Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
File:                     3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa (raw, json)
Hash identifier:          sPLfKii44OI+oFn6by4GWSTlTRGh9AVtL3SAZ03yNts=
Subject key identifier:   D4:63:EE:43:7A:51:87:12:6D:84:F1:D6:D8:81:CC:B7:15:38:82:69
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       6E3B8C6918311BE4757A8517F3EC59FA1EEC3CE5
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa
Signing time:             Tue 07 Oct 2025 03:53:46 +0000
ROA not before:           Tue 07 Oct 2025 03:48:46 +0000
ROA not after:            Tue 06 Oct 2026 03:53:46 +0000
asID:                     396881
IP address blocks:        192.138.210.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:3b:8c:69:18:31:1b:e4:75:7a:85:17:f3:ec:59:fa:1e:ec:3c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Oct  7 03:48:46 2025 GMT
            Not After : Oct  6 03:53:46 2026 GMT
        Subject: CN=D463EE437A5187126D84F1D6D881CCB715388269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fd:2b:6f:b0:7c:00:f1:a1:bf:28:ed:07:3c:
                    11:e6:ee:a5:f2:8c:cf:fa:44:1b:08:7c:7f:07:d2:
                    65:8f:df:7d:3e:6f:3b:de:13:63:77:d8:93:9e:90:
                    74:b0:d2:0f:3b:69:6e:66:8e:3d:64:9f:7f:ef:22:
                    33:ba:8b:88:bc:92:e7:95:26:60:ff:c5:02:6f:f9:
                    9d:62:76:92:c7:9f:d1:a1:10:c6:dd:73:fe:e1:79:
                    e0:c2:73:04:4e:f0:66:b2:d3:07:b1:47:32:e6:6d:
                    c6:80:07:6d:2c:55:89:8d:ed:44:d9:56:20:d0:9f:
                    41:f1:c2:d4:4f:97:59:93:5f:9a:c3:66:44:72:fe:
                    20:e1:3e:9a:e3:e7:b0:e9:a4:94:41:d1:67:ed:db:
                    7b:17:10:3a:c9:e9:a1:50:31:38:af:ab:14:ba:d3:
                    e5:66:8c:d6:61:bc:82:97:c8:f0:f9:6b:4c:2e:b3:
                    d7:f4:56:a8:33:69:22:10:5c:b4:e3:ee:59:43:ea:
                    4e:e9:11:ec:78:af:0c:06:8b:50:27:e9:10:83:e3:
                    e3:e8:2a:e0:09:23:b9:cf:37:8a:7b:79:61:57:d0:
                    79:70:e6:c1:98:e0:0c:62:40:4a:34:c4:66:7d:b9:
                    e4:8b:4b:e3:05:2e:f5:98:8a:46:83:af:70:ba:0a:
                    42:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:63:EE:43:7A:51:87:12:6D:84:F1:D6:D8:81:CC:B7:15:38:82:69
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3133382e3231302e302f32332d3234203d3e20333936383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:64:cd:1d:a7:8b:59:8a:0d:4f:86:21:e5:96:64:ca:f0:66:
         86:77:1d:8c:1d:c0:ca:82:5d:68:ba:37:ed:a2:b0:1b:1b:9d:
         20:6f:6c:68:37:cb:19:f3:ec:9f:10:21:54:2d:e4:ff:dd:a6:
         8c:55:8f:3d:3d:8a:e9:73:0d:67:9c:17:bd:a9:c4:a2:9c:62:
         15:9f:c4:8b:eb:32:e6:e0:63:f7:e9:a4:72:e4:f5:70:25:e2:
         44:44:80:00:85:c9:9f:65:f7:bc:8c:19:84:4e:98:ad:73:5c:
         f6:13:1e:7c:df:86:98:4e:35:40:e8:00:1a:ca:a4:f4:7b:ca:
         d1:48:a5:f4:7a:5f:ee:fe:57:a4:5c:5b:cc:c3:2d:40:7b:f5:
         64:86:57:93:4b:55:4b:19:bd:1e:cd:1e:8b:76:48:fe:1f:ca:
         2c:c2:61:4e:76:b5:95:fe:e1:94:0d:1d:ec:bb:fa:7c:ab:29:
         d7:75:f0:ae:b0:fd:17:2d:ea:2d:79:d3:ef:a9:f9:56:20:8c:
         f9:83:35:73:e3:a0:e6:d0:9a:6d:03:98:ee:c8:c7:ac:b4:bd:
         ee:2e:41:37:47:6a:68:ba:e7:8c:75:4a:65:c1:8a:67:a6:4e:
         9d:0d:1d:5f:c2:66:05:2a:da:ec:37:1c:2b:9b:19:2f:0d:bd:
         42:17:f9:f9
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUbjuMaRgxG+R1eoUX8+xZ+h7sPOUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjUxMDA3MDM0ODQ2WhcNMjYxMDA2MDM1MzQ2
WjAzMTEwLwYDVQQDEyhENDYzRUU0MzdBNTE4NzEyNkQ4NEYxRDZEODgxQ0NCNzE1
Mzg4MjY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1v0rb7B8APGh
vyjtBzwR5u6l8ozP+kQbCHx/B9Jlj999Pm873hNjd9iTnpB0sNIPO2luZo49ZJ9/
7yIzuouIvJLnlSZg/8UCb/mdYnaSx5/RoRDG3XP+4XngwnMETvBmstMHsUcy5m3G
gAdtLFWJje1E2VYg0J9B8cLUT5dZk1+aw2ZEcv4g4T6a4+ew6aSUQdFn7dt7FxA6
yemhUDE4r6sUutPlZozWYbyCl8jw+WtMLrPX9FaoM2kiEFy04+5ZQ+pO6RHseK8M
BotQJ+kQg+Pj6CrgCSO5zzeKe3lhV9B5cObBmOAMYkBKNMRmfbnki0vjBS71mIpG
g69wugpCLQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFNRj7kN6UYcSbYTx1tiBzLcV
OIJpMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMxMzkzMjJlMzEzMzM4MmUzMjMxMzAyZTMwMmYzMjMzMmQz
MjM0MjAzZDNlMjAzMzM5MzYzODM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHAitIwDQYJKoZIhvcN
AQELBQADggEBALBkzR2ni1mKDU+GIeWWZMrwZoZ3HYwdwMqCXWi6N+2isBsbnSBv
bGg3yxnz7J8QIVQt5P/dpoxVjz09iulzDWecF72pxKKcYhWfxIvrMubgY/fppHLk
9XAl4kREgACFyZ9l97yMGYROmK1zXPYTHnzfhphONUDoABrKpPR7ytFIpfR6X+7+
V6RcW8zDLUB79WSGV5NLVUsZvR7NHot2SP4fyizCYU52tZX+4ZQNHey7+nyrKdd1
8K6w/Rct6i150++p+VYgjPmDNXPjoObQmm0DmO7Ix6y0ve4uQTdHami654x1SmXB
imemTp0NHV/CZgUq2uw3HCubGS8NvUIX+fk=
-----END CERTIFICATE-----
Generated at Mon Oct 20 07:02:29 2025 by rpki-client