Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e2039333034.roa
File:                     3139332e3138372e312e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          3hp2eBUIipZJZQ65H4T5CkRgasW+n2yZ3qfZcxM6Qf4=
Subject key identifier:   57:82:04:9A:BF:33:E0:48:5B:E5:20:E1:46:8B:1D:82:27:93:19:64
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7B1D32237D126215FE76840F821C51C0A5D302C7
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 17 Jun 2025 10:59:26 +0000
ROA not before:           Tue 17 Jun 2025 10:54:26 +0000
ROA not after:            Tue 16 Jun 2026 10:59:26 +0000
asID:                     9304
IP address blocks:        193.187.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 06:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:1d:32:23:7d:12:62:15:fe:76:84:0f:82:1c:51:c0:a5:d3:02:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun 17 10:54:26 2025 GMT
            Not After : Jun 16 10:59:26 2026 GMT
        Subject: CN=5782049ABF33E0485BE520E1468B1D8227931964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1a:6d:c6:2e:fd:55:f9:e1:a6:20:29:f9:d6:
                    c8:eb:8d:f3:27:35:49:81:ae:6a:35:d0:f1:69:cd:
                    a3:b2:fc:9a:7f:86:8b:7c:93:66:be:3c:61:29:91:
                    03:8d:66:7a:f0:9f:70:c4:09:d2:4f:c9:2a:24:5c:
                    97:1e:70:78:9e:90:a1:47:84:bc:4d:0d:e4:a7:7c:
                    85:e3:ea:b2:e8:6a:36:ea:74:88:5f:98:2f:36:56:
                    57:47:e6:a4:ec:e1:c0:9e:7b:ab:4b:19:da:8e:55:
                    4c:5b:5f:8a:02:e4:ac:31:06:84:3b:e6:38:d9:ab:
                    f2:c3:5f:02:9b:e6:8f:97:62:e7:40:ef:52:fb:6f:
                    7d:ca:cf:63:83:46:6d:a9:66:05:88:68:cb:5f:1c:
                    52:5f:9e:38:09:3a:6a:90:db:6b:c0:75:27:ae:53:
                    21:4d:c7:3a:df:0c:c6:08:92:26:14:b1:7d:82:6d:
                    e9:3f:d3:8c:4c:c3:32:b3:6f:57:22:48:8e:46:ac:
                    e6:1c:08:5e:3f:05:ea:cf:7e:57:02:bd:89:56:95:
                    df:bb:b9:26:dc:07:5c:c5:2c:0f:86:93:84:00:6e:
                    0c:80:6e:94:59:eb:a3:97:ac:fe:e4:56:fd:1c:3c:
                    6a:36:d8:31:1c:9e:e3:b8:c4:f8:cc:1b:20:d1:4b:
                    5a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:82:04:9A:BF:33:E0:48:5B:E5:20:E1:46:8B:1D:82:27:93:19:64
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138372e312e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.187.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:b1:96:f0:3d:51:5f:79:03:51:2f:31:c4:08:07:1b:f8:bd:
         89:f0:6e:f0:36:0b:d1:44:07:36:39:61:ab:57:54:06:f8:59:
         53:d2:4c:d1:c7:30:0e:f9:26:e1:f1:a4:65:48:3b:a7:9d:35:
         24:8c:3e:1b:4e:4f:f5:4a:65:c9:f7:d2:7a:b2:85:49:e9:52:
         cd:44:2c:a7:77:3b:44:56:fe:96:cc:6f:10:d6:ec:0b:4c:dd:
         86:be:95:b6:fe:e7:29:bf:0e:c4:6d:ac:7c:95:e8:3a:f4:73:
         4f:81:95:fd:a9:f7:f2:e6:39:ff:15:a0:62:db:0d:54:9d:6d:
         6f:7f:df:9d:b5:c9:a5:36:13:b4:6b:00:d1:3c:c7:76:09:c2:
         b3:e7:09:e4:af:7a:5c:04:c4:0e:61:d3:30:50:d6:12:f3:d4:
         c1:5b:29:55:b5:59:7e:51:2e:0a:32:62:ba:b4:4f:ab:9f:ff:
         b1:da:39:df:7c:7c:2a:db:b5:07:ed:0f:82:43:7b:bd:3b:54:
         30:64:67:8f:7f:e5:eb:8f:81:5b:32:dc:85:d3:13:0e:b6:42:
         ec:d5:0c:de:27:27:00:a2:82:97:34:d9:38:a2:6e:b4:e1:68:
         af:20:7e:f6:3c:ec:7a:1b:d6:c0:3b:ab:70:bc:6c:25:12:03:
         15:a3:22:0e
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUex0yI30SYhX+doQPghxRwKXTAscwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwNjE3MTA1NDI2WhcNMjYwNjE2MTA1OTI2
WjAzMTEwLwYDVQQDEyg1NzgyMDQ5QUJGMzNFMDQ4NUJFNTIwRTE0NjhCMUQ4MjI3
OTMxOTY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAixptxi79Vfnh
piAp+dbI643zJzVJga5qNdDxac2jsvyaf4aLfJNmvjxhKZEDjWZ68J9wxAnST8kq
JFyXHnB4npChR4S8TQ3kp3yF4+qy6Go26nSIX5gvNlZXR+ak7OHAnnurSxnajlVM
W1+KAuSsMQaEO+Y42avyw18Cm+aPl2LnQO9S+299ys9jg0ZtqWYFiGjLXxxSX544
CTpqkNtrwHUnrlMhTcc63wzGCJImFLF9gm3pP9OMTMMys29XIkiORqzmHAhePwXq
z35XAr2JVpXfu7km3AdcxSwPhpOEAG4MgG6UWeujl6z+5Fb9HDxqNtgxHJ7juMT4
zBsg0UtajQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFFeCBJq/M+BIW+Ug4UaLHYIn
kxlkMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNk
MzdkYWM3MmYxLzEvMzEzOTMzMmUzMTM4MzcyZTMxMmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzkzMzMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBuwEwDQYJKoZIhvcNAQELBQADggEB
AByxlvA9UV95A1EvMcQIBxv4vYnwbvA2C9FEBzY5YatXVAb4WVPSTNHHMA75JuHx
pGVIO6edNSSMPhtOT/VKZcn30nqyhUnpUs1ELKd3O0RW/pbMbxDW7AtM3Ya+lbb+
5ym/DsRtrHyV6Dr0c0+Blf2p9/LmOf8VoGLbDVSdbW9/3521yaU2E7RrANE8x3YJ
wrPnCeSvelwExA5h0zBQ1hLz1MFbKVW1WX5RLgoyYrq0T6uf/7HaOd98fCrbtQft
D4JDe707VDBkZ49/5euPgVsy3IXTEw62QuzVDN4nJwCigpc02TiibrThaK8gfvY8
7Hob1sA7q3C8bCUSAxWjIg4=
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:56:23 2025 by rpki-client