Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e31302e302f32342d3234203d3e203138383534.roa
File:                     3139392e3234392e31302e302f32342d3234203d3e203138383534.roa (raw, json)
Hash identifier:          cmUk6/5oOfEBoQ9e84moSUJe0QyS9I2S2cnnouGgH7w=
Subject key identifier:   A3:9D:E6:49:94:5B:99:F0:27:F0:D5:BD:50:93:BB:B3:77:68:F4:EE
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       2B7D655A7CA6D6386D224321727130312B653F70
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e31302e302f32342d3234203d3e203138383534.roa
Signing time:             Sat 03 Oct 2026 15:25:24 +0000
ROA not before:           Sat 03 Oct 2026 15:20:24 +0000
ROA not after:            Sat 02 Oct 2027 15:25:24 +0000
asID:                     18854
IP address blocks:        199.249.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:7d:65:5a:7c:a6:d6:38:6d:22:43:21:72:71:30:31:2b:65:3f:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Oct  3 15:20:24 2026 GMT
            Not After : Oct  2 15:25:24 2027 GMT
        Subject: CN=A39DE649945B99F027F0D5BD5093BBB37768F4EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d1:41:d8:0a:fe:d8:12:0f:31:65:ff:3f:c8:
                    b9:6e:29:94:87:4b:43:7a:5d:b4:86:fa:07:57:f0:
                    82:a5:2c:06:87:3d:52:0e:57:14:35:c8:51:81:9e:
                    e7:6e:49:16:64:84:f9:90:61:44:18:23:c4:ff:f9:
                    c0:b0:01:c1:a3:38:b9:bf:35:cd:b1:78:74:b8:99:
                    d6:d6:ef:3d:7a:56:03:34:a2:99:94:40:71:fc:a1:
                    f0:c1:ee:26:e7:46:d9:eb:b6:e9:cb:5b:0e:69:7b:
                    5c:23:45:af:f5:dd:e3:7d:e3:1b:c3:b3:af:a9:d9:
                    cb:99:19:99:01:55:06:ef:b0:85:1a:21:14:e3:d3:
                    c7:ff:8e:30:3c:57:cf:04:43:51:3e:f5:ed:9e:06:
                    c7:81:eb:1e:20:dc:bd:b1:b5:17:bb:31:f5:9e:e5:
                    85:25:00:ab:e1:d1:28:57:d7:cd:9b:72:48:a2:4b:
                    19:63:e7:29:5f:63:7e:4f:13:c0:78:f0:e8:4a:58:
                    03:02:58:3e:a8:9e:40:13:d4:cb:17:1d:51:88:42:
                    e5:5d:fe:da:38:75:3d:39:64:18:3c:e8:a1:5c:f7:
                    6f:6c:ae:aa:d2:f2:55:8d:df:df:6d:83:bd:05:e9:
                    54:e6:f2:0b:b1:39:28:85:54:5c:08:e2:17:3a:d9:
                    41:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:9D:E6:49:94:5B:99:F0:27:F0:D5:BD:50:93:BB:B3:77:68:F4:EE
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e31302e302f32342d3234203d3e203138383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:2a:ef:d6:55:8e:d7:91:0c:93:2e:e8:b2:16:53:db:ca:7e:
         09:68:ec:89:c3:fe:c2:20:39:4d:4a:7a:a7:65:b1:d5:bb:d7:
         5d:5d:c8:64:b2:1c:ed:d2:e3:e2:c3:80:8d:82:e8:2f:09:a2:
         39:a1:ab:94:94:5d:59:20:b8:9f:bb:5d:16:94:51:fb:98:66:
         3c:c7:9f:21:7e:1f:49:e6:17:9d:60:e0:c4:97:d5:73:38:32:
         3e:0f:3a:66:26:ff:f2:23:7b:a6:83:4e:95:01:9e:ca:99:24:
         b8:4d:07:b3:56:ac:d7:7f:de:93:aa:d6:96:61:c2:94:09:58:
         4f:b2:0d:86:5d:98:a9:e9:63:91:e0:87:70:c8:7c:87:f5:8e:
         49:e9:5d:8d:4c:05:63:58:96:60:a8:9b:63:7b:61:5f:a8:39:
         cc:6c:ab:30:c1:ee:bd:a4:a0:b2:ab:7a:2b:e8:fc:8f:6a:71:
         cc:c6:70:bc:48:71:f7:b3:93:f9:e0:d8:61:00:fb:0e:aa:a7:
         1d:d2:7d:63:38:8b:c7:78:43:52:94:db:06:74:d5:4d:2a:93:
         54:cc:bf:86:28:73:b6:93:0a:14:b1:80:80:5f:64:b4:30:2a:
         39:62:b8:9d:ac:d6:a2:ad:a7:db:5a:3c:52:94:aa:a2:18:71:
         d7:87:fe:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:16 2026 by rpki-client