Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e203538323132.roa
File:                     3139332e38342e3131312e302f32342d3234203d3e203538323132.roa (raw, json)
Hash identifier:          dWuINas6do/4Shbc7W9VAWw1e+X+A4dforurbjaWFGw=
Subject key identifier:   52:6F:25:32:7A:AA:E7:CE:9E:AE:06:5E:11:E5:CE:D4:E7:A7:69:0F
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7ABA99B16B4E687678135531524045925268B1DF
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e203538323132.roa
Signing time:             Wed 25 Jun 2025 13:46:55 +0000
ROA not before:           Wed 25 Jun 2025 13:41:55 +0000
ROA not after:            Wed 24 Jun 2026 13:46:55 +0000
asID:                     58212
IP address blocks:        193.84.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 06:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ba:99:b1:6b:4e:68:76:78:13:55:31:52:40:45:92:52:68:b1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun 25 13:41:55 2025 GMT
            Not After : Jun 24 13:46:55 2026 GMT
        Subject: CN=526F25327AAAE7CE9EAE065E11E5CED4E7A7690F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:9f:1d:0c:31:36:0e:fe:14:0b:be:fc:85:
                    97:29:06:ac:44:66:25:e9:a9:df:04:d8:d7:90:03:
                    6a:b4:e3:7c:a5:89:9e:97:4f:c2:fc:8d:0f:27:d9:
                    ae:f5:50:07:48:ce:95:1e:d1:fa:f3:6a:4b:3c:cf:
                    b5:ea:71:f3:35:d8:7e:bf:4b:54:15:5a:6d:e0:6d:
                    b7:26:fe:77:9b:a6:cf:c0:b4:31:7d:44:6e:38:2b:
                    6b:b6:e3:67:d7:4f:cf:6c:7d:e6:7a:73:66:d9:ac:
                    ef:dc:33:e1:1d:f7:e1:29:44:77:90:ee:01:3f:14:
                    19:be:80:1e:e8:f3:19:3f:9a:e2:8b:b5:5d:0f:11:
                    e5:a4:61:3f:5b:74:33:76:8a:6d:6d:37:da:8a:7e:
                    bd:e5:92:c0:6c:ed:05:b4:89:63:98:c9:88:a7:4b:
                    7c:00:33:aa:2a:58:40:c5:24:82:dc:65:94:3c:ea:
                    ff:71:99:ab:30:f6:83:b7:5a:c3:ab:74:6d:bb:86:
                    e4:e0:70:3d:f4:09:12:2e:1e:97:51:92:7d:cb:87:
                    fe:1b:26:7f:04:d3:dc:4d:10:c9:89:e7:16:cc:26:
                    2c:29:2c:d0:0e:33:40:fa:3f:ab:fd:a9:b2:36:de:
                    f7:d5:b6:ca:e3:99:33:c4:9a:ae:60:f1:a6:70:2e:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6F:25:32:7A:AA:E7:CE:9E:AE:06:5E:11:E5:CE:D4:E7:A7:69:0F
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e38342e3131312e302f32342d3234203d3e203538323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.84.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:d8:52:8e:d9:8f:bb:46:2f:30:f7:6b:ad:2b:63:a5:0f:0b:
         dd:c9:7c:b7:13:e5:68:fe:e9:6f:59:2b:bf:3c:fa:07:31:58:
         73:e5:1c:7e:d3:94:7f:28:b0:61:e8:7b:95:7a:a7:9a:fc:fe:
         2a:54:b8:9c:03:40:fe:76:ce:c5:15:41:7e:a7:06:cd:ff:e2:
         e5:bc:4c:38:ae:22:ce:f7:e1:ee:7f:63:e2:67:27:aa:0e:70:
         20:14:b2:fe:3f:00:e6:f9:5a:f1:84:ad:45:5b:3f:61:5e:08:
         8d:f6:0b:91:39:f1:8b:11:cd:ab:d8:04:03:04:bb:20:41:74:
         0a:5d:b0:2d:b8:32:25:88:1b:11:0b:19:91:d7:ee:49:33:79:
         80:69:54:ce:97:f6:3a:27:b1:2c:22:2c:e2:08:f6:5f:79:2c:
         56:ae:46:1f:98:62:22:c3:bf:50:7f:ab:10:7a:b4:1c:ec:a3:
         d7:07:97:e3:f2:a0:60:32:cc:1f:40:9d:b6:54:c5:9d:b4:e5:
         bd:37:1c:7e:0a:f3:63:45:52:b8:e0:0c:0f:21:4a:86:97:1b:
         16:6b:68:04:f5:7a:3c:f9:98:20:88:a2:2a:5b:5c:ba:02:e3:
         0c:69:fe:98:36:a7:09:55:a6:e4:aa:49:fb:02:26:e8:20:bf:
         67:b2:7c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:21:18 2025 by rpki-client