Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20383334.roa
File:                     3139392e36382e3231382e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          1PCUZ/5lWinFDzDtPKPYda8N4qBoBfbXrcZdrYxIQR8=
Subject key identifier:   04:C2:ED:D1:1C:B9:DC:39:96:EC:18:7C:6F:23:F0:06:15:8F:44:8C
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       0814B6EA4577282E6FF04036DF211FB11667E7C2
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20383334.roa
Signing time:             Wed 04 Mar 2026 13:57:57 +0000
ROA not before:           Wed 04 Mar 2026 13:52:57 +0000
ROA not after:            Wed 03 Mar 2027 13:57:57 +0000
asID:                     834
IP address blocks:        199.68.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 25 Mar 2026 08:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:14:b6:ea:45:77:28:2e:6f:f0:40:36:df:21:1f:b1:16:67:e7:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Mar  4 13:52:57 2026 GMT
            Not After : Mar  3 13:57:57 2027 GMT
        Subject: CN=04C2EDD11CB9DC3996EC187C6F23F006158F448C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1a:0b:53:d8:97:ad:56:70:76:71:3a:39:68:
                    2f:2c:41:c7:63:2a:bb:d7:f4:fc:a8:d4:ef:95:69:
                    e2:9f:f7:7d:df:44:85:bf:03:46:3d:7f:e7:cf:49:
                    bf:a3:63:c1:32:67:39:62:b9:b6:55:9d:d8:a2:33:
                    ca:7c:3a:a5:b1:1c:c6:04:5e:63:89:3f:57:d0:32:
                    63:1f:b4:23:ee:2a:f3:89:a6:ba:8a:e9:9e:13:d1:
                    99:c3:57:2f:de:83:b3:1c:da:96:73:88:c9:cf:ca:
                    d5:11:4c:64:5d:2e:7e:c2:8a:78:d0:43:1c:7d:04:
                    be:c1:fb:ff:9b:4a:1d:12:11:e5:5d:12:35:fa:e5:
                    f7:86:94:ea:00:2b:b5:ef:b3:8f:25:ad:37:90:ae:
                    cd:16:40:b0:f2:77:3e:3b:fa:ab:d1:b2:9d:4c:78:
                    d1:76:9d:02:40:d5:31:f0:c4:9d:56:56:21:25:a7:
                    32:91:d0:cb:f6:8e:c4:44:bc:38:39:e2:6e:78:fa:
                    c7:dd:a4:45:0b:c5:6a:1b:fb:5f:9b:c2:f9:9d:41:
                    f3:fe:64:07:22:7e:af:0e:b0:43:6c:0d:eb:c8:b0:
                    72:08:2d:46:07:71:26:29:b8:3c:6d:7c:c9:a7:ed:
                    3d:e3:da:aa:23:36:15:f7:11:a8:f7:b2:38:39:45:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C2:ED:D1:1C:B9:DC:39:96:EC:18:7C:6F:23:F0:06:15:8F:44:8C
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:d2:4a:47:a1:03:1d:2e:6d:ac:ea:77:54:b1:e2:d6:91:44:
         56:e8:ea:6c:4f:5b:f9:69:30:d5:18:19:ac:9b:4c:77:3a:c8:
         15:6f:92:6b:7a:f6:c4:d6:46:a3:46:68:41:27:7f:43:e2:88:
         37:7b:a6:e7:2f:42:d3:a1:f0:ea:c4:d5:dc:c0:43:74:e4:9c:
         a7:a3:13:4b:a5:bf:5f:9a:68:5a:f0:2d:b5:3f:c8:88:d5:c4:
         e7:86:7b:f9:4e:72:26:ac:a1:f1:f6:af:c0:29:3a:81:7c:a8:
         7d:22:1d:ad:e2:85:fe:3b:bc:7a:61:4a:7a:1b:3f:6d:de:49:
         d7:54:90:92:7f:d2:13:2d:bb:40:17:06:d2:dc:bb:c1:49:21:
         f9:fa:a6:79:52:4a:b9:2d:59:18:8e:cb:30:0b:e0:25:08:af:
         f3:1a:fb:21:22:16:f5:e7:52:2e:cf:a6:63:13:24:e0:94:8d:
         e5:7b:40:5c:5b:e0:41:be:79:a3:df:ae:61:c1:db:99:c0:13:
         1a:56:c9:e6:ae:cc:d4:d1:22:62:b6:5f:84:32:4b:9b:5a:51:
         4e:27:2d:22:b3:06:a8:cb:47:c4:76:77:08:85:df:7c:2d:06:
         de:96:eb:57:1d:41:84:36:7f:7b:41:f2:aa:95:38:d7:e7:8f:
         d9:79:d0:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:58:14 2026 by rpki-client