Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399166.roa
File:                     AS399166.roa (raw, json)
Hash identifier:          uI+8DOMUwBCoGwxhcu1tqa5ePMHvnLlJrjW8mBMtBTg=
Subject key identifier:   D3:16:FF:A9:6E:A5:A5:BD:9B:BA:9F:30:F2:A9:D7:34:61:E4:FD:38
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       2D1671A5E4BF53866679E5C59E76EF8B885ACB
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399166.roa
Signing time:             Sat 10 Oct 2026 12:29:18 +0000
ROA not before:           Sat 10 Oct 2026 12:24:18 +0000
ROA not after:            Sat 09 Oct 2027 12:29:18 +0000
asID:                     399166
IP address blocks:        2607:f740:56:122::/64 maxlen: 64
                          2607:f740:56:123::/64 maxlen: 64
                          2607:f740:56:124::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 01:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:16:71:a5:e4:bf:53:86:66:79:e5:c5:9e:76:ef:8b:88:5a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 10 12:24:18 2026 GMT
            Not After : Oct  9 12:29:18 2027 GMT
        Subject: CN=D316FFA96EA5A5BD9BBA9F30F2A9D73461E4FD38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cd:07:24:01:bd:9d:ae:5c:85:de:e5:33:90:
                    88:6a:b1:29:10:f9:1f:3c:02:39:27:07:df:59:f2:
                    e4:69:7a:15:e8:21:5d:56:c1:d2:61:b1:c1:66:7e:
                    83:32:fa:a0:c8:7c:18:d8:e0:cc:90:76:70:62:d3:
                    af:2d:0a:d7:0b:06:c2:39:27:b0:4f:4d:f2:be:a9:
                    98:be:3b:67:c6:42:50:d2:01:4c:cd:a0:15:04:fa:
                    46:41:ed:ec:fe:d6:56:5f:97:35:da:93:1e:fc:ea:
                    05:3d:c8:84:3b:ab:8b:82:72:e4:87:90:d5:a3:ae:
                    0b:52:d9:0f:0f:a2:ba:48:88:d8:24:a3:61:e4:43:
                    3b:fc:df:65:91:2b:41:dc:fa:e5:45:2b:19:64:1b:
                    2e:a6:95:4b:bf:8b:dd:83:43:37:32:34:32:b4:6b:
                    ec:79:fc:2c:25:d7:c0:33:da:37:49:15:56:b6:33:
                    14:cb:93:d7:c3:5b:5d:e2:e5:ac:9a:5d:e8:07:bd:
                    f8:b0:93:dd:8c:c7:61:ab:5e:f9:06:33:05:fa:78:
                    df:85:70:a4:af:9b:05:45:08:eb:49:81:3c:e4:73:
                    0f:aa:4c:2b:1d:52:95:74:a8:0a:eb:fc:d4:ca:59:
                    8c:dc:45:98:df:24:4f:3b:b0:20:89:40:e7:94:33:
                    ed:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:16:FF:A9:6E:A5:A5:BD:9B:BA:9F:30:F2:A9:D7:34:61:E4:FD:38
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399166.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f740:56:122::-2607:f740:56:124:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         5d:78:db:12:36:60:09:69:b8:3d:d6:f2:4f:48:d6:96:62:d7:
         2a:a4:07:52:b6:af:ac:50:57:ce:5c:9a:ca:67:99:55:3b:22:
         0c:64:4e:7f:6f:a4:ed:89:a0:9c:32:a3:f5:e9:20:b1:d6:cd:
         71:44:d8:e1:85:e6:f7:af:dc:e6:81:49:21:ab:a9:9f:22:d8:
         be:a2:3b:16:3a:14:23:69:c9:25:c4:89:72:3d:94:53:59:7a:
         ab:f6:28:b6:c1:66:af:14:41:21:9a:0a:22:8a:c1:2f:5d:3f:
         38:58:24:a1:4a:60:26:2d:13:2c:74:d1:17:26:ec:1d:ac:dc:
         b1:9a:94:01:36:c5:c6:57:1c:cc:9a:2e:37:f9:ef:00:7f:e7:
         76:1e:50:d9:35:71:23:07:04:15:44:8a:c3:6d:49:63:e2:76:
         95:37:bc:c4:34:e4:c1:a8:78:d9:91:1f:0e:b2:b5:08:3f:8b:
         0a:09:5f:75:0b:b2:ea:aa:7c:3e:c7:3a:07:0f:94:3f:15:56:
         12:6e:78:06:95:db:0c:a1:e4:2a:ea:2e:46:a6:8e:54:a4:32:
         80:4e:22:4e:54:5d:69:65:ee:00:0d:3d:d3:f6:15:98:d5:e6:
         b7:c6:48:b1:28:54:71:d2:16:fa:03:b4:8a:64:b4:82:0f:aa:
         a8:6b:e9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 13:00:17 2026 by rpki-client