Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e3130342e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          kfpalEpSetWk5qmudaxbQbyEk5HCJaMcAprlF4cmuVM=
Subject key identifier:   96:80:84:9C:AC:97:8F:5B:FB:34:87:0E:18:D7:2C:99:C3:1E:34:D6
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7D474D9241E2F2D65EE23E321477E74F281F1C68
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
Signing time:             Mon 03 Aug 2026 13:36:10 +0000
ROA not before:           Mon 03 Aug 2026 13:31:10 +0000
ROA not after:            Mon 02 Aug 2027 13:36:10 +0000
asID:                     17216
IP address blocks:        198.37.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Sep 2026 13:51:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:47:4d:92:41:e2:f2:d6:5e:e2:3e:32:14:77:e7:4f:28:1f:1c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug  3 13:31:10 2026 GMT
            Not After : Aug  2 13:36:10 2027 GMT
        Subject: CN=9680849CAC978F5BFB34870E18D72C99C31E34D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:cc:f2:67:47:53:85:fa:e8:62:e0:45:55:
                    3b:e5:9f:2b:f5:b4:d0:e1:1d:b4:4a:5a:40:9e:14:
                    dc:a9:0d:7f:7d:ee:77:2b:1e:fd:38:73:9c:a2:85:
                    83:c3:d3:65:dc:ed:4a:b7:36:b4:6c:66:99:9f:a8:
                    5e:e9:c1:2a:2b:48:e1:82:29:3d:74:a8:0f:c8:f4:
                    34:54:e7:92:26:16:ad:cc:dc:d9:6b:97:8c:32:18:
                    26:68:d5:63:79:ea:bc:f6:95:b3:f0:3f:bf:e0:82:
                    6d:f6:26:73:bf:17:4e:f9:9d:eb:28:57:9d:b2:ae:
                    bf:13:63:7b:26:11:de:47:00:bf:c7:e4:da:c2:07:
                    b2:d3:da:ab:3f:84:82:f1:af:90:b7:a7:4e:cb:3e:
                    bd:46:e0:d3:4c:4d:65:a7:18:5b:c7:ad:70:34:0c:
                    8b:c5:db:79:ab:7b:4d:14:93:ee:51:84:2d:83:73:
                    83:87:a0:35:fe:a7:78:8a:cc:0c:b5:21:b6:6d:49:
                    3b:fd:fa:22:bf:95:2f:59:74:f3:bb:b2:f5:96:ad:
                    40:b2:53:1f:1c:73:0d:55:95:73:f1:f6:25:c4:c0:
                    ba:66:68:81:90:0f:be:21:5d:49:c0:2c:94:69:f5:
                    78:b9:29:da:e5:37:5c:99:ef:cd:4b:1a:2d:bd:26:
                    6e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:80:84:9C:AC:97:8F:5B:FB:34:87:0E:18:D7:2C:99:C3:1E:34:D6
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         26:01:3b:a5:f7:73:de:d8:00:b2:4f:6d:37:c7:a3:cd:46:de:
         0a:ce:e6:7c:63:fb:ce:74:b8:4e:82:1b:86:32:6b:4f:59:2b:
         39:01:63:5e:13:1f:7b:86:82:f3:5a:ce:f4:f2:2c:de:c9:31:
         74:66:6a:46:2c:fb:d5:eb:f9:e5:a7:f5:56:e0:69:01:2d:cd:
         02:40:73:bd:78:43:ce:d3:f7:5f:f3:17:6b:07:a2:9c:08:3a:
         2d:a7:d5:18:fa:92:c0:d6:f9:0e:8e:9e:c7:5b:73:d0:8d:86:
         cd:87:65:62:c4:e6:e3:f4:0a:92:01:13:e3:2f:9e:6c:72:20:
         0c:70:b8:17:7d:11:6f:77:78:8a:b5:56:88:d1:27:46:28:9f:
         17:b5:92:3d:03:5f:ab:cc:69:2d:2f:fb:ca:e4:73:48:f7:31:
         b6:2b:aa:cd:1e:48:a5:fa:a2:ec:55:00:b3:54:aa:95:b1:89:
         70:f6:06:29:9c:54:25:16:79:7d:f5:df:0d:e5:8b:f7:dd:e9:
         c8:73:19:1a:6a:ac:a7:7f:aa:b7:5f:c0:df:a4:25:51:f2:b0:
         f8:98:e0:bf:c7:a5:8a:b1:db:0f:af:56:dd:67:3b:e3:67:80:
         f9:81:3f:5e:76:64:37:14:55:99:c2:4b:fe:95:d6:ea:a7:94:
         94:e8:dc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:22:04 2026 by rpki-client