Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/3139392e3132372e34342e302f32322d3234203d3e2037303239.roa
File:                     3139392e3132372e34342e302f32322d3234203d3e2037303239.roa (raw, json)
Hash identifier:          PAhztg+HhXW+RMrDrzfA2C2DELjXCPML0aksqMnOgPU=
Subject key identifier:   08:3D:98:D4:FE:93:EE:EA:6C:12:A1:11:D3:ED:29:E9:25:6C:A4:AD
Certificate issuer:       /CN=dccb4fc62f07b79ca4d2e0e4e630567d22414d67a5f7b4a667
Certificate serial:       0817D2A7D7934E436B1461859DAA61F74C833D2D
Authority key identifier: C1:3E:8D:86:AA:B6:E2:39:8C:19:6E:99:66:55:DE:9D:EE:8E:3C:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/dccb4fc62f07b79ca4d2e0e4e630567d22414d67a5f7b4a667.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/3139392e3132372e34342e302f32322d3234203d3e2037303239.roa
Signing time:             Sat 10 Oct 2026 10:51:20 +0000
ROA not before:           Sat 10 Oct 2026 10:46:20 +0000
ROA not after:            Sat 09 Oct 2027 10:51:20 +0000
asID:                     7029
IP address blocks:        199.127.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/C13E8D86AAB6E2398C196E996655DE9DEE8E3C7E.crl
                          rsync://rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/C13E8D86AAB6E2398C196E996655DE9DEE8E3C7E.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/dccb4fc62f07b79ca4d2e0e4e630567d22414d67a5f7b4a667.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/ea9d7579-0035-4da5-98c8-cea0cb517536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/ea9d7579-0035-4da5-98c8-cea0cb517536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 20 Oct 2026 10:47:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:17:d2:a7:d7:93:4e:43:6b:14:61:85:9d:aa:61:f7:4c:83:3d:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dccb4fc62f07b79ca4d2e0e4e630567d22414d67a5f7b4a667
        Validity
            Not Before: Oct 10 10:46:20 2026 GMT
            Not After : Oct  9 10:51:20 2027 GMT
        Subject: CN=083D98D4FE93EEEA6C12A111D3ED29E9256CA4AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b2:3a:3c:62:f0:5d:b0:fc:30:fb:16:08:3d:
                    82:32:22:78:10:d0:50:10:2d:ce:bf:13:03:87:2a:
                    74:8c:58:f0:8d:cc:b3:a6:87:3b:48:bb:fe:5d:2a:
                    50:58:c5:15:e8:14:11:c4:2e:14:e6:62:9d:c2:b6:
                    b6:b4:67:09:5e:76:79:e8:99:8f:67:63:01:5c:eb:
                    a6:fc:28:55:67:ea:5f:3f:d8:39:04:50:64:e5:b8:
                    b4:90:c1:d5:0c:79:1e:a6:4a:38:5c:5d:b2:84:15:
                    f9:57:ba:7d:60:66:6e:ec:24:8b:c0:1b:b8:12:8d:
                    d3:22:42:a2:ca:d9:5f:c7:2c:6f:13:9e:3c:0a:f0:
                    f2:67:54:1b:0f:23:64:5a:a0:3b:db:a1:14:ee:21:
                    be:8c:0a:70:c7:09:93:bd:4c:4c:a3:b4:4f:06:01:
                    e7:e6:e1:e6:69:7e:b8:a7:84:27:e1:b4:77:14:b9:
                    a5:2d:ad:84:0f:5b:d2:d3:07:52:b9:88:56:eb:b7:
                    cf:f5:77:c9:27:ee:d8:e1:20:f1:a9:9d:7b:51:14:
                    7e:5f:b7:31:93:84:0e:35:27:bf:6e:6d:11:3b:68:
                    8c:e6:74:59:7b:35:d8:51:36:e3:85:f1:63:ee:95:
                    f4:e6:e3:28:33:d3:5a:e6:1f:fc:61:97:4a:e9:21:
                    0d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:3D:98:D4:FE:93:EE:EA:6C:12:A1:11:D3:ED:29:E9:25:6C:A4:AD
            X509v3 Authority Key Identifier:
                keyid:C1:3E:8D:86:AA:B6:E2:39:8C:19:6E:99:66:55:DE:9D:EE:8E:3C:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/C13E8D86AAB6E2398C196E996655DE9DEE8E3C7E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ea9d7579-0035-4da5-98c8-cea0cb517536/dccb4fc62f07b79ca4d2e0e4e630567d22414d67a5f7b4a667.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5063dcb5b4b54224a768e174df811071/0/3139392e3132372e34342e302f32322d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.127.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:da:c2:e4:e0:da:8c:53:26:a5:74:85:03:ab:f2:c1:52:72:
         5b:a0:8b:c0:a9:a0:8b:7a:9d:ba:e1:05:84:91:90:ac:ce:39:
         f4:25:63:ef:36:fb:3e:05:c6:24:66:a4:ba:f6:7c:f5:11:2c:
         42:15:57:8c:49:fa:e5:16:d9:b1:6c:61:83:5d:94:66:cf:23:
         94:5c:a1:04:3f:dd:22:c1:e8:e5:e4:f5:1b:aa:50:e8:15:6f:
         13:7a:31:c2:58:bf:34:2c:09:05:d5:11:68:5e:e7:0c:f2:54:
         43:10:cb:67:3f:99:96:4e:a7:96:fc:2d:ab:c6:69:ba:f9:7a:
         87:b5:16:f6:dc:e3:82:42:0a:02:90:97:8e:15:74:3c:ce:ae:
         0f:34:31:b2:99:2b:66:59:bc:a4:e6:96:f1:3b:c4:7f:e0:6b:
         61:00:18:04:75:ec:20:87:6d:9c:f9:b0:c5:b0:76:04:7e:49:
         08:36:3d:7c:d5:18:50:e2:bd:90:80:06:48:4c:fe:7a:e2:66:
         6b:74:78:c0:38:2f:65:eb:eb:9b:bb:8d:d9:21:0c:68:e6:a4:
         1e:3c:92:11:8f:e9:c7:6a:37:38:19:e9:d4:2e:a6:19:b7:2c:
         b6:ee:a0:df:38:9c:37:fd:77:48:46:79:7e:76:b8:98:4d:59:
         96:f5:7c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 19:35:20 2026 by rpki-client