Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e392e302f32342d3234203d3e203138383534.roa
File:                     3139392e3234392e392e302f32342d3234203d3e203138383534.roa (raw, json)
Hash identifier:          7MI+eGrDxj0PelYiynyt0LsNkMSO+e3NV4Kcompq3S0=
Subject key identifier:   3E:2E:F9:15:22:8B:99:4E:96:28:8E:1B:21:0D:47:11:EE:E9:33:FF
Certificate issuer:       /CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
Certificate serial:       5C68CAAD1A8BBEE7A7130524E90962D9521ABA64
Authority key identifier: C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e392e302f32342d3234203d3e203138383534.roa
Signing time:             Sat 03 Oct 2026 15:25:17 +0000
ROA not before:           Sat 03 Oct 2026 15:20:17 +0000
ROA not after:            Sat 02 Oct 2027 15:25:17 +0000
asID:                     18854
IP address blocks:        199.249.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 Oct 2026 13:45:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:68:ca:ad:1a:8b:be:e7:a7:13:05:24:e9:09:62:d9:52:1a:ba:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90
        Validity
            Not Before: Oct  3 15:20:17 2026 GMT
            Not After : Oct  2 15:25:17 2027 GMT
        Subject: CN=3E2EF915228B994E96288E1B210D4711EEE933FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:26:5d:46:09:e4:49:e5:9e:10:ca:c9:aa:
                    6d:44:1e:d0:c8:8a:d4:36:7b:3f:cd:8b:ed:c3:0d:
                    06:74:df:78:c4:2d:ff:d0:05:34:0c:a4:5a:58:75:
                    ac:91:65:84:52:17:f7:02:26:19:bb:74:1f:17:98:
                    f0:42:b1:02:65:5d:7b:b3:a2:93:c8:8d:c4:6a:86:
                    66:75:7f:b1:b1:08:6a:95:56:2a:b3:8d:ea:f2:0a:
                    27:3e:5d:81:0a:99:31:c6:8b:ab:f0:d2:85:24:2a:
                    0c:0b:77:8d:ec:58:6a:d4:04:5b:a2:2a:df:fa:82:
                    e3:2e:e0:e3:d6:6a:19:89:ba:e9:89:c3:04:0f:f8:
                    16:6d:ae:f0:bc:70:e2:c9:b7:f4:64:52:6b:84:a5:
                    ed:32:f1:a3:2a:f9:ad:dc:a2:42:18:c0:d0:48:62:
                    7b:0b:1b:c7:2a:9d:e7:aa:ca:8c:29:2e:7d:c8:d5:
                    30:7d:f0:97:f3:fe:e2:3b:fc:98:b8:ed:30:a6:da:
                    65:04:73:40:b9:dc:f2:24:01:b5:37:2c:6a:4f:3c:
                    44:34:ba:83:fd:44:83:dd:87:21:08:74:b6:5c:c5:
                    3e:a1:96:3f:d2:2d:da:9a:d2:fa:d5:de:1a:73:8e:
                    f0:1e:53:e8:3e:ea:34:06:15:10:05:0b:3f:22:0a:
                    93:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2E:F9:15:22:8B:99:4E:96:28:8E:1B:21:0D:47:11:EE:E9:33:FF
            X509v3 Authority Key Identifier:
                keyid:C9:8C:89:2A:D0:E0:D8:2B:89:25:1A:1F:17:73:31:39:83:1B:78:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/C98C892AD0E0D82B89251A1F17733139831B7897.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283c7a38cd298bc53ec6704b29b61fcfbdafe8ebe90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3139392e3234392e392e302f32342d3234203d3e203138383534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:8a:23:d8:6f:5d:c9:40:15:cd:ae:d3:8c:a6:36:8b:13:92:
         5b:ce:2c:0c:48:8f:70:0f:14:8c:84:52:e1:58:d1:56:b8:3c:
         60:a3:7a:6b:a3:24:50:e8:2b:48:22:6d:55:78:ab:1e:c7:2d:
         82:54:95:15:25:f6:3a:6c:e4:f1:6a:92:28:f5:4f:2f:3f:88:
         96:02:47:ce:94:92:61:ca:aa:63:f1:13:79:98:dc:7f:a3:c7:
         47:df:33:83:30:d6:1f:f2:36:4a:e6:b7:c8:09:f6:fc:91:b2:
         d0:e3:f6:3a:58:2b:9f:e3:43:77:08:11:9e:64:89:4b:10:8e:
         c2:0d:2e:c9:39:d6:dd:c3:56:40:f6:ce:d8:e9:04:f8:c0:58:
         be:49:6d:0a:7e:4c:f5:a3:6e:53:c6:38:40:9e:e7:0b:9b:d1:
         79:e2:66:48:64:c1:5d:be:cf:09:fa:0c:18:96:c7:f9:11:5f:
         6c:8b:e9:d1:88:ac:23:72:59:c4:c9:6c:55:e2:ab:14:2e:53:
         5d:bb:19:8a:1a:01:d0:1a:09:10:0c:1c:d7:5e:dd:d3:01:c9:
         7c:e7:d9:0d:7f:6b:7b:2c:2e:4b:2b:aa:99:7c:4d:ce:b4:73:
         bf:2f:64:32:70:71:7c:67:76:1b:fd:96:01:23:b6:47:05:f5:
         1d:34:79:85
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUXGjKrRqLvuenEwUk6Qli2VIaumQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjUyODc5ZDI4M2M3YTM4Y2QyOThiYzUzZWM2NzA0YjI5
YjYxZmNmYmRhZmU4ZWJlOTAwHhcNMjYxMDAzMTUyMDE3WhcNMjcxMDAyMTUyNTE3
WjAzMTEwLwYDVQQDEygzRTJFRjkxNTIyOEI5OTRFOTYyODhFMUIyMTBENDcxMUVF
RTkzM0ZGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzQmXUYJ5Enl
nhDKyaptRB7QyIrUNns/zYvtww0GdN94xC3/0AU0DKRaWHWskWWEUhf3AiYZu3Qf
F5jwQrECZV17s6KTyI3EaoZmdX+xsQhqlVYqs43q8gonPl2BCpkxxour8NKFJCoM
C3eN7Fhq1ARboirf+oLjLuDj1moZibrpicMED/gWba7wvHDiybf0ZFJrhKXtMvGj
Kvmt3KJCGMDQSGJ7CxvHKp3nqsqMKS59yNUwffCX8/7iO/yYuO0wptplBHNAudzy
JAG1NyxqTzxENLqD/USD3YchCHS2XMU+oZY/0i3amtL61d4ac47wHlPoPuo0BhUQ
BQs/IgqTgQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFD4u+RUii5lOliiOGyENRxHu
6TP/MB8GA1UdIwQYMBaAFMmMiSrQ4NgriSUaHxdzMTmDG3iXMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5Lzg1M2NiNDg0NmVlMzQzMTNiYWMwNjk1NGI1YWI4NmJiLzAv
Qzk4Qzg5MkFEMEUwRDgyQjg5MjUxQTFGMTc3MzMxMzk4MzFCNzg5Ny5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODVlMDZlYWYtMzdhNy00NTg4LWFiZWEtZTQ5MDll
ZjFiNGUyLzVlMTRlNzM3LTc3YjktNGVmYi1hNWVhLWUzMTE5NTk0YTY2Ni82NTI4
NzlkMjgzYzdhMzhjZDI5OGJjNTNlYzY3MDRiMjliNjFmY2ZiZGFmZThlYmU5MC5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84NTNjYjQ4NDZlZTM0MzEzYmFjMDY5
NTRiNWFiODZiYi8wLzMxMzkzOTJlMzIzNDM5MmUzOTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMxMzgzODM1MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADH+QkwDQYJKoZIhvcNAQELBQAD
ggEBAHmKI9hvXclAFc2u04ymNosTklvOLAxIj3APFIyEUuFY0Va4PGCjemujJFDo
K0gibVV4qx7HLYJUlRUl9jps5PFqkij1Ty8/iJYCR86UkmHKqmPxE3mY3H+jx0ff
M4Mw1h/yNkrmt8gJ9vyRstDj9jpYK5/jQ3cIEZ5kiUsQjsINLsk51t3DVkD2ztjp
BPjAWL5JbQp+TPWjblPGOECe5wub0XniZkhkwV2+zwn6DBiWx/kRX2yL6dGIrCNy
WcTJbFXiqxQuU127GYoaAdAaCRAMHNde3dMByXzn2Q1/a3ssLksrqpl8Tc60c78v
ZDJwcXxndhv9lgEjtkcF9R00eYU=
-----END CERTIFICATE-----
Generated at Wed Oct 14 04:51:15 2026 by rpki-client