Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa
File:                     3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          DeKFb6CI653jT8MjzSTnx8Jo5akmFUBaDtNN2mKENUs=
Subject key identifier:   D1:22:22:FF:A3:B9:23:93:05:EE:09:9B:4A:86:F2:72:BB:47:2E:3F
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       1D8F3DF2F1C492B17FB2254E654854BE901AC894
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa
Signing time:             Tue 07 Oct 2025 03:53:46 +0000
ROA not before:           Tue 07 Oct 2025 03:48:46 +0000
ROA not after:            Tue 06 Oct 2026 03:53:46 +0000
asID:                     138995
IP address blocks:        192.209.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:8f:3d:f2:f1:c4:92:b1:7f:b2:25:4e:65:48:54:be:90:1a:c8:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Oct  7 03:48:46 2025 GMT
            Not After : Oct  6 03:53:46 2026 GMT
        Subject: CN=D12222FFA3B9239305EE099B4A86F272BB472E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:61:81:d1:e9:29:ee:67:ea:81:80:74:a7:c3:
                    35:4d:9d:01:e7:e7:8d:8a:a9:5b:45:89:c1:c2:37:
                    fc:a6:64:48:3c:6d:b8:a0:08:7d:0c:26:cd:83:76:
                    c9:c5:bc:cb:a5:32:95:73:a6:d0:50:4b:3a:b4:4d:
                    7e:23:ee:71:fb:5a:55:1e:42:9e:70:6d:b4:54:10:
                    6b:16:91:4b:e6:86:f4:70:f8:70:fa:92:1d:20:ce:
                    1e:4e:64:6f:7d:a3:31:9c:10:f8:fd:df:ee:3d:85:
                    8e:ca:fc:59:80:d2:b9:06:f0:50:8a:65:1a:9c:a5:
                    71:98:32:0f:0c:8d:f7:08:ff:f0:56:91:f1:c0:02:
                    2a:54:f9:1d:73:16:09:7f:40:64:df:07:fb:ca:9c:
                    58:4f:98:f6:85:49:ed:9d:bd:b5:09:8e:76:e9:c7:
                    31:67:ea:89:5e:3b:25:ab:94:21:a7:21:54:e8:63:
                    31:78:b2:92:50:b1:56:00:42:5d:d2:5f:25:81:36:
                    e0:4b:93:0e:18:07:6c:16:94:99:2b:59:53:5f:66:
                    5e:6f:f2:49:ba:5e:4b:d9:35:4e:90:cc:c3:75:7f:
                    a8:b4:5b:ae:31:7e:e6:5c:ae:c6:41:74:1a:ee:ee:
                    7c:56:4d:5b:05:84:be:eb:1e:39:35:a0:44:98:96:
                    27:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:22:22:FF:A3:B9:23:93:05:EE:09:9B:4A:86:F2:72:BB:47:2E:3F
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:f8:a9:41:55:4d:5d:c7:27:0e:5a:b7:0e:c7:c5:13:63:23:
         bf:69:93:8a:8b:8e:32:52:48:e4:19:f0:45:98:c7:ed:73:33:
         33:3e:24:52:3c:03:82:0b:79:99:04:14:ca:d4:e3:14:55:c6:
         33:dc:91:10:80:0c:54:b9:39:8f:9e:dd:45:d5:33:23:88:33:
         ba:62:64:66:f2:05:da:35:48:33:c7:eb:0f:2a:7d:ed:52:93:
         5f:67:6e:14:69:a7:18:78:c0:e1:53:b3:29:96:47:2b:b0:19:
         53:27:ba:41:e3:ea:80:c5:ba:56:2a:a2:e3:75:86:d7:bf:42:
         6b:60:e6:db:d5:13:cb:74:a2:87:7a:1f:e7:b7:e2:55:84:00:
         e1:21:04:94:3f:e5:26:3d:11:c5:80:fc:ff:d7:67:ae:ae:d5:
         88:f9:26:e3:a4:23:18:c4:d4:4a:d7:d8:3b:e7:e7:d7:4d:c0:
         c7:92:83:a9:6d:e7:ee:7a:4c:44:83:e2:52:a9:33:09:1b:6a:
         bc:84:ad:ed:d5:1c:21:e0:ab:32:3c:0a:a4:d6:0c:64:3e:19:
         16:bd:ab:b8:0f:83:40:90:15:58:c6:a5:d3:02:ea:db:dc:5e:
         fb:c1:ef:a5:7b:bd:41:63:a9:18:1b:45:7b:92:ce:5d:71:15:
         72:30:a9:ac
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUHY898vHEkrF/siVOZUhUvpAayJQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjUxMDA3MDM0ODQ2WhcNMjYxMDA2MDM1MzQ2
WjAzMTEwLwYDVQQDEyhEMTIyMjJGRkEzQjkyMzkzMDVFRTA5OUI0QTg2RjI3MkJC
NDcyRTNGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWGB0ekp7mfq
gYB0p8M1TZ0B5+eNiqlbRYnBwjf8pmRIPG24oAh9DCbNg3bJxbzLpTKVc6bQUEs6
tE1+I+5x+1pVHkKecG20VBBrFpFL5ob0cPhw+pIdIM4eTmRvfaMxnBD4/d/uPYWO
yvxZgNK5BvBQimUanKVxmDIPDI33CP/wVpHxwAIqVPkdcxYJf0Bk3wf7ypxYT5j2
hUntnb21CY526ccxZ+qJXjslq5QhpyFU6GMxeLKSULFWAEJd0l8lgTbgS5MOGAds
FpSZK1lTX2Zeb/JJul5L2TVOkMzDdX+otFuuMX7mXK7GQXQa7u58Vk1bBYS+6x45
NaBEmJYnSwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFNEiIv+juSOTBe4Jm0qG8nK7
Ry4/MB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMxMzkzMjJlMzIzMDM5MmUzNjMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzMzM4MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNE+MA0GCSqGSIb3DQEB
CwUAA4IBAQCk+KlBVU1dxycOWrcOx8UTYyO/aZOKi44yUkjkGfBFmMftczMzPiRS
PAOCC3mZBBTK1OMUVcYz3JEQgAxUuTmPnt1F1TMjiDO6YmRm8gXaNUgzx+sPKn3t
UpNfZ24UaacYeMDhU7MplkcrsBlTJ7pB4+qAxbpWKqLjdYbXv0JrYObb1RPLdKKH
eh/nt+JVhADhIQSUP+UmPRHFgPz/12eurtWI+SbjpCMYxNRK19g75+fXTcDHkoOp
befuekxEg+JSqTMJG2q8hK3t1Rwh4KsyPAqk1gxkPhkWvau4D4NAkBVYxqXTAurb
3F77we+le71BY6kYG0V7ks5dcRVyMKms
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:30:06 2025 by rpki-client