Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20383334.roa
File:                     3139392e39312e3130312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          YTPJANN+Jb/SrkhPq3D16il3A9wOyy3BSiRZYnU6ILI=
Subject key identifier:   1A:77:09:45:10:97:02:F3:53:29:FB:03:44:DE:5C:7D:2B:F8:4A:5A
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       76F16C24275CB4C20F963279059DEDCBDE7D22AF
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20383334.roa
Signing time:             Fri 27 Mar 2026 01:55:48 +0000
ROA not before:           Fri 27 Mar 2026 01:50:48 +0000
ROA not after:            Fri 26 Mar 2027 01:55:48 +0000
asID:                     834
IP address blocks:        199.91.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 31 Mar 2026 20:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f1:6c:24:27:5c:b4:c2:0f:96:32:79:05:9d:ed:cb:de:7d:22:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Mar 27 01:50:48 2026 GMT
            Not After : Mar 26 01:55:48 2027 GMT
        Subject: CN=1A770945109702F35329FB0344DE5C7D2BF84A5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:16:54:1f:41:e1:fb:2a:e6:6d:18:56:71:76:
                    77:00:50:25:fd:5e:c1:00:e7:a4:66:7f:2f:92:47:
                    ef:a1:09:b8:9d:53:e6:15:78:a3:0f:98:3f:ce:e1:
                    0e:0b:72:83:3b:02:51:0b:71:ad:93:26:31:2d:a7:
                    43:7f:9b:c0:58:5b:e3:e1:43:ac:8c:25:c4:6e:cc:
                    c3:31:15:78:4c:ea:9b:96:46:8d:d0:b3:cf:2d:1b:
                    bb:a2:e8:09:d1:8d:45:c1:33:86:14:2c:90:b0:05:
                    1d:71:a1:f9:15:38:c9:76:04:fa:41:67:8d:92:a5:
                    40:b8:88:98:d0:16:98:32:43:4f:2e:f7:bc:f3:fd:
                    b9:b2:7e:ff:d6:4a:e4:cb:79:fb:1d:7e:5b:39:8d:
                    f0:f6:bb:04:e2:06:56:1d:1b:9c:c1:24:d2:0c:4c:
                    04:4c:72:15:74:58:f9:29:30:7c:e0:61:d1:9c:24:
                    23:f5:08:9e:ab:c6:08:cb:5e:d7:94:b4:89:bd:b7:
                    09:68:8a:a7:45:78:8d:5f:eb:89:f8:9d:50:ba:4e:
                    70:24:3e:44:9b:8d:c1:33:2f:a8:70:4a:7d:1e:da:
                    e9:12:3c:52:16:ad:ff:48:5f:af:15:d2:42:bf:92:
                    cc:8d:ed:53:01:87:46:93:8e:cc:f3:1e:15:7a:18:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:77:09:45:10:97:02:F3:53:29:FB:03:44:DE:5C:7D:2B:F8:4A:5A
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:c2:98:af:07:aa:ca:a3:bb:ef:2d:75:17:a1:c4:63:ea:5e:
         ad:8e:b1:10:64:d5:38:a0:98:c8:bf:97:95:25:6a:41:ad:21:
         9e:e9:50:31:2b:6a:d2:e4:59:53:7b:1b:07:ad:1f:ae:be:2d:
         65:63:d9:91:c3:ba:36:05:73:d8:b6:d4:f7:71:2d:87:e6:7b:
         35:47:39:6d:9e:ff:6c:5d:e7:9f:2e:16:d3:4c:e4:a4:a2:d6:
         8f:c8:ea:af:0a:be:0c:58:0f:17:da:43:24:18:fe:03:30:e4:
         5b:d0:ec:a5:8c:a4:0b:39:71:1e:5d:84:aa:48:f2:86:b1:f3:
         ef:7f:0e:38:d6:6a:34:c0:97:54:c1:79:77:56:6c:d2:cf:30:
         2a:34:12:87:e1:8c:e5:26:d6:5c:11:84:3f:5a:0f:dd:6e:18:
         de:ed:4a:66:6b:48:2b:50:37:f7:63:c6:94:21:94:7b:4c:bf:
         2b:4c:b1:f4:9c:44:94:77:c5:a3:3a:17:58:50:a6:07:08:8c:
         22:31:b1:03:07:ca:33:2b:c1:74:98:0d:55:72:e7:f8:4f:a2:
         c9:a0:7a:a0:37:14:3c:c0:b9:aa:c9:15:b1:d6:2a:0d:4d:ab:
         9b:45:dc:2a:22:1a:fe:41:90:d6:b9:92:98:4c:5b:8d:4e:73:
         87:8e:59:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 23:20:21 2026 by rpki-client