Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa
File:                     3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          bs15nM5FBfslfykhnnycFP6eeUnGQTD2hT2DmSdAfvY=
Subject key identifier:   79:AA:30:FC:40:EE:52:2E:C7:24:AD:72:09:2B:01:7F:3C:9B:73:50
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       29C1FB04D029FCC0CFE5769DC4ECE12A60E686C0
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 13 Aug 2026 07:36:19 +0000
ROA not before:           Thu 13 Aug 2026 07:31:19 +0000
ROA not after:            Thu 12 Aug 2027 07:36:19 +0000
asID:                     7029
IP address blocks:        199.101.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Sep 2026 11:14:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:c1:fb:04:d0:29:fc:c0:cf:e5:76:9d:c4:ec:e1:2a:60:e6:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Aug 13 07:31:19 2026 GMT
            Not After : Aug 12 07:36:19 2027 GMT
        Subject: CN=79AA30FC40EE522EC724AD72092B017F3C9B7350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f9:e7:c6:fd:37:c5:dc:71:56:87:6f:86:61:
                    f8:48:79:47:4b:d0:69:0b:61:08:78:d6:63:c6:3e:
                    b3:44:f5:8a:fb:40:f2:44:cc:b1:0d:db:c3:af:b1:
                    70:93:34:47:2d:7e:21:fb:67:af:d1:24:4a:d0:3e:
                    ee:6c:6e:f3:d2:6a:67:8b:9a:05:bb:1a:37:a4:92:
                    56:4c:41:14:6c:09:3e:99:59:07:a8:00:65:1f:45:
                    3c:33:7d:22:f3:7b:58:bc:c1:64:02:f7:f9:22:8e:
                    ff:e2:d7:90:f0:cc:58:2b:1e:33:92:f6:c4:da:ec:
                    e9:43:b1:07:72:ec:71:e0:ff:34:54:88:61:ec:a1:
                    d0:bd:17:c7:a7:b1:52:9a:cc:89:82:72:ef:ab:e7:
                    b7:55:ef:77:16:f8:43:f1:d5:3f:85:23:d8:a7:92:
                    d6:50:48:4f:f0:f1:9f:a5:08:12:28:7d:92:26:ab:
                    14:54:cd:11:19:5b:bb:f4:91:07:c5:43:bc:f4:14:
                    52:e0:ad:81:f0:87:84:16:09:08:5d:d2:76:1f:36:
                    4e:e4:ee:44:fe:ef:43:75:b9:02:4b:64:a5:19:e1:
                    6a:ec:61:64:77:2e:6d:15:42:80:9f:66:b1:a5:95:
                    7b:7f:11:18:23:c6:28:14:ac:d7:54:c3:88:dc:77:
                    69:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AA:30:FC:40:EE:52:2E:C7:24:AD:72:09:2B:01:7F:3C:9B:73:50
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:5c:81:f3:6e:91:c5:c4:69:26:a1:13:94:09:30:bf:0e:a1:
         6a:d6:83:c1:a7:3e:99:1b:9b:57:de:7a:6a:fd:24:c5:72:8d:
         05:c0:5d:76:a9:be:a7:ea:7c:2c:5b:1b:c6:b7:60:7a:af:d5:
         06:c2:6b:3f:43:74:3d:f9:68:dc:f7:3b:47:56:d0:5e:14:bc:
         7b:fa:58:58:f7:f7:37:7e:1e:5a:16:b0:93:56:d4:0e:6b:22:
         84:00:a9:9e:72:b3:cf:82:25:a4:1c:d4:42:97:04:5b:5f:3c:
         18:a5:98:96:e8:97:a6:05:01:09:e3:7b:c3:e1:39:be:4f:60:
         9b:a4:9b:b0:1f:4c:a2:a0:f2:59:aa:ac:77:70:97:80:1f:85:
         f4:63:91:17:f5:90:1b:e3:bb:80:2b:ef:fd:d9:7c:64:bc:74:
         f9:70:72:b7:93:82:e8:5e:44:7b:d6:a0:c8:ec:23:08:91:49:
         ba:85:91:52:97:cf:6f:7c:56:24:bf:0f:fb:d7:a8:cd:d4:6d:
         6d:48:1b:86:1f:58:8e:ea:b3:22:93:8f:f2:92:70:77:8a:7d:
         e5:98:dd:8c:c6:0f:e3:c8:5e:2b:0a:e3:cb:41:82:81:de:dd:
         4a:12:f2:46:84:01:3c:31:54:5c:d6:35:30:07:42:dd:b7:2e:
         b2:b2:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 04:20:32 2026 by rpki-client