Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3137372e302f32342d3234203d3e2039303039.roa
File:                     3139332e32392e3137372e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          LhEiHwO4rN8sas4JMNG6soHzmqJwyXpa2FRW2mfCv60=
Subject key identifier:   1E:47:9B:79:71:7B:8E:6E:E8:F8:CD:E0:54:5D:81:9C:4F:E3:33:D5
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       2099C525ED47EE1BEA465AA1F44C11B45662BE27
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3137372e302f32342d3234203d3e2039303039.roa
Signing time:             Tue 24 Mar 2026 08:35:54 +0000
ROA not before:           Tue 24 Mar 2026 08:30:54 +0000
ROA not after:            Tue 23 Mar 2027 08:35:54 +0000
asID:                     9009
IP address blocks:        193.29.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:99:c5:25:ed:47:ee:1b:ea:46:5a:a1:f4:4c:11:b4:56:62:be:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Mar 24 08:30:54 2026 GMT
            Not After : Mar 23 08:35:54 2027 GMT
        Subject: CN=1E479B79717B8E6EE8F8CDE0545D819C4FE333D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:41:d6:a8:4c:81:0c:d9:b8:c2:5e:5f:59:6e:
                    3c:57:92:17:be:0b:fc:da:80:ef:9a:16:22:10:68:
                    54:c3:3b:aa:7c:4a:e4:dc:83:17:df:2b:5e:9a:56:
                    c6:7b:a5:61:63:6d:d7:74:d7:47:60:f7:58:77:5f:
                    d1:2b:b5:47:b4:b4:1e:a5:2d:98:a9:d8:85:c2:6d:
                    ed:d9:27:cf:21:84:2d:d6:22:97:51:72:7d:a0:06:
                    48:06:39:1c:21:81:04:5c:e8:dc:20:de:84:ce:65:
                    a6:9c:83:46:3e:85:49:0d:67:91:a6:88:ec:46:40:
                    9e:b0:6c:31:71:55:44:c3:93:13:36:c4:03:8a:a8:
                    09:9f:30:ab:c9:6e:20:0e:81:b7:ae:94:e7:e7:1c:
                    58:cb:42:54:e3:44:d6:c6:2d:02:90:b4:87:08:93:
                    5b:eb:fb:63:fe:29:4c:75:91:e1:80:95:04:6f:a0:
                    e3:91:39:67:a9:74:ee:6a:4a:06:cc:68:17:a3:13:
                    2f:58:de:ec:87:ff:ab:dc:d9:d3:9c:d5:89:dc:ec:
                    6a:67:1d:9a:ac:ef:17:1a:e2:9b:c6:46:ba:48:2d:
                    c0:61:ac:6e:82:72:0b:fe:47:ca:56:dd:dd:6b:48:
                    a9:d3:f0:1c:06:1d:06:41:86:96:bf:0e:1c:a6:39:
                    78:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:47:9B:79:71:7B:8E:6E:E8:F8:CD:E0:54:5D:81:9C:4F:E3:33:D5
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3137372e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:6b:78:e3:0f:0a:e5:0e:02:6f:51:d3:f8:99:ca:3d:94:4b:
         28:3f:f5:1d:cd:e9:69:79:71:59:33:40:fa:91:cd:74:f5:5e:
         44:68:7e:ec:9d:a2:5b:e6:79:c0:c9:0b:e4:ca:e2:48:a4:01:
         2e:7d:f1:d4:4f:2f:df:3e:c8:58:6c:ec:0d:ad:5f:6b:39:2d:
         3f:2a:15:e6:2c:23:cc:0f:50:16:6b:72:14:7e:4c:ae:7f:b9:
         8e:0e:0b:80:ef:91:bd:11:c9:ac:d9:a0:10:e0:a6:d9:13:49:
         cf:31:c6:dd:13:e1:b1:d0:ba:5c:6e:a3:96:be:80:c4:8e:64:
         02:45:00:52:eb:21:a6:69:ff:e1:c7:2c:23:e6:ad:62:04:a5:
         ca:38:7d:4d:bd:84:88:9c:98:d9:b2:e4:b1:50:2d:cb:6f:b2:
         c9:6b:18:7c:10:46:01:79:ff:77:97:0c:9c:4e:de:3e:10:21:
         4a:8b:ac:ff:98:9b:b5:a7:7a:12:dd:3e:fd:db:bb:89:57:56:
         fd:0c:21:a5:ad:c3:e0:bd:d0:58:a6:8f:2b:e2:fe:52:5f:28:
         63:8a:52:e1:69:4d:01:60:03:00:b6:ea:79:b7:50:28:53:98:
         1c:e9:31:14:b3:ea:7c:d0:ef:00:a1:d8:7a:2c:25:ae:14:e3:
         2a:d0:a9:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:41:45 2026 by rpki-client