Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399159.roa
File:                     AS399159.roa (raw, json)
Hash identifier:          +xQYSQ7kF2IXqjbTwY6EnXATqiwS762oXCP9rmifbSY=
Subject key identifier:   2B:F1:23:C8:AC:D7:BC:39:44:39:4A:DD:AA:CE:1D:49:DE:F1:AE:54
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       676D16D098957223BAE2F57D5532045192937C98
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399159.roa
Signing time:             Sat 10 Oct 2026 12:29:18 +0000
ROA not before:           Sat 10 Oct 2026 12:24:18 +0000
ROA not after:            Sat 09 Oct 2027 12:29:18 +0000
asID:                     399159
IP address blocks:        2607:f740:d:32::/64 maxlen: 64
                          2607:f740:d:33::/64 maxlen: 64
                          2607:f740:d:34::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 01:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:6d:16:d0:98:95:72:23:ba:e2:f5:7d:55:32:04:51:92:93:7c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 10 12:24:18 2026 GMT
            Not After : Oct  9 12:29:18 2027 GMT
        Subject: CN=2BF123C8ACD7BC3944394ADDAACE1D49DEF1AE54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:10:93:45:e2:b0:14:d3:9b:1e:8c:ce:40:c0:
                    00:02:f0:68:ad:6d:e6:37:a6:b9:a9:df:87:b9:de:
                    81:3b:30:47:d6:c9:bc:cb:3c:9d:6c:84:28:a4:da:
                    c4:cf:2d:8c:9c:73:3e:33:7f:21:21:33:97:7d:e8:
                    12:f1:37:4a:30:45:4c:e3:bd:ce:a1:94:c0:46:85:
                    d6:1b:d1:28:80:ae:70:df:c8:7a:df:d1:95:53:8b:
                    66:d2:fe:3a:f7:79:0e:a1:da:fe:f5:0f:fd:fe:ca:
                    05:aa:70:4f:52:f9:82:65:02:59:43:2b:0d:e4:e8:
                    db:a0:6e:d3:b3:a0:64:0c:dd:9d:b5:40:c2:ff:3f:
                    ca:f7:aa:7e:df:80:ab:a3:bb:a4:d7:31:8f:91:30:
                    95:1c:26:30:6d:55:01:cd:1b:b4:ac:97:6f:9e:dc:
                    51:16:bf:f6:48:af:3b:36:57:26:60:7d:45:65:9c:
                    08:05:f5:4a:63:50:22:a5:05:90:9f:33:fe:3c:be:
                    44:c1:7c:ec:f3:2d:5b:0c:a9:dc:bc:82:0e:c2:87:
                    e0:56:8d:3c:73:e1:f6:43:1e:d1:4b:41:f0:21:93:
                    ce:bc:55:c4:49:6f:86:36:dd:78:1d:51:35:c4:c1:
                    8a:b5:26:ab:41:a2:37:9f:9c:02:e3:4c:d7:94:da:
                    21:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F1:23:C8:AC:D7:BC:39:44:39:4A:DD:AA:CE:1D:49:DE:F1:AE:54
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399159.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f740:d:32::-2607:f740:d:34:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:d5:5c:85:f8:fd:de:a6:c6:68:44:85:f4:f7:3a:4c:5e:
         00:f3:4c:a7:9d:15:5d:69:b1:b4:c2:90:1c:d7:f2:48:f5:19:
         79:12:83:fc:b8:f8:1c:56:24:9c:21:4e:ec:a2:c9:ce:69:e9:
         71:01:a9:8b:b0:07:fb:9d:c1:b3:42:bb:14:bf:5b:6f:0c:de:
         85:83:8f:c0:6d:f0:83:30:3e:48:9c:53:6d:c2:ad:cf:3a:ac:
         aa:24:ce:94:d0:44:18:5c:7c:77:79:f4:01:46:22:54:3f:16:
         01:98:69:95:3b:c5:b1:ae:17:ad:b4:ff:56:f1:0e:02:1e:7a:
         d3:1c:b0:95:d1:8f:07:79:93:6b:05:54:a9:e7:11:b2:e8:92:
         b6:27:66:7d:f9:56:62:5a:28:79:fb:cf:3c:14:c6:f8:31:13:
         c1:c2:11:29:64:f5:6f:94:d6:38:58:b8:ac:c0:b6:cf:35:04:
         45:c1:54:c9:bb:83:c2:d3:40:76:72:18:2c:be:5b:47:f7:3e:
         64:ca:fc:1b:56:3b:02:74:55:92:66:f7:00:0c:cc:95:15:d0:
         9c:94:50:4c:60:da:a9:d0:95:63:00:b4:96:fa:4c:ad:a1:23:
         f0:b1:3b:7f:43:04:d5:b5:fd:c0:7c:37:a9:95:54:e2:e6:3f:
         2b:d1:08:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:32:44 2026 by rpki-client