Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e20323132333834.roa
File:                     3139332e32392e3138392e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          kn/YJDZSF0BdtjF+aYj8zWsNxcYoh/XYHLqBD3A/yH4=
Subject key identifier:   A5:20:A3:71:B9:1A:D2:C2:27:2D:B7:25:1D:51:B6:DA:92:DF:A0:EF
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       367103283B2EC588A0DEE31DB694C01FD69A4F31
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 28 Apr 2026 13:36:00 +0000
ROA not before:           Tue 28 Apr 2026 13:31:00 +0000
ROA not after:            Tue 27 Apr 2027 13:36:00 +0000
asID:                     212384
IP address blocks:        193.29.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 14 May 2026 02:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:71:03:28:3b:2e:c5:88:a0:de:e3:1d:b6:94:c0:1f:d6:9a:4f:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 28 13:31:00 2026 GMT
            Not After : Apr 27 13:36:00 2027 GMT
        Subject: CN=A520A371B91AD2C2272DB7251D51B6DA92DFA0EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5e:2d:55:97:b5:3b:69:84:af:26:dd:76:9f:
                    e1:15:43:d9:05:ca:a9:f8:b3:54:29:0c:65:6f:9f:
                    24:ee:c7:64:13:c2:b0:c1:ea:5b:f0:d8:85:36:5b:
                    3d:8c:fa:6b:6d:7b:eb:78:cf:a0:46:65:26:00:66:
                    29:eb:26:8b:4e:b6:35:6a:22:77:b1:68:d4:44:52:
                    1d:67:a6:59:81:10:5b:fd:9d:d8:c9:13:f3:b3:eb:
                    a7:d7:2c:cf:ea:cb:7a:34:79:13:2e:3f:c9:be:9e:
                    56:c3:e6:a6:c3:7b:c2:70:8e:7f:b3:f5:9a:80:a7:
                    73:23:41:40:fb:86:89:3c:1b:11:2b:b7:a4:ae:f3:
                    63:d4:76:ae:79:8d:f7:97:2f:32:ff:15:85:1f:90:
                    a4:77:28:c2:0e:0b:10:cc:99:c2:23:d1:a1:95:91:
                    13:4c:64:ab:84:35:87:59:a6:f0:1f:6c:47:63:9e:
                    9a:ab:03:f7:dd:4d:d8:f2:7e:86:5c:b4:15:69:ef:
                    86:56:15:45:2c:4d:44:a1:68:fd:18:ab:6c:b7:4d:
                    13:13:b8:48:2f:cd:b7:49:ee:88:1d:71:cb:83:eb:
                    60:bb:75:71:07:da:64:7c:e7:69:32:60:3d:18:79:
                    93:8a:e6:9c:a1:76:7a:1b:b5:c4:cb:32:a3:dd:ac:
                    aa:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:20:A3:71:B9:1A:D2:C2:27:2D:B7:25:1D:51:B6:DA:92:DF:A0:EF
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3138392e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:8b:43:e0:ab:e0:43:de:ca:c8:75:ec:5e:af:ef:42:37:4c:
         d5:dd:7e:0a:88:94:e1:c5:84:a2:27:79:85:63:21:ce:90:35:
         1e:43:d0:dd:50:44:a2:d1:ae:60:9e:4b:40:bc:9e:f6:ed:70:
         a6:04:e1:88:e0:14:ed:be:7d:ee:82:95:45:4f:5b:83:55:bd:
         b7:a2:63:07:4d:73:3c:a7:08:a6:1c:29:9a:cb:8d:5e:a3:3f:
         6c:c2:b5:17:09:30:aa:a3:4f:48:10:00:8c:02:36:41:7a:34:
         80:c4:9b:10:71:f0:2f:b2:71:80:52:dc:be:20:75:04:5c:6e:
         c5:a2:f5:aa:90:db:f8:cb:32:6d:16:87:d2:bf:53:c3:20:9d:
         da:10:df:be:04:0c:ee:6d:6f:cd:a1:fe:42:3c:6a:6a:40:d6:
         f0:4a:5b:e8:34:47:86:2c:fa:8a:dd:34:31:df:81:54:cd:19:
         af:1a:54:29:01:05:37:97:52:c8:63:ba:72:30:06:24:05:82:
         ba:38:3d:9b:ec:b1:af:c5:d3:e2:90:56:d0:75:7a:06:67:b3:
         5e:7f:79:46:6e:22:52:79:c8:61:6c:67:dd:da:a1:7c:dd:43:
         3a:57:93:8a:f0:3b:fc:6f:60:93:bf:e4:05:2a:be:a9:d5:0d:
         66:97:99:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:06:40 2026 by rpki-client