Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa
File:                     3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa (raw, json)
Hash identifier:          mMUSu19ov+/kwd5W9U1KKBy9hsgE3fiGTqSALigSNRM=
Subject key identifier:   37:9D:CF:18:C0:83:84:1C:C9:A2:19:7C:A0:02:E2:49:43:F6:D4:81
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       67D7F1D5B448F9C628DC15D01E3A4991AFCC956F
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa
Signing time:             Fri 26 Sep 2025 11:29:45 +0000
ROA not before:           Fri 26 Sep 2025 11:24:45 +0000
ROA not after:            Fri 25 Sep 2026 11:29:45 +0000
asID:                     18229
IP address blocks:        193.186.253.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:d7:f1:d5:b4:48:f9:c6:28:dc:15:d0:1e:3a:49:91:af:cc:95:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 26 11:24:45 2025 GMT
            Not After : Sep 25 11:29:45 2026 GMT
        Subject: CN=379DCF18C083841CC9A2197CA002E24943F6D481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:75:6e:a9:29:60:db:e1:a9:c6:be:df:f4:45:
                    a2:2b:1e:3d:90:d5:aa:f9:9e:41:78:9d:b7:0b:ed:
                    e1:f9:0b:4e:b5:13:13:2b:be:ef:de:3f:0d:f3:c9:
                    be:24:15:ea:77:91:f7:44:6a:49:a6:ea:4e:a6:6c:
                    54:6e:55:06:fa:73:05:b3:e6:7a:d0:dd:a1:0d:69:
                    63:db:24:be:77:3b:1f:09:a8:0b:71:ae:d7:d0:2a:
                    fe:ac:b6:5b:aa:ff:b9:f9:7c:f2:ff:ca:f3:16:0d:
                    d2:e6:4e:c2:23:84:47:82:9e:2c:52:f4:5a:d5:64:
                    bf:90:b8:02:3d:1a:b1:e3:13:96:9a:8c:21:d6:83:
                    73:2c:93:67:02:63:59:67:f4:68:69:37:c4:83:46:
                    63:b9:7f:5d:33:b1:87:50:25:5e:df:83:dc:57:ee:
                    4f:1d:1e:59:30:40:8b:0c:ec:35:71:06:01:4f:b3:
                    a6:12:e3:09:ff:77:b7:2a:e3:31:75:ba:e6:69:d3:
                    2f:23:73:93:5d:a7:fb:2f:66:68:1e:a4:13:06:0d:
                    b1:96:bc:af:c1:58:49:9f:03:58:21:93:d0:3a:f4:
                    38:b5:2c:0e:d4:a7:da:b2:69:e9:14:99:5f:05:d5:
                    b5:10:99:9a:1a:54:a8:67:fe:e1:23:49:b4:29:88:
                    01:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9D:CF:18:C0:83:84:1C:C9:A2:19:7C:A0:02:E2:49:43:F6:D4:81
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138362e3235332e302f32342d3234203d3e203138323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.186.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:9d:8a:be:bf:be:18:1b:2a:eb:f5:9e:15:39:21:bc:02:f3:
         1e:15:08:6a:40:bb:cc:4f:79:54:c6:7b:3d:b5:cd:13:b9:7b:
         e5:bc:b3:10:a9:ba:f0:dd:8a:e3:16:80:17:e4:ab:f3:ac:2e:
         e5:61:d5:d7:34:34:2a:40:7e:78:ac:d4:58:2f:fb:26:4d:fa:
         48:af:48:e1:85:e4:e5:24:c6:18:f1:1d:ad:b2:7b:8d:6b:38:
         ec:88:8a:a1:56:1d:92:f2:fd:e0:ee:c5:0a:5b:27:b0:92:02:
         78:d1:aa:32:f2:e7:6e:ce:b3:49:de:e8:e7:24:6d:02:fc:7f:
         78:f6:61:ac:e9:e6:71:68:bc:c9:1d:7b:56:f5:4a:6b:ec:e6:
         ad:8a:f9:06:4b:44:37:d1:e0:e1:5c:91:1d:36:5f:4f:b9:ce:
         bf:d2:19:1c:50:ad:92:ed:69:d0:0d:74:21:b3:35:32:7d:4a:
         4c:bc:3e:88:d3:18:39:14:a3:ee:d6:ff:60:8e:75:1d:24:c3:
         20:47:2d:20:e1:70:09:4e:6a:2b:c5:0f:f5:87:19:9f:d3:56:
         77:85:af:c9:90:4f:2d:de:98:17:9a:9e:97:38:ac:58:11:2b:
         e9:ad:5a:91:f8:60:3c:61:af:e7:4b:c5:45:15:40:68:56:7a:
         fb:8c:df:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:33:57 2025 by rpki-client