Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa
File:                     3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa (raw, json)
Hash identifier:          +QuEnPKN5bAGODDyw1gBH5606Fyj2DV2ALmhSEKW34A=
Subject key identifier:   1F:BD:37:F8:9A:61:C1:3C:EE:B2:F6:8C:6F:99:F7:6F:38:60:A1:56
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       426CD4F8DC9BFDEE62522C0535AE6BCC82844997
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa
Signing time:             Tue 21 Jul 2026 19:10:04 +0000
ROA not before:           Tue 21 Jul 2026 19:05:04 +0000
ROA not after:            Tue 20 Jul 2027 19:10:04 +0000
asID:                     202294
IP address blocks:        192.209.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:6c:d4:f8:dc:9b:fd:ee:62:52:2c:05:35:ae:6b:cc:82:84:49:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jul 21 19:05:04 2026 GMT
            Not After : Jul 20 19:10:04 2027 GMT
        Subject: CN=1FBD37F89A61C13CEEB2F68C6F99F76F3860A156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:5f:ef:ce:69:25:d1:e8:8f:8a:54:3c:d4:
                    4d:10:e2:b4:b2:6a:ee:f4:52:5b:11:59:76:04:2b:
                    c7:4b:bb:12:2f:47:9b:19:be:90:7e:f6:89:62:a5:
                    b8:c3:64:87:18:bd:61:67:18:72:6c:cb:95:4d:be:
                    cd:6a:65:54:4b:14:a8:d4:e1:5a:53:82:6d:84:14:
                    86:be:20:6a:87:42:5d:53:a7:35:0d:34:a5:85:a0:
                    34:8a:87:82:ba:7c:39:0a:c9:58:a2:9c:29:d8:93:
                    9c:6d:88:3e:b4:38:b7:ab:e2:7c:77:5f:10:d8:12:
                    8e:b6:bb:8c:2a:32:1f:af:e6:c6:9e:83:79:93:ee:
                    f5:6a:a9:3e:c5:78:15:ef:c5:0f:52:c0:45:fc:9a:
                    02:d4:4e:74:63:ac:48:eb:79:1e:47:53:83:b1:2d:
                    93:61:b7:3e:bf:ab:8b:45:9d:b7:57:dc:7a:ca:b9:
                    d5:b8:01:3c:8e:63:e6:ce:26:36:30:12:35:28:35:
                    5d:61:87:fb:a9:d3:ed:77:6c:71:e7:be:1d:a5:56:
                    a8:48:5b:15:f5:1d:58:28:10:58:f9:f5:9e:18:f9:
                    f6:5f:d5:af:01:22:aa:0c:91:f7:06:94:1a:44:b3:
                    36:65:be:7a:36:c9:68:a5:2a:50:30:24:00:6f:2c:
                    7f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BD:37:F8:9A:61:C1:3C:EE:B2:F6:8C:6F:99:F7:6F:38:60:A1:56
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3139322e3230392e36322e302f32342d3234203d3e20323032323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.209.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:9f:d7:11:9d:8d:bc:e2:3c:2a:ad:93:79:66:b8:ec:92:
         4e:17:c5:22:8a:b5:00:2c:46:f3:71:b6:f6:f3:05:24:50:f9:
         4b:73:6c:67:7b:42:c3:e9:64:fc:3a:79:e5:ee:b6:2a:87:3d:
         ee:4b:69:83:ce:b8:33:45:08:95:95:da:32:13:79:24:9f:10:
         ab:bd:08:c9:59:45:94:d9:8b:89:c4:1b:d9:a5:e6:73:0c:37:
         3e:43:e1:d5:57:5a:9d:27:cc:cf:25:2b:34:dc:d2:c4:06:00:
         1c:0b:1f:cb:4a:05:ff:86:b0:5e:75:12:b0:85:4b:31:08:f4:
         05:8b:28:ca:75:cf:f4:ef:88:43:79:fa:45:38:28:10:d1:0b:
         70:12:d0:a5:9b:36:07:53:2b:74:62:c4:56:93:01:55:cd:06:
         f9:72:fa:95:d7:6a:dd:5c:a6:25:85:58:fc:30:51:9a:11:db:
         43:ba:8f:69:40:1c:47:7b:6f:7f:55:84:45:65:8a:d9:cc:0b:
         0d:50:14:54:48:47:40:29:ad:58:6f:64:1b:e5:0e:21:f0:e6:
         71:e5:95:28:fb:ab:e2:b6:0f:d1:1f:39:9c:42:82:b7:6b:34:
         12:e8:58:fe:e4:b6:5a:c7:6a:4a:58:50:64:a5:b0:e7:be:1b:
         03:25:5d:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:37 2026 by rpki-client