Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3130342e3139332e39322e302f32322d3232203d3e203533333536.roa
File:                     3130342e3139332e39322e302f32322d3232203d3e203533333536.roa (raw, json)
Hash identifier:          w1l/G5yD6CmblYRPG4IhP+YRPbDKwN88lPGSI1aTNvo=
Subject key identifier:   3F:B5:B0:81:B9:77:6E:D8:5B:55:7A:3B:C0:DC:3E:73:A5:9B:95:B0
Certificate issuer:       /CN=9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e
Certificate serial:       1F8166DA4EBF573E664598C7737C2241DD9222C3
Authority key identifier: EE:2E:BA:7A:2F:07:A4:74:7A:75:EB:84:07:67:ED:C1:2A:E9:E9:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3130342e3139332e39322e302f32322d3232203d3e203533333536.roa
Signing time:             Fri 04 Sep 2026 16:49:55 +0000
ROA not before:           Fri 04 Sep 2026 16:44:55 +0000
ROA not after:            Fri 03 Sep 2027 16:49:55 +0000
asID:                     53356
IP address blocks:        104.193.92.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.crl
                          rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 18:50:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:81:66:da:4e:bf:57:3e:66:45:98:c7:73:7c:22:41:dd:92:22:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e
        Validity
            Not Before: Sep  4 16:44:55 2026 GMT
            Not After : Sep  3 16:49:55 2027 GMT
        Subject: CN=3FB5B081B9776ED85B557A3BC0DC3E73A59B95B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:10:5d:87:6a:94:86:80:09:f7:32:25:81:2a:
                    c1:13:09:89:f9:c5:33:5a:75:ed:71:77:8e:fe:66:
                    ef:8e:42:e0:66:a4:96:5a:a0:d8:b1:0c:9f:54:6f:
                    3d:de:35:0f:88:44:10:21:3c:ac:f2:d2:ee:99:a7:
                    79:00:b7:46:ca:00:99:a3:0c:10:6e:43:65:e8:37:
                    e2:cc:3c:fd:f0:07:ff:5a:03:bf:dc:b7:9b:89:72:
                    74:4c:af:71:90:8e:34:0c:7e:ed:01:3f:56:ff:be:
                    97:ba:d0:14:72:26:87:20:d3:9e:1f:79:07:e3:47:
                    70:e8:e4:37:ac:a1:82:f0:8d:95:5e:de:60:ac:f5:
                    60:ae:aa:e8:5c:2f:08:0a:ba:e6:9d:ce:e8:4d:f5:
                    fa:cd:ca:c0:c3:44:56:e5:84:be:28:39:e4:0d:d6:
                    cf:9a:ec:9f:64:38:c8:d4:c6:38:97:3b:4f:45:71:
                    a6:c5:21:ad:11:75:33:32:69:be:5b:ce:9e:97:4c:
                    26:bf:b4:fa:2d:4f:95:81:f4:eb:3a:03:04:0a:0c:
                    f6:72:be:fe:4b:bd:1b:75:86:a8:61:20:d8:87:82:
                    d8:5d:ba:ee:6d:6c:45:d0:a2:d9:37:f5:39:53:c7:
                    dd:7e:12:db:0a:a7:30:69:9e:6b:37:37:94:a2:b3:
                    ad:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B5:B0:81:B9:77:6E:D8:5B:55:7A:3B:C0:DC:3E:73:A5:9B:95:B0
            X509v3 Authority Key Identifier:
                keyid:EE:2E:BA:7A:2F:07:A4:74:7A:75:EB:84:07:67:ED:C1:2A:E9:E9:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3130342e3139332e39322e302f32322d3232203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7c:a1:7b:3c:29:ff:62:2a:4a:5d:8e:f2:70:83:4c:fa:c4:10:
         64:33:04:c9:41:91:2d:91:e5:52:66:07:e8:ba:21:9e:36:1e:
         57:16:52:92:12:0d:ba:a6:f4:00:ef:87:cf:13:df:ec:a5:07:
         bb:a4:ac:2e:ff:dc:04:23:34:54:9e:8e:ea:c4:3a:e4:3f:e6:
         e1:6b:79:9b:f5:c4:63:bf:7c:c4:d9:36:16:cf:24:ef:cb:2c:
         4a:87:d7:ac:fc:af:af:c2:52:21:16:bb:6f:e2:e0:fa:af:97:
         02:88:3e:db:a8:86:c3:63:dc:5f:75:da:1e:88:b7:65:5e:24:
         6c:51:70:f5:61:b8:4f:bf:f4:bb:b4:2d:df:93:4c:4b:04:a1:
         da:23:ab:98:0d:97:b5:e1:d7:9a:98:54:63:dc:98:57:09:34:
         45:bf:de:c7:75:da:e9:90:ba:2e:c4:c0:8e:05:81:cf:29:c7:
         cd:05:fd:93:20:72:5d:aa:5a:38:df:ac:87:21:a7:aa:52:e2:
         75:db:ef:cc:b6:0b:93:8d:cf:c0:66:78:46:36:60:d9:29:36:
         aa:0f:46:c6:da:49:af:1b:2a:9c:ef:a9:79:fe:84:8e:b9:1d:
         f5:91:27:28:46:3e:5a:06:08:7e:36:a9:81:a5:52:49:ee:41:
         9a:e5:14:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:46 2026 by rpki-client