Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3232342e302f31392d3234203d3e20383334.roa
File:                     3139382e31352e3232342e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier:          wZeEmKiujrML9ECZxcZJ87k+CYOSc0zVwDsLh3dle/w=
Subject key identifier:   D3:92:A2:78:F8:C2:0C:B8:7B:03:44:D0:BF:1D:4A:76:CB:06:DA:60
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       1F60A4DC20C02E2314CD19A4EE52D964D47CED9E
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3232342e302f31392d3234203d3e20383334.roa
Signing time:             Fri 20 Mar 2026 06:35:54 +0000
ROA not before:           Fri 20 Mar 2026 06:30:54 +0000
ROA not after:            Fri 19 Mar 2027 06:35:54 +0000
asID:                     834
IP address blocks:        198.15.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 27 Mar 2026 10:51:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:60:a4:dc:20:c0:2e:23:14:cd:19:a4:ee:52:d9:64:d4:7c:ed:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Mar 20 06:30:54 2026 GMT
            Not After : Mar 19 06:35:54 2027 GMT
        Subject: CN=D392A278F8C20CB87B0344D0BF1D4A76CB06DA60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:9e:c3:68:af:a8:d2:88:fc:a4:e0:3c:3d:
                    20:93:ac:14:be:48:ee:c4:8e:18:05:35:f3:a5:84:
                    b6:92:c2:02:f9:1b:f3:95:4e:89:a6:2e:2b:55:54:
                    ac:b7:b4:f2:ac:dd:d5:e4:bf:35:cf:7f:64:f6:42:
                    9b:8a:3b:d5:da:d6:0a:7f:5a:b7:48:20:bf:39:ee:
                    29:cf:93:50:33:e5:89:52:c2:6c:3d:f7:e0:68:a3:
                    fd:93:9d:5f:97:f6:c0:b9:ee:f8:45:13:70:03:ec:
                    d0:c0:4e:24:be:b1:8a:09:d1:aa:8e:41:4a:70:10:
                    01:5b:06:58:66:32:cd:fc:e5:44:d6:47:92:c0:0d:
                    fe:e5:af:72:f9:f0:5f:ef:bf:73:a9:ee:45:7f:cf:
                    b0:d9:51:84:5e:ae:51:d2:e0:e3:6e:4b:bb:a9:d0:
                    f3:e1:3a:bb:18:56:03:c5:fa:22:6d:8b:4d:a3:da:
                    3a:fa:81:46:73:71:ef:e5:53:22:72:83:82:56:79:
                    eb:27:09:fe:45:54:b8:21:be:9c:ce:e2:cd:b8:32:
                    3d:ae:d2:97:31:6a:a4:e4:5d:53:5b:c9:d8:ed:47:
                    88:18:c0:27:c6:9c:d9:1f:99:25:47:c9:b6:63:69:
                    50:df:7c:18:89:26:53:f8:37:92:a9:e6:9b:b4:79:
                    92:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:92:A2:78:F8:C2:0C:B8:7B:03:44:D0:BF:1D:4A:76:CB:06:DA:60
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3232342e302f31392d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6a:f9:a7:a1:b7:07:cc:48:f7:e9:06:37:08:bb:62:ae:36:c5:
         66:fd:07:a7:e6:c4:98:d6:f6:6e:a5:ad:5c:40:13:7c:60:f9:
         4d:04:08:71:f8:43:8c:7d:83:97:c3:d5:05:e4:70:1e:27:7c:
         cb:8c:dc:f0:11:c5:43:d9:64:ac:68:ee:ca:80:83:e5:a4:61:
         7c:ab:60:cd:a8:d6:ea:88:01:f8:ce:dd:02:f7:79:10:a3:a1:
         59:bd:af:13:51:18:4d:35:5a:23:81:05:7e:98:45:c4:96:ff:
         39:86:c2:5a:3b:32:7b:fe:f2:e7:d4:e0:85:68:2c:3b:77:b0:
         eb:df:56:f4:62:d2:1e:24:ed:eb:be:89:a4:9e:79:3b:57:30:
         65:a9:51:88:20:22:b0:9c:21:25:15:1c:0e:95:09:17:d5:9f:
         cc:5d:7a:af:de:56:3c:de:55:4c:58:26:b8:e5:14:62:e1:fc:
         9a:f4:3f:71:fa:9f:ae:43:e1:36:ff:ba:cc:bc:d4:f2:2d:2d:
         bf:24:c1:60:a8:e1:f9:a1:16:d5:ad:cd:b2:31:ce:22:6f:52:
         52:89:83:7b:54:98:80:a0:50:e5:8f:98:cb:9b:ad:40:c5:e2:
         fe:6b:fc:b7:ae:f5:84:35:2d:c5:0b:42:c0:de:d8:c5:ef:a1:
         d0:99:55:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:24:18 2026 by rpki-client