Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa
File:                     3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa (raw, json)
Hash identifier:          sFmDygvv/iF34JoEfdmdUVqYZDZOQgjJKpRLX0r1MDk=
Subject key identifier:   96:C5:61:56:47:E2:1D:E1:D4:89:4F:6E:25:69:F9:90:6E:C1:CC:B6
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       12382A787BE0775A540EE3689210862116C30F2A
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa
Signing time:             Sun 15 Mar 2026 22:09:49 +0000
ROA not before:           Sun 15 Mar 2026 22:04:49 +0000
ROA not after:            Sun 14 Mar 2027 22:09:49 +0000
asID:                     202294
IP address blocks:        192.209.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 01:20:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:38:2a:78:7b:e0:77:5a:54:0e:e3:68:92:10:86:21:16:c3:0f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Mar 15 22:04:49 2026 GMT
            Not After : Mar 14 22:09:49 2027 GMT
        Subject: CN=96C5615647E21DE1D4894F6E2569F9906EC1CCB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:47:51:b5:c9:69:46:c5:aa:46:d6:76:c7:41:
                    85:56:4d:ea:f0:99:84:fe:6c:dd:17:4d:f5:5d:46:
                    90:a0:bf:16:c6:df:dd:b1:71:74:e8:cc:96:f0:e7:
                    7a:a6:86:56:6d:ee:2a:9b:c3:29:b2:b6:b9:9b:6d:
                    ba:40:2e:0d:c1:43:20:32:4e:91:aa:16:32:39:45:
                    8c:1a:c3:98:5d:89:fe:27:b1:0a:58:dc:80:44:e1:
                    38:cb:47:6c:35:3e:0e:45:8c:97:ad:fc:62:3a:8d:
                    ea:28:48:cf:d4:bf:1a:89:5f:5e:85:3e:f2:af:a0:
                    2a:46:a5:e3:6e:08:20:5b:5b:d9:39:64:84:04:fd:
                    1d:f9:5d:69:11:83:2b:26:be:78:d9:df:f6:bf:04:
                    1c:19:a5:d1:2b:c5:91:86:15:33:93:ce:33:d1:a2:
                    73:1d:6d:39:a7:49:14:5e:bb:db:33:57:ca:0f:32:
                    02:d7:2d:49:be:79:10:2f:16:ce:6f:18:e8:1d:9f:
                    50:ee:b4:7e:c8:59:9a:aa:47:54:2f:b0:e9:10:7a:
                    c3:8e:32:8d:cf:61:df:9b:71:e8:0a:eb:3f:f9:6e:
                    f6:be:82:8d:fa:c3:3a:fe:d4:e5:b2:0c:52:4d:c5:
                    5e:48:a5:c3:3c:a3:79:08:ba:9f:87:ff:30:fa:bc:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:C5:61:56:47:E2:1D:E1:D4:89:4F:6E:25:69:F9:90:6E:C1:CC:B6
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:f3:dd:a3:3b:b2:35:75:10:c7:0d:97:1d:4e:c2:80:a8:e9:
         fb:43:16:42:93:c9:32:15:53:33:8f:2f:0d:98:27:b4:bd:3e:
         c0:ab:46:7b:36:9c:ea:9e:4d:ab:1e:c5:da:90:3e:3f:a7:98:
         ec:6d:32:31:c5:8b:36:82:49:1d:f4:a6:5f:18:ab:de:4b:b3:
         c8:14:34:ec:3d:40:a7:4e:b0:8c:45:4d:e7:ec:24:25:74:ef:
         e3:af:ab:59:43:2a:8a:cf:f9:56:18:2a:89:f5:1c:dc:cc:e3:
         11:24:9f:13:49:bc:31:af:ec:3f:81:96:16:64:36:9c:96:57:
         b1:5d:d2:33:53:35:8d:77:8d:87:73:d1:24:d6:da:09:5e:b2:
         ee:2e:c7:6b:40:e8:6a:1a:74:b6:d8:aa:55:45:85:3f:46:d7:
         72:7a:e9:05:5a:4e:49:a2:99:a5:4e:a9:29:3d:3d:7c:a8:34:
         f4:ef:5e:61:17:f0:4e:27:20:8e:3d:93:3d:0a:cd:62:3d:1c:
         eb:26:f6:e3:f0:28:f7:fd:1f:da:87:80:3f:af:f8:ff:5f:f0:
         44:92:80:db:23:04:63:a7:13:ee:94:ec:06:1c:81:34:ae:36:
         0a:0b:b1:4f:83:cb:f4:ee:a4:f6:43:5f:3b:03:6b:40:6c:03:
         4d:cf:60:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:07:04 2026 by rpki-client