Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e34322e302f32342d3234203d3e2039303039.roa
File:                     3139332e32392e34322e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          UV2MuYeA1hZy9vGFR59UbSFe5p69MZeoDf9vhGXArT4=
Subject key identifier:   7C:74:D2:18:A0:FE:AC:70:65:E3:4A:5F:0C:2F:A5:B8:12:5D:03:8B
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       618945EA4D8E646B7847FFAE8A787C876118058D
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e34322e302f32342d3234203d3e2039303039.roa
Signing time:             Tue 24 Mar 2026 08:35:54 +0000
ROA not before:           Tue 24 Mar 2026 08:30:54 +0000
ROA not after:            Tue 23 Mar 2027 08:35:54 +0000
asID:                     9009
IP address blocks:        193.29.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 26 Mar 2026 21:20:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:89:45:ea:4d:8e:64:6b:78:47:ff:ae:8a:78:7c:87:61:18:05:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Mar 24 08:30:54 2026 GMT
            Not After : Mar 23 08:35:54 2027 GMT
        Subject: CN=7C74D218A0FEAC7065E34A5F0C2FA5B8125D038B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:5c:13:e1:10:01:b5:10:04:22:cc:0c:24:
                    c4:a2:9c:51:ed:f3:c6:e7:74:a6:ff:f6:1a:92:ba:
                    a1:45:01:71:fc:f4:0b:36:17:f2:1d:7a:58:3c:77:
                    37:20:12:fd:ad:95:df:75:bb:4a:0a:d4:62:f3:ef:
                    9f:02:32:92:b7:26:34:0e:81:ef:18:f1:18:26:77:
                    0c:c5:9c:46:5d:ec:ed:77:b2:40:14:e0:d3:e6:c4:
                    6d:65:39:29:10:7b:5b:de:a1:44:9d:89:01:3f:15:
                    8c:9d:44:c4:e8:32:ce:0e:98:88:21:ef:9d:7d:68:
                    6e:d6:cc:c8:89:ec:b9:eb:fa:72:5b:28:be:e2:24:
                    f6:87:3d:a9:cc:ca:31:08:5b:d5:da:b2:f5:83:b8:
                    52:2d:2e:20:71:f5:c0:8f:c9:5f:be:3f:9f:d1:2b:
                    66:62:f4:11:07:27:fc:b9:e7:46:22:00:af:c5:0d:
                    ee:a8:9e:e4:5e:4d:d5:6c:b1:23:78:c0:00:39:02:
                    ad:d8:8f:ed:b4:0a:87:de:cf:28:e0:8d:e2:15:e8:
                    3a:d3:7d:a9:dc:93:cc:9f:b2:d0:13:e5:94:b3:1a:
                    59:36:55:30:16:b9:f5:67:6d:77:61:e8:13:07:70:
                    cb:f4:c0:5d:0c:af:4e:47:7c:f3:40:9d:14:7b:11:
                    e3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:74:D2:18:A0:FE:AC:70:65:E3:4A:5F:0C:2F:A5:B8:12:5D:03:8B
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e34322e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:3a:7c:8c:90:29:b1:28:56:07:8f:2e:00:3c:99:9b:26:2d:
         4b:5d:40:bc:76:df:ff:71:83:d6:b8:9b:b9:a8:49:c6:67:4f:
         0b:de:be:39:e5:dd:ec:8e:4e:51:bf:9d:68:a3:d5:8f:7c:28:
         77:9e:2b:78:84:c7:1d:b1:3a:bb:59:f1:11:9f:11:1d:49:a3:
         19:ab:6e:af:66:4f:9a:cc:2f:2a:6d:0b:fa:48:3a:b3:02:31:
         08:e0:77:39:75:87:11:82:f5:fe:38:61:2d:8d:f1:c5:29:54:
         3f:5d:42:68:de:70:f8:d9:ec:0f:b4:67:0a:1a:ad:53:b1:74:
         44:38:3f:ee:23:2c:7a:c1:82:24:93:5e:cd:26:eb:92:3f:f2:
         33:4a:eb:67:5e:db:4d:16:99:7e:7a:8c:76:14:6b:4d:d2:32:
         1f:27:0c:17:e1:39:af:c2:44:b0:eb:53:4f:aa:1f:82:e0:a5:
         93:86:ba:41:b7:2a:d3:cb:89:c9:9a:63:a3:58:a4:82:ea:56:
         27:d7:fc:2a:9d:e8:6c:95:61:dd:c3:8c:66:dd:bf:2c:6e:43:
         26:c4:62:43:26:3a:b8:15:99:88:7b:41:d6:8d:ab:d6:4d:43:
         d7:df:8d:e2:ee:3d:92:eb:64:d5:91:ee:c2:a0:6d:e9:21:62:
         0f:3f:03:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:45 2026 by rpki-client