Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3130342e3139332e39322e302f32322d3234203d3e2032393134.roa
File:                     3130342e3139332e39322e302f32322d3234203d3e2032393134.roa (raw, json)
Hash identifier:          4+RoDkMcXa8WsC8slNryjb83QTRn6NdcQ9j4wkmOzT4=
Subject key identifier:   3B:98:D8:2C:14:2F:17:E3:24:2C:D0:49:63:96:13:74:80:32:84:68
Certificate issuer:       /CN=9bc79fa8a10602fe7033680df595f97eefd68122a03b719e13
Certificate serial:       544498A2870DB28400B07B195F93D75C5802D1DF
Authority key identifier: 66:F5:FC:06:9E:05:51:EB:73:4E:C5:3B:44:A9:84:84:A4:46:63:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a10602fe7033680df595f97eefd68122a03b719e13.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3130342e3139332e39322e302f32322d3234203d3e2032393134.roa
Signing time:             Thu 02 Jul 2026 17:47:55 +0000
ROA not before:           Thu 02 Jul 2026 17:42:55 +0000
ROA not after:            Thu 01 Jul 2027 17:47:55 +0000
asID:                     2914
IP address blocks:        104.193.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/66F5FC069E0551EB734EC53B44A98484A44663D5.crl
                          rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/66F5FC069E0551EB734EC53B44A98484A44663D5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a10602fe7033680df595f97eefd68122a03b719e13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 08 Jul 2026 08:41:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:44:98:a2:87:0d:b2:84:00:b0:7b:19:5f:93:d7:5c:58:02:d1:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc79fa8a10602fe7033680df595f97eefd68122a03b719e13
        Validity
            Not Before: Jul  2 17:42:55 2026 GMT
            Not After : Jul  1 17:47:55 2027 GMT
        Subject: CN=3B98D82C142F17E3242CD0496396137480328468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3e:09:fc:91:d2:9a:6f:98:b5:60:7d:4e:68:
                    2e:f2:45:30:5a:ba:7a:44:41:f0:5b:ad:4b:36:70:
                    0c:84:e9:6d:4b:10:71:a7:5e:cc:44:59:2a:c0:ae:
                    ae:67:8d:64:33:21:3c:ae:35:94:00:34:40:b5:bc:
                    eb:2d:ea:d6:f0:8a:6b:04:1f:0d:bc:1f:cb:7f:e6:
                    d5:91:45:3b:db:7b:cc:a5:4f:2b:83:9e:c8:03:55:
                    c1:9e:47:38:f2:43:2c:52:7a:27:39:35:d8:09:a7:
                    fc:44:b8:6a:c1:07:37:9d:5c:a3:30:8a:57:9b:f5:
                    b3:f7:7a:df:c6:fe:9a:cf:3d:34:8a:34:8e:8d:5f:
                    11:59:90:4d:59:5b:f8:59:4e:41:db:fb:a4:38:fa:
                    ea:1e:83:08:03:78:c6:49:92:24:e2:ee:bb:12:f6:
                    bb:f1:c5:d9:3f:98:91:50:4b:c8:b3:9c:be:d0:c0:
                    d1:01:57:35:b5:50:8c:1c:9b:24:11:a2:ba:a2:30:
                    ec:37:71:e8:13:51:9f:96:ca:d9:52:5c:8b:1a:73:
                    64:25:a9:0b:26:19:e5:9f:d1:f4:27:d9:1b:ba:12:
                    46:7e:ff:46:42:bb:d3:60:05:0c:5b:ef:2a:33:1b:
                    68:7f:c5:e3:ab:8c:24:5a:11:a1:08:d1:22:d2:00:
                    cf:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:98:D8:2C:14:2F:17:E3:24:2C:D0:49:63:96:13:74:80:32:84:68
            X509v3 Authority Key Identifier:
                keyid:66:F5:FC:06:9E:05:51:EB:73:4E:C5:3B:44:A9:84:84:A4:46:63:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/66F5FC069E0551EB734EC53B44A98484A44663D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a10602fe7033680df595f97eefd68122a03b719e13.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3130342e3139332e39322e302f32322d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.193.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:42:c1:13:3e:d7:95:b8:d2:d1:57:14:f8:0a:d5:79:3b:e7:
         c9:fa:5a:d9:d4:4f:a4:60:ca:7f:42:3d:1c:9a:b2:82:c6:37:
         ed:d8:81:2b:34:51:61:37:7d:97:c2:07:fb:8a:ee:58:e9:b1:
         bf:da:0a:b4:9c:6e:93:5c:f9:64:8e:e3:6a:a9:9d:9f:f5:f0:
         a5:fb:75:45:7c:0b:6c:ab:46:ab:6a:56:d6:d4:82:f1:a6:eb:
         ab:59:ec:09:e1:2b:ca:8f:c9:35:ac:c7:b5:02:0a:eb:85:86:
         bf:4f:6b:db:89:6c:d1:5f:4a:a5:e3:09:96:87:99:d7:a9:06:
         80:fe:5b:f7:d3:1e:43:f0:1f:d1:fa:c3:bd:60:c2:78:31:c3:
         3b:92:1d:7e:68:6b:f6:a5:df:c9:b3:33:64:0c:89:43:a4:75:
         a8:fc:cc:08:d4:04:cc:f5:fc:1f:95:7a:1d:85:bf:36:22:64:
         3a:cb:3c:89:1a:ce:ba:37:5f:d9:14:5a:c1:a7:86:00:15:e4:
         0e:3f:c7:08:64:a8:2b:c5:3f:42:85:56:ae:5c:af:28:ba:4a:
         8f:55:c9:71:b3:d8:7d:72:36:b3:b2:f4:23:29:6f:f6:46:e5:
         10:0c:be:2f:6d:c3:a9:5d:72:05:4e:ef:88:97:9c:e5:7e:8d:
         00:ac:ec:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:02 2026 by rpki-client