzMDU0WhcNMjcwMzIzMDgzNTU0
WjAzMTEwLwYDVQQDEygxN0MxQzY5MjMxRkFFQkZBNDI1RTFFMEVFOUVBQUNGRDU4
MTBCRDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMH+uCoErAkq
8EL7Md2FwymFvSsjGuIc8potER0PCEOVRgQj+jEv6WXJZ7zZD56h11538yXLRJGr
ylkjGHyMDa7rvwsP+QU96aJMPcg5rT9Bk6vbby/m4NP8K+y6gDa5n6lyFc4OZFd0
AfEqnmno2Vkcb68Jw4qFHHsSh1Q5woDSm1qbGGUjnqHSYowNkWS2PBt8t9FV+VAC
OdoUm0lShH1wp3z5t0eT8d6OyOPcRV5YnQwdYbNbxT/QLUq1OnrZUWcqMcKDMvDx
/kPX+aXkVywyEFd8ExKrqh5Lg6Ya633TYzDDydX8of8lg2tF2nRfhscDQdQFDauk
gw8o98PS9QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFBfBxpIx+uv6Ql4eDunqrP1Y
EL14MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMjJlMzEzMDM5MmUzMTMyMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBtezANBgkqhkiG9w0BAQsF
AAOCAQEAXj7gib25haeEU/9v4gCXyT4T9v23Nyk2qzzmErQSTnxAVaFJKGvvWmXV
CFNYS2BGXIyGaH388EEoQib5tNy9wk67SJ6xfiz1xMRtaYtYm1FAamYOHksZjaQW
4szU6428ejaZHFzb8/umOUSQBpOtYkidOf7N//1C9AMHR33LCzQ46mH9jV88OXKi
CmSA1irMkEd44v96gAz0QhThfbY/jCwahsuif77WH5pAw6xL/MZyugnrom+7zXN9
eOYViWYKx4NDRIfSmnoB/wsV76auAjYYM2ekndmFDGp2u0aERFT7hSuRYnj7xMCn
JMJ/fdZ7I7hgl+c+ECbXlItYcJ/Krw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:33 2026 by rpki-client