Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35342e302f32342d3234203d3e20313734.roa
File:                     3139352e37382e35342e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          v2StcfA5hzMOR5Hqlb3fJhuvIINNEPkxjfKyLigfapM=
Subject key identifier:   74:DE:F2:6B:06:89:E4:77:92:0F:F9:02:E0:B9:99:5A:99:1F:52:3E
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       302B9BF08974CDB8A0279A3DB0BA2DD2BC44C389
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35342e302f32342d3234203d3e20313734.roa
Signing time:             Mon 01 Sep 2025 13:29:44 +0000
ROA not before:           Mon 01 Sep 2025 13:24:44 +0000
ROA not after:            Mon 31 Aug 2026 13:29:44 +0000
asID:                     174
IP address blocks:        195.78.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 23:51:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:2b:9b:f0:89:74:cd:b8:a0:27:9a:3d:b0:ba:2d:d2:bc:44:c3:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep  1 13:24:44 2025 GMT
            Not After : Aug 31 13:29:44 2026 GMT
        Subject: CN=74DEF26B0689E477920FF902E0B9995A991F523E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c2:84:c1:74:bb:6f:01:a1:5d:49:28:4e:d6:
                    63:21:03:ac:02:ce:ef:1e:52:0d:9d:7e:a9:a0:41:
                    4a:68:a7:32:e2:8c:37:bf:09:68:50:24:bc:28:ea:
                    5b:59:f4:eb:48:9e:81:7d:9c:96:cc:e5:6d:47:34:
                    c5:95:e6:ab:e5:41:ee:eb:ed:f6:a5:d0:cb:6d:cc:
                    90:27:de:5b:f5:d3:f7:6b:1d:1b:f3:dd:d8:f9:4d:
                    d8:b7:a7:7f:a8:da:95:51:72:08:83:c1:2c:4c:20:
                    97:2c:25:b0:de:df:42:1f:4e:29:2f:5a:83:5f:11:
                    3b:b4:78:38:65:40:5f:93:53:5c:5a:47:11:cb:ec:
                    8f:f4:d9:cd:92:7a:94:aa:5c:de:03:59:21:90:4b:
                    43:77:01:5a:b8:77:b9:55:3e:e5:da:72:06:26:45:
                    43:f7:48:96:d5:7f:72:c4:05:e2:b6:5d:b5:78:80:
                    a8:3d:45:10:6a:e2:ef:6e:68:9b:68:ae:6a:ed:29:
                    f6:ce:c9:ba:b5:c0:4f:c2:94:81:92:82:78:82:5b:
                    0d:21:22:e9:f6:bd:c7:78:83:e2:d3:dd:81:05:4a:
                    5c:d7:63:71:f2:5a:77:5e:c4:65:01:a0:4d:63:86:
                    7d:c4:56:a7:02:bf:84:59:07:a7:67:68:d7:d3:29:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:DE:F2:6B:06:89:E4:77:92:0F:F9:02:E0:B9:99:5A:99:1F:52:3E
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35342e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:81:29:7f:37:58:1a:4d:91:91:45:31:4b:b2:2d:16:e7:21:
         86:26:65:68:b2:70:7d:31:d3:00:c7:84:11:4c:07:86:a6:80:
         a6:e5:df:03:a7:de:69:ff:b6:90:d0:ce:80:2b:41:92:ef:14:
         6c:ef:af:2f:ee:07:34:91:e7:4a:f2:c1:96:95:d2:d0:21:15:
         6f:28:1b:54:6d:b4:5c:8a:88:cf:e4:3b:14:b7:31:37:9e:15:
         d6:91:23:c3:4e:de:be:40:fa:51:b1:a1:03:7b:17:9e:17:59:
         6b:09:1f:16:f9:f4:e1:b1:5e:d9:55:1c:d1:09:df:53:6f:82:
         1e:61:14:58:8f:b1:3d:b6:8c:ca:2a:e2:08:9a:aa:0f:4f:15:
         1e:74:f8:08:a5:40:ad:5c:97:29:1a:ca:ef:8f:1a:de:a6:d0:
         6f:86:85:e8:42:4f:ea:66:eb:bf:b5:75:b2:b5:fe:fa:55:06:
         b3:64:33:f5:40:65:cb:5d:35:69:80:58:de:83:0a:e2:5d:77:
         c9:44:58:a4:5d:ec:e8:c7:3d:ab:16:cb:b6:9a:1e:ce:57:e7:
         fb:a7:e4:cc:3d:a8:7e:6d:0a:89:38:c0:dc:22:f8:0e:88:56:
         07:49:b8:42:2d:ea:15:1a:c0:a4:90:cf:b6:23:a7:27:e6:50:
         54:f7:70:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:25:24 2025 by rpki-client