Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3132302e302f32342d3234203d3e2039303039.roa
File:                     3139332e3135302e3132302e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          jzk7GVEVPBkjtp3nLpnOh8K0nKjdeAkxMlixpKAM4LM=
Subject key identifier:   EC:98:B0:85:81:26:A6:5C:89:C1:19:4E:F2:3B:77:D4:9E:15:A6:87
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       40C0B34CD5CF94B13262651752DAC951928529A4
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3132302e302f32342d3234203d3e2039303039.roa
Signing time:             Thu 30 Apr 2026 13:16:45 +0000
ROA not before:           Thu 30 Apr 2026 13:11:45 +0000
ROA not after:            Thu 29 Apr 2027 13:16:45 +0000
asID:                     9009
IP address blocks:        193.150.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 02:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:c0:b3:4c:d5:cf:94:b1:32:62:65:17:52:da:c9:51:92:85:29:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 30 13:11:45 2026 GMT
            Not After : Apr 29 13:16:45 2027 GMT
        Subject: CN=EC98B0858126A65C89C1194EF23B77D49E15A687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:03:04:13:25:52:b8:f6:40:5c:a9:eb:5e:54:
                    d1:00:98:bd:26:0e:f9:cc:77:3c:49:74:c1:d8:b8:
                    70:9d:39:5b:40:97:83:c3:8d:2b:1c:49:1a:7a:4f:
                    ae:d7:77:cc:b5:21:a0:31:7a:46:ed:75:9b:e5:8c:
                    a7:3a:d4:53:f4:fe:fe:5a:6c:91:45:34:bd:90:89:
                    ed:b2:3c:7c:cd:3b:99:84:a2:bc:6c:a0:fa:45:89:
                    79:37:6a:fb:39:b9:ba:c5:6d:ee:ca:35:fb:6f:ef:
                    14:c8:6e:8c:ba:b1:40:75:3e:56:2c:b0:0d:81:7e:
                    b1:4b:17:62:bc:bf:d6:6e:a9:df:6b:09:c0:a2:02:
                    c8:de:71:99:46:dd:e4:aa:c0:14:b0:1d:95:30:c5:
                    4c:be:75:73:93:3d:c1:47:3c:33:b2:67:06:90:5a:
                    f9:89:55:8b:6a:4c:1c:63:0e:bd:cc:bf:74:39:ce:
                    bf:67:b6:82:1f:4c:c1:b8:cb:1d:c8:16:62:f9:34:
                    c2:d9:74:8a:ab:c6:75:00:2a:3f:3c:17:e4:d0:36:
                    cf:97:07:5a:ad:fc:8c:05:6a:0a:43:9c:c1:b3:e2:
                    08:e1:ba:e7:2d:98:dc:c6:e7:a5:2b:4c:54:10:15:
                    af:9d:e6:53:63:d3:79:85:ae:0f:fd:c3:7f:79:d1:
                    d1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:98:B0:85:81:26:A6:5C:89:C1:19:4E:F2:3B:77:D4:9E:15:A6:87
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3132302e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:99:08:1a:77:a4:15:c9:fd:4c:90:be:08:d3:07:54:02:0d:
         e8:37:af:32:7c:66:be:e2:e8:ef:14:44:dc:03:78:e5:26:e3:
         6b:8f:25:e3:16:ef:c5:0f:cb:d3:73:80:f5:72:f5:fd:95:c1:
         36:c3:81:15:1a:2b:1f:0b:40:6a:d2:b5:50:00:11:53:f9:f3:
         6f:7b:7c:bd:77:cb:ca:56:22:e1:63:62:a4:16:8a:1e:25:4c:
         b2:9b:b4:00:36:0b:09:88:f5:fd:9f:3d:4b:b8:c8:ee:ca:ef:
         0f:8b:f1:25:84:26:d1:cb:aa:be:ec:6e:c7:c0:58:a3:d7:af:
         3d:90:01:7f:d6:63:bd:e0:68:42:ed:7a:18:2c:dd:3b:9b:2a:
         30:b3:70:9e:11:3e:23:c7:a9:c0:fd:2f:ec:ff:d3:a1:ce:77:
         fa:d3:a8:09:f3:d3:86:74:27:75:12:bc:76:68:3b:60:24:55:
         cf:0d:b3:91:0f:04:e1:c1:60:84:24:bc:53:f2:4c:43:23:d9:
         f8:ce:38:9d:44:1e:9d:9b:23:70:1f:c1:50:79:6b:44:6d:8d:
         10:f6:49:f1:0b:37:40:8a:3a:c6:c8:1e:1b:e7:04:f7:ae:4e:
         b7:93:2a:e6:33:06:35:9b:23:54:1d:83:5d:de:a6:02:fa:0d:
         04:25:62:f0
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUQMCzTNXPlLEyYmUXUtrJUZKFKaQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjYwNDMwMTMxMTQ1WhcNMjcwNDI5MTMxNjQ1
WjAzMTEwLwYDVQQDEyhFQzk4QjA4NTgxMjZBNjVDODlDMTE5NEVGMjNCNzdENDlF
MTVBNjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAMEEyVSuPZA
XKnrXlTRAJi9Jg75zHc8SXTB2LhwnTlbQJeDw40rHEkaek+u13fMtSGgMXpG7XWb
5YynOtRT9P7+WmyRRTS9kIntsjx8zTuZhKK8bKD6RYl5N2r7Obm6xW3uyjX7b+8U
yG6MurFAdT5WLLANgX6xSxdivL/WbqnfawnAogLI3nGZRt3kqsAUsB2VMMVMvnVz
kz3BRzwzsmcGkFr5iVWLakwcYw69zL90Oc6/Z7aCH0zBuMsdyBZi+TTC2XSKq8Z1
ACo/PBfk0DbPlwdarfyMBWoKQ5zBs+II4brnLZjcxuelK0xUEBWvneZTY9N5ha4P
/cN/edHRIwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFOyYsIWBJqZcicEZTvI7d9Se
FaaHMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzEzNTMwMmUzMTMyMzAyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGWeDANBgkqhkiG9w0BAQsF
AAOCAQEApZkIGnekFcn9TJC+CNMHVAIN6DevMnxmvuLo7xRE3AN45Sbja48l4xbv
xQ/L03OA9XL1/ZXBNsOBFRorHwtAatK1UAARU/nzb3t8vXfLylYi4WNipBaKHiVM
spu0ADYLCYj1/Z89S7jI7srvD4vxJYQm0cuqvuxux8BYo9evPZABf9ZjveBoQu16
GCzdO5sqMLNwnhE+I8epwP0v7P/Toc53+tOoCfPThnQndRK8dmg7YCRVzw2zkQ8E
4cFghCS8U/JMQyPZ+M44nUQenZsjcB/BUHlrRG2NEPZJ8Qs3QIo6xsgeG+cE965O
t5Mq5jMGNZsjVB2DXd6mAvoNBCVi8A==
-----END CERTIFICATE-----
Generated at Wed May 13 02:50:49 2026 by rpki-client