Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20343032383939.roa
File:                     3139392e3130312e3137312e302f32342d3234203d3e20343032383939.roa (raw, json)
Hash identifier:          ByfUj19DWYZgpGixZWkt3PSlCPPr2/mc1AkviHPTNUA=
Subject key identifier:   B0:AE:F1:37:58:E8:6F:87:BC:D5:E9:23:5F:29:B1:C1:D8:74:14:E2
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       64B5F0B649516074E226275A7C3EB77A60378642
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20343032383939.roa
Signing time:             Mon 02 Nov 2026 06:22:10 +0000
ROA not before:           Mon 02 Nov 2026 06:17:10 +0000
ROA not after:            Mon 01 Nov 2027 06:22:10 +0000
asID:                     402899
IP address blocks:        199.101.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Nov 2026 11:14:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:b5:f0:b6:49:51:60:74:e2:26:27:5a:7c:3e:b7:7a:60:37:86:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Nov  2 06:17:10 2026 GMT
            Not After : Nov  1 06:22:10 2027 GMT
        Subject: CN=B0AEF13758E86F87BCD5E9235F29B1C1D87414E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:b1:e6:6c:95:36:70:d5:54:23:ea:7f:b5:
                    74:fd:bd:02:4f:c3:d9:70:49:f3:f7:bd:00:83:1b:
                    7f:47:ef:4c:d2:35:03:4e:15:4e:89:9c:a8:bf:d2:
                    c4:6e:9b:d3:06:d2:75:5e:98:2a:18:85:cd:e4:01:
                    e4:af:52:c5:c8:fa:cf:64:df:30:3a:56:f9:3d:9b:
                    63:c2:99:12:61:6e:f9:35:6b:b5:c1:79:a8:d5:93:
                    d8:e6:a6:a7:f8:14:6c:a7:fb:aa:30:dc:f6:ec:b9:
                    bd:95:b4:fc:50:9d:52:38:59:55:94:2d:28:9d:f6:
                    a1:39:de:5a:9b:79:00:f9:96:67:0a:96:66:d2:2c:
                    68:ee:52:fb:7b:78:e7:d7:0c:44:9e:95:70:e3:bb:
                    85:cf:26:e6:e6:7c:d5:17:d7:dd:af:4c:6d:e2:04:
                    c8:48:00:ce:da:75:ac:de:ef:0a:45:2d:fd:fe:cd:
                    95:8d:ba:63:d8:06:be:b9:ab:6e:df:45:87:a8:25:
                    67:11:f2:6c:51:c0:3d:ec:f8:2a:01:ef:51:bb:e3:
                    45:20:11:55:30:1a:58:fa:a2:4f:a5:cd:58:77:27:
                    b4:98:c9:90:94:88:b8:ea:98:c1:ad:be:59:2c:4f:
                    ea:8f:ad:f2:93:14:75:95:76:2e:ef:75:6f:20:ef:
                    75:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:AE:F1:37:58:E8:6F:87:BC:D5:E9:23:5F:29:B1:C1:D8:74:14:E2
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e20343032383939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:e9:dd:69:23:5e:58:ae:d9:8e:0e:db:bb:50:7c:60:51:f2:
         3f:b9:c1:a6:70:54:73:92:1d:a6:f0:80:dc:00:e4:f6:84:02:
         65:ea:6f:4c:2e:eb:52:5a:95:1a:9a:a0:64:ac:64:ac:4f:8d:
         e6:8e:f6:d6:81:96:95:70:22:6e:e5:8d:05:14:bf:9d:27:03:
         77:5d:20:7f:43:fd:76:94:5f:b4:41:b5:e2:a3:0e:bc:66:4e:
         68:31:21:cf:18:53:81:30:94:dc:0b:69:27:f3:fd:b2:88:0c:
         63:f8:63:f2:24:ab:64:6e:a6:43:85:ac:0c:c0:9a:b6:fd:8e:
         11:04:a8:80:ba:10:d4:d3:5d:d8:0e:3e:d3:8c:c7:3f:d9:f2:
         f8:3f:72:8f:d7:07:0c:92:2f:f3:76:3d:28:19:8f:7a:92:63:
         14:75:d6:ca:5b:f0:d8:07:ad:a5:8b:27:e2:98:71:cc:bd:f6:
         fb:b3:45:1f:97:88:c2:67:b9:85:cb:a0:0a:73:43:99:48:0f:
         4b:21:8c:c1:08:8a:8b:16:60:98:81:28:38:a7:d1:78:eb:24:
         da:5c:12:42:bf:ad:3d:5f:09:8d:5b:91:45:06:3f:08:f3:54:
         00:ea:7a:03:52:c5:0d:ec:31:0b:34:24:1c:f0:f5:98:9f:d3:
         7d:cd:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 02:41:41 2026 by rpki-client