Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e203633303233.roa
File:                     3139392e39312e39362e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          pP2+tPZdJeCNck0fXhXecqd0Dz90fIm0WDYrRp6snFA=
Subject key identifier:   00:07:A2:1F:B2:13:1D:A0:48:77:BB:8F:0B:4F:65:56:C3:2A:83:99
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       212B3CC31930519603E620FE6C71E4BCBBF20A26
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e203633303233.roa
Signing time:             Mon 15 Jun 2026 16:36:08 +0000
ROA not before:           Mon 15 Jun 2026 16:31:08 +0000
ROA not after:            Mon 14 Jun 2027 16:36:08 +0000
asID:                     63023
IP address blocks:        199.91.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 07:21:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:2b:3c:c3:19:30:51:96:03:e6:20:fe:6c:71:e4:bc:bb:f2:0a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jun 15 16:31:08 2026 GMT
            Not After : Jun 14 16:36:08 2027 GMT
        Subject: CN=0007A21FB2131DA04877BB8F0B4F6556C32A8399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:77:fa:d7:74:55:f8:9a:c0:f0:46:ab:7d:9b:
                    a5:d4:a7:b8:7c:1e:9f:d3:61:68:19:25:51:3b:25:
                    87:4a:bb:04:81:e2:2f:07:09:07:76:5f:90:c5:85:
                    fc:87:a6:b3:fb:6d:d0:34:18:9c:ab:b1:52:5a:1f:
                    1a:b2:1a:e3:fb:6e:1b:df:a2:62:fe:ee:12:22:c3:
                    24:32:17:a4:73:76:f9:fe:51:26:dd:70:09:ae:9c:
                    ec:cb:79:fd:d0:81:d8:f8:44:0f:ed:74:c8:38:16:
                    7d:c2:19:bd:aa:be:59:c9:dd:db:7a:19:df:44:6a:
                    8c:d4:6f:59:1a:e7:3e:77:f0:4c:d9:e6:04:97:54:
                    e0:ad:8a:ef:d7:37:ff:15:fe:4f:72:9b:93:09:b5:
                    cd:15:08:d0:6f:eb:65:87:ed:72:42:55:b5:6c:d6:
                    95:72:a1:54:93:8f:6f:d2:4a:a4:a9:c1:a4:90:e5:
                    30:64:b2:a1:fe:6b:e3:ec:78:dc:5f:7e:70:8f:c6:
                    b4:bd:80:a0:09:0d:3b:93:6b:56:0a:f1:78:81:7d:
                    45:f8:7a:5e:29:e1:e3:39:7e:7f:3c:d1:d2:f0:38:
                    a9:52:ac:e7:fe:a0:f0:e4:8d:92:ec:66:64:90:c9:
                    c1:64:84:88:ac:6a:be:a1:43:d5:c0:3a:7d:14:b0:
                    9a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:07:A2:1F:B2:13:1D:A0:48:77:BB:8F:0B:4F:65:56:C3:2A:83:99
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:41:dd:36:f7:ac:ec:9a:5a:c6:1e:8f:4e:67:0d:2e:c0:96:
         fe:ce:60:63:6d:f4:79:4c:59:a4:2a:8b:5e:3b:aa:68:9b:18:
         e7:9c:16:bb:a9:85:d9:7e:c4:87:b4:91:13:bf:bb:b3:ce:b6:
         b1:4a:55:0a:d0:70:f3:77:11:b2:34:94:b7:8f:70:47:0a:82:
         63:58:4c:66:02:b8:77:4d:e3:86:b5:35:18:dd:24:55:43:ce:
         2a:62:4a:60:6c:79:4d:d2:ef:53:c8:55:aa:ff:46:32:c7:9c:
         5e:18:d9:67:17:c3:b3:98:23:4d:82:57:c3:c4:17:f8:bd:d4:
         a8:47:61:9f:57:8d:46:72:d9:af:73:0a:cc:66:58:52:59:4d:
         71:52:cb:4d:ef:e7:c0:55:f1:88:7a:da:a9:ba:f0:73:06:38:
         e1:9b:53:30:c9:e4:15:2b:df:3b:3f:23:44:86:f1:8f:7d:55:
         be:54:bc:2e:45:91:71:0a:17:ce:d2:8d:dd:7e:f2:5f:86:0f:
         60:fe:73:e1:22:33:86:c2:22:ae:18:00:71:b1:68:a4:87:a0:
         0a:76:01:c3:6c:9d:3d:21:1a:a0:ba:45:bc:15:69:77:b5:88:
         2a:98:a5:88:92:ee:1d:13:ce:e2:c6:60:15:6e:71:cb:5f:1f:
         d5:ad:3f:f7
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUISs8wxkwUZYD5iD+bHHkvLvyCiYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjYwNjE1MTYzMTA4WhcNMjcwNjE0MTYzNjA4
WjAzMTEwLwYDVQQDEygwMDA3QTIxRkIyMTMxREEwNDg3N0JCOEYwQjRGNjU1NkMz
MkE4Mzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3f613RV+JrA
8EarfZul1Ke4fB6f02FoGSVROyWHSrsEgeIvBwkHdl+QxYX8h6az+23QNBicq7FS
Wh8ashrj+24b36Ji/u4SIsMkMhekc3b5/lEm3XAJrpzsy3n90IHY+EQP7XTIOBZ9
whm9qr5Zyd3behnfRGqM1G9ZGuc+d/BM2eYEl1TgrYrv1zf/Ff5PcpuTCbXNFQjQ
b+tlh+1yQlW1bNaVcqFUk49v0kqkqcGkkOUwZLKh/mvj7HjcX35wj8a0vYCgCQ07
k2tWCvF4gX1F+HpeKeHjOX5/PNHS8DipUqzn/qDw5I2S7GZkkMnBZISIrGq+oUPV
wDp9FLCaUwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFAAHoh+yEx2gSHe7jwtPZVbD
KoOZMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzkzNjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM2MzMzMDMyMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADHW2AwDQYJKoZIhvcNAQELBQAD
ggEBAF9B3Tb3rOyaWsYej05nDS7Alv7OYGNt9HlMWaQqi147qmibGOecFruphdl+
xIe0kRO/u7POtrFKVQrQcPN3EbI0lLePcEcKgmNYTGYCuHdN44a1NRjdJFVDzipi
SmBseU3S71PIVar/RjLHnF4Y2WcXw7OYI02CV8PEF/i91KhHYZ9XjUZy2a9zCsxm
WFJZTXFSy03v58BV8Yh62qm68HMGOOGbUzDJ5BUr3zs/I0SG8Y99Vb5UvC5FkXEK
F87Sjd1+8l+GD2D+c+EiM4bCIq4YAHGxaKSHoAp2AcNsnT0hGqC6RbwVaXe1iCqY
pYiS7h0TzuLGYBVucctfH9WtP/c=
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:22:22 2026 by rpki-client