Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3139312e352e35362e302f32322d3234203d3e203430383530.roa
File:                     3139312e352e35362e302f32322d3234203d3e203430383530.roa (raw, json)
Hash identifier:          Ihe9AIgmP1h98QaUb4T+pYtNdbV4J9PjXckhpnxR8Pc=
Subject key identifier:   1C:C2:E8:6E:4F:53:16:43:F6:9D:8A:77:85:D9:AD:04:A2:B0:AC:F8
Certificate issuer:       /CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Certificate serial:       0DA2CA1E548DBD1A574AF2DE00B70291E0B37FBC
Authority key identifier: 54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3139312e352e35362e302f32322d3234203d3e203430383530.roa
Signing time:             Thu 25 Jun 2026 21:27:25 +0000
ROA not before:           Thu 25 Jun 2026 21:22:25 +0000
ROA not after:            Thu 24 Jun 2027 21:27:25 +0000
asID:                     40850
IP address blocks:        191.5.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/1a4b6836-4e28-439c-9ea2-50482aa15b68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:a2:ca:1e:54:8d:bd:1a:57:4a:f2:de:00:b7:02:91:e0:b3:7f:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
        Validity
            Not Before: Jun 25 21:22:25 2026 GMT
            Not After : Jun 24 21:27:25 2027 GMT
        Subject: CN=1CC2E86E4F531643F69D8A7785D9AD04A2B0ACF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:41:29:72:37:a7:6d:ba:28:ca:38:f6:af:
                    f0:c1:db:0e:e9:fe:dc:5b:79:1d:29:85:4a:51:d6:
                    36:02:3d:68:9c:fc:a1:a4:0b:45:18:72:4b:4d:89:
                    a3:07:6e:06:90:7c:ba:08:12:e0:4f:e4:74:59:13:
                    16:9f:bb:03:6a:79:42:d5:06:34:98:50:72:6c:dc:
                    9c:de:cc:fe:c1:3f:f5:c7:9e:61:fc:22:66:f9:27:
                    1b:cd:76:60:a0:d5:6e:0e:49:4f:20:3b:c0:59:e9:
                    e4:8b:ba:28:fa:8e:95:5e:63:da:d3:5f:ee:d8:2a:
                    b7:99:fd:61:9c:7c:71:01:11:cf:bf:b9:c3:75:f1:
                    d4:eb:da:ac:b1:de:19:88:3d:69:51:16:be:d9:f1:
                    64:60:af:88:e7:23:3f:49:99:e6:b7:f4:48:c4:c0:
                    00:76:4a:2b:f5:97:d4:89:b6:2d:82:e6:10:9d:1a:
                    90:40:4d:d5:6b:4a:f3:07:6e:90:ed:f3:e2:db:69:
                    c1:62:af:10:bd:b3:58:bc:99:bb:50:21:fe:fa:2d:
                    dc:46:94:86:d4:fe:41:14:65:91:59:b3:fe:75:8d:
                    d9:75:d6:02:1c:80:49:19:a7:f4:e1:d1:03:3f:53:
                    d9:4b:70:74:05:76:34:c1:ca:33:c8:47:3f:d0:74:
                    70:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:C2:E8:6E:4F:53:16:43:F6:9D:8A:77:85:D9:AD:04:A2:B0:AC:F8
            X509v3 Authority Key Identifier:
                keyid:54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/3139312e352e35362e302f32322d3234203d3e203430383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.5.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:0c:18:a7:89:47:6d:15:ce:e1:e5:da:03:1d:e4:37:0c:77:
         26:3a:c8:73:29:55:8d:03:4d:06:cc:93:68:55:bf:41:5c:04:
         65:97:36:7f:74:41:db:5b:b6:db:c8:f2:d8:47:e7:67:ac:94:
         29:24:0c:79:7d:64:51:1e:50:f4:59:f4:b5:c8:f6:00:88:90:
         17:3f:ff:ca:0b:ab:fe:44:45:58:06:f1:de:b1:9d:9d:d2:70:
         00:ef:a1:41:b8:c6:7d:b3:e1:77:2f:ed:da:13:48:1d:8b:1e:
         0f:f4:47:30:02:cf:b9:46:b6:65:ab:8a:e2:da:c4:37:3e:d8:
         8b:51:58:28:0f:d1:e6:2d:6f:ee:54:de:95:88:5d:e8:39:39:
         9a:ae:80:f8:a1:c6:87:f0:04:21:3d:5a:47:46:82:6f:5a:bc:
         53:7a:88:4c:5f:71:83:f6:c7:1d:e5:71:72:bb:e6:08:d0:53:
         e8:9b:81:de:5d:6c:9d:0a:44:7a:5a:ee:12:c9:6f:df:97:cb:
         9e:08:68:31:f9:c0:3d:f9:0c:6f:a1:a7:2d:5c:b0:d2:18:42:
         f5:9b:d8:1b:97:ed:f8:e3:9c:02:bd:98:b9:aa:48:93:34:e4:
         45:27:fb:94:96:09:5a:a0:0b:a8:09:c4:14:e8:b7:b1:91:69:
         11:4c:57:d6
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUDaLKHlSNvRpXSvLeALcCkeCzf7wwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMGI3NWViMzQwNzA5Yzg2M2I1ZWUyMTMyODQxZjg2NDRk
ZDI2ZmFkNGEyMDRhZjc3MzgwHhcNMjYwNjI1MjEyMjI1WhcNMjcwNjI0MjEyNzI1
WjAzMTEwLwYDVQQDEygxQ0MyRTg2RTRGNTMxNjQzRjY5RDhBNzc4NUQ5QUQwNEEy
QjBBQ0Y4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWpBKXI3p226
KMo49q/wwdsO6f7cW3kdKYVKUdY2Aj1onPyhpAtFGHJLTYmjB24GkHy6CBLgT+R0
WRMWn7sDanlC1QY0mFBybNyc3sz+wT/1x55h/CJm+ScbzXZgoNVuDklPIDvAWenk
i7oo+o6VXmPa01/u2Cq3mf1hnHxxARHPv7nDdfHU69qssd4ZiD1pURa+2fFkYK+I
5yM/SZnmt/RIxMAAdkor9ZfUibYtguYQnRqQQE3Va0rzB26Q7fPi22nBYq8QvbNY
vJm7UCH++i3cRpSG1P5BFGWRWbP+dY3ZddYCHIBJGaf04dEDP1PZS3B0BXY0wcoz
yEc/0HRwHwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFBzC6G5PUxZD9p2Kd4XZrQSi
sKz4MB8GA1UdIwQYMBaAFFQLU2rBoruP0SAWYrQwSFveT6bQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODllMDJlOGIwMThhYjk1ZDFjZWM3YTQxLzAv
NTQwQjUzNkFDMUEyQkI4RkQxMjAxNjYyQjQzMDQ4NUJERTRGQTZEMC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiLzFhNGI2ODM2LTRlMjgtNDM5Yy05ZWEyLTUwNDgyYWExNWI2OC8wYjc1
ZWIzNDA3MDljODYzYjVlZTIxMzI4NDFmODY0NGRkMjZmYWQ0YTIwNGFmNzczOC5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODllMDJlOGIwMThhYjk1
ZDFjZWM3YTQxLzAvMzEzOTMxMmUzNTJlMzUzNjJlMzAyZjMyMzIyZDMyMzQyMDNk
M2UyMDM0MzAzODM1MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAK/BTgwDQYJKoZIhvcNAQELBQADggEB
AK4MGKeJR20VzuHl2gMd5DcMdyY6yHMpVY0DTQbMk2hVv0FcBGWXNn90QdtbttvI
8thH52eslCkkDHl9ZFEeUPRZ9LXI9gCIkBc//8oLq/5ERVgG8d6xnZ3ScADvoUG4
xn2z4Xcv7doTSB2LHg/0RzACz7lGtmWriuLaxDc+2ItRWCgP0eYtb+5U3pWIXeg5
OZqugPihxofwBCE9WkdGgm9avFN6iExfcYP2xx3lcXK75gjQU+ibgd5dbJ0KRHpa
7hLJb9+Xy54IaDH5wD35DG+hpy1csNIYQvWb2BuX7fjjnAK9mLmqSJM05EUn+5SW
CVqgC6gJxBTot7GRaRFMV9Y=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:37:39 2026 by rpki-client