Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32332d3234203d3e20383334.roa
File:                     38392e3230372e3137362e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          wDf08dn8/tPrYwn8L/yvs5MK2Vp13tmduGEedn3HDO8=
Subject key identifier:   53:A2:BC:44:1E:BA:84:36:5B:D0:20:58:FD:97:AE:D9:AF:19:2B:24
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       5C8DDC0F7514871022033A5C2B5647DCAE3D711B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32332d3234203d3e20383334.roa
Signing time:             Sun 26 Apr 2026 09:57:42 +0000
ROA not before:           Sun 26 Apr 2026 09:52:42 +0000
ROA not after:            Sun 25 Apr 2027 09:57:42 +0000
asID:                     834
IP address blocks:        89.207.176.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 07:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:8d:dc:0f:75:14:87:10:22:03:3a:5c:2b:56:47:dc:ae:3d:71:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 26 09:52:42 2026 GMT
            Not After : Apr 25 09:57:42 2027 GMT
        Subject: CN=53A2BC441EBA84365BD02058FD97AED9AF192B24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:79:11:82:9e:fe:cd:85:97:d2:5d:7d:e5:
                    04:91:1c:d9:9d:56:32:4c:4c:f3:33:42:b8:c2:c0:
                    f3:44:05:92:bf:47:aa:8c:0e:0d:c7:b2:ad:2c:d6:
                    f1:3d:19:96:f8:68:63:6c:b2:47:a8:ec:3f:74:b4:
                    26:fb:a3:58:9d:6d:0a:56:e1:43:07:05:cd:be:2b:
                    4c:64:68:b9:e6:33:6f:a9:69:4b:f0:c4:8d:bd:37:
                    83:79:c8:b7:90:65:2a:d1:75:2c:29:57:45:a2:87:
                    ff:53:a9:0e:a9:b1:1e:66:70:96:29:c3:72:5d:9b:
                    2d:2b:7e:9f:b7:31:d0:d1:b9:c3:a6:8d:18:82:d6:
                    d6:dd:58:49:36:15:06:91:b5:a5:56:0b:71:ac:2b:
                    47:d7:43:4a:69:d6:77:3b:67:33:60:25:07:cb:c5:
                    4d:8f:ac:9f:f8:d2:9d:7d:67:4c:6b:58:77:e4:95:
                    9d:cc:49:b8:7b:d1:e6:98:51:eb:f1:7a:f3:70:1d:
                    65:25:5c:bf:bb:88:2c:0d:1d:dd:80:0b:44:81:36:
                    91:89:f1:df:00:21:66:6d:3e:96:78:2f:8a:38:96:
                    65:34:80:96:f0:51:16:da:58:f5:ca:a5:e4:70:00:
                    9b:3e:e6:92:2d:0c:f7:77:60:bc:d5:27:6e:fc:d8:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A2:BC:44:1E:BA:84:36:5B:D0:20:58:FD:97:AE:D9:AF:19:2B:24
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/38392e3230372e3137362e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  89.207.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:da:70:50:cd:d9:05:4e:82:cc:a9:ff:2d:e9:20:bb:44:ff:
         13:a0:d0:2b:91:6a:b9:42:4e:28:75:fe:15:b1:fe:1f:bb:c6:
         8d:58:71:1b:e4:db:62:d8:5c:69:ae:bd:32:aa:9d:a7:a1:4b:
         b6:58:14:2f:22:15:d1:47:cb:c2:fc:fa:20:0c:b3:8d:2f:9c:
         7f:0f:c1:57:96:6b:36:18:8a:44:e0:bb:eb:57:a2:ac:c9:73:
         78:e3:98:a4:f3:4d:e8:58:dc:99:e2:c1:0d:37:3e:27:14:b8:
         d4:f5:20:e0:a0:08:99:92:8c:78:3b:a7:ef:49:2e:2f:db:4f:
         e3:d7:d6:1a:f5:14:e7:e6:30:a4:b9:62:12:9d:03:53:f8:d7:
         c8:81:01:87:de:bd:e1:a4:68:ab:3f:50:a0:24:2c:2f:b5:e6:
         c2:60:21:7a:b2:82:42:bc:cb:64:cf:7a:22:8f:38:92:1f:a2:
         f2:bf:d6:22:f0:44:a7:31:e8:85:24:f0:2d:a6:a4:47:85:e0:
         c2:89:f7:7c:56:d3:53:07:33:96:c7:a7:04:e3:b1:14:b4:ef:
         c0:e7:ff:6b:da:b6:3d:c9:8f:84:35:d4:69:cf:02:83:bf:c0:
         eb:d0:8d:8d:c4:a0:32:82:b0:6f:89:6c:9f:d8:b9:a9:c3:b8:
         5a:f4:7f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:54 2026 by rpki-client