Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399167.roa
File:                     AS399167.roa (raw, json)
Hash identifier:          9hwTYNmM5Cb0tJ1k50UmwKZfiBgjw7pv7kaMafEDBc0=
Subject key identifier:   CC:E0:9E:4E:D3:33:14:5F:74:40:41:2D:7F:D6:5F:FB:B2:7A:1B:FA
Certificate issuer:       /CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
Certificate serial:       1690C6CD816E448DDA672C4CFE133FD774396DD4
Authority key identifier: 00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399167.roa
Signing time:             Sat 10 Oct 2026 13:29:18 +0000
ROA not before:           Sat 10 Oct 2026 13:24:18 +0000
ROA not after:            Sat 09 Oct 2027 13:29:18 +0000
asID:                     399167
IP address blocks:        2607:f740:1:15::/64 maxlen: 64
                          2607:f740:1:16::/64 maxlen: 64
                          2607:f740:1:17::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/30d422dc-98d1-4304-9f8a-097127e15d5e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Nov 2026 01:43:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:90:c6:cd:81:6e:44:8d:da:67:2c:4c:fe:13:3f:d7:74:39:6d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d
        Validity
            Not Before: Oct 10 13:24:18 2026 GMT
            Not After : Oct  9 13:29:18 2027 GMT
        Subject: CN=CCE09E4ED333145F7440412D7FD65FFBB27A1BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1c:cb:2c:1c:cf:d9:56:91:d9:6d:9a:4e:c5:
                    1d:20:ff:f3:22:7c:d7:e8:26:ec:d5:f0:24:45:5c:
                    db:b0:1b:73:86:79:22:ea:af:e3:34:da:54:9e:3f:
                    f7:19:71:65:95:de:7b:85:db:c9:98:3f:51:80:42:
                    d9:5a:73:f6:b0:7d:a1:f7:2a:d0:d3:b5:a5:2b:08:
                    9a:b8:5d:6c:38:a9:5b:ef:4b:cb:22:3b:67:4d:a2:
                    44:c2:07:d4:8c:81:45:a9:8e:fb:ca:3f:52:cb:53:
                    85:2d:1f:2c:77:0d:e8:3d:80:df:41:58:03:41:f9:
                    77:e3:63:dd:8f:fa:ae:5c:46:49:68:5e:54:bf:89:
                    0c:6a:23:76:d1:6b:bc:63:68:2c:d4:cc:9c:2b:3b:
                    1a:a7:8c:74:85:60:e4:51:21:80:78:d8:37:2f:b0:
                    7d:bb:57:dd:97:42:86:73:70:1c:39:4a:5f:4b:06:
                    53:ef:54:94:cf:97:f2:e3:c9:82:d1:fb:55:f3:a6:
                    e6:04:bb:5b:6a:f2:e3:2e:9f:6d:eb:95:61:fb:e3:
                    7a:79:ba:0f:20:aa:1c:7d:cd:bb:eb:41:3a:b1:0f:
                    4b:f7:6c:da:3d:2f:5f:84:f3:d9:82:ca:26:5b:81:
                    e1:90:81:6a:cb:83:e0:6c:51:28:f2:9e:53:78:74:
                    37:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:E0:9E:4E:D3:33:14:5F:74:40:41:2D:7F:D6:5F:FB:B2:7A:1B:FA
            X509v3 Authority Key Identifier:
                keyid:00:99:DE:AB:07:3E:FD:74:C2:50:C0:A3:82:B2:50:12:B5:08:2A:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/0099DEAB073EFD74C250C0A382B25012B5082AEE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/30d422dc-98d1-4304-9f8a-097127e15d5e/1ff4e25c458e44e252922dcf512a568dfe098242d00cb65a3d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410183f68661084b86/0/AS399167.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2607:f740:1:15::-2607:f740:1:17:ffff:ffff:ffff:ffff

    Signature Algorithm: sha256WithRSAEncryption
         52:c0:49:3a:04:c1:71:fd:be:46:44:f1:d1:a0:3b:0d:93:de:
         c2:b0:89:44:84:03:47:82:b4:1a:f7:5d:e4:31:db:cb:87:15:
         0d:f6:b8:6c:60:b2:b2:7b:82:8a:ae:a0:77:41:94:40:d2:d7:
         d6:d2:b1:9e:f1:30:c5:c1:55:4e:3e:af:0d:72:a8:54:99:02:
         dc:a0:6f:ce:2c:d0:f8:ee:c3:66:e3:5e:22:8a:23:db:32:21:
         c8:c2:f6:0c:91:d6:b3:a7:55:70:e9:cc:fd:75:0c:57:9b:6f:
         7e:2c:61:82:c6:84:c6:40:d4:3e:b1:65:83:75:72:e9:5d:17:
         2b:63:f0:52:cf:c6:ec:ba:45:1a:14:88:bc:ef:d1:61:10:eb:
         f7:ac:80:c3:b0:42:b4:18:7b:a5:8f:45:a8:06:dc:50:e9:82:
         7c:d6:aa:44:91:53:3d:45:32:7e:75:a4:2e:0b:1c:e5:d1:21:
         fb:af:43:1a:af:c2:25:11:34:b5:90:34:97:60:6d:75:b2:26:
         d2:99:96:3f:de:88:c8:4a:81:7b:dc:8e:c3:19:71:34:38:ce:
         16:65:f2:e0:08:8e:1a:0d:d4:9c:e0:3b:0a:a9:e7:0f:5d:1e:
         97:50:92:19:16:12:b6:f5:41:32:7b:49:b1:50:00:46:de:82:
         e8:70:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 08:32:42 2026 by rpki-client