Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS139642.roa
File:                     AS139642.roa (raw, json)
Hash identifier:          FGrv03ArQHiP8tD4JTnG8T70i/zhyGVO2R7qkl3pLDo=
Subject key identifier:   9A:FD:35:6B:69:76:7B:FF:CE:5C:74:7E:2D:7D:D2:BA:73:81:16:E7
Certificate issuer:       /CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
Certificate serial:       4DF50F59F196D724A5E1FCB76A45B566722F7287
Authority key identifier: D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS139642.roa
Signing time:             Fri 10 Jul 2026 11:15:48 +0000
ROA not before:           Fri 10 Jul 2026 11:10:48 +0000
ROA not after:            Fri 09 Jul 2027 11:15:48 +0000
asID:                     139642
IP address blocks:        199.103.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 13 Jul 2026 19:48:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f5:0f:59:f1:96:d7:24:a5:e1:fc:b7:6a:45:b5:66:72:2f:72:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2
        Validity
            Not Before: Jul 10 11:10:48 2026 GMT
            Not After : Jul  9 11:15:48 2027 GMT
        Subject: CN=9AFD356B69767BFFCE5C747E2D7DD2BA738116E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:a6:7a:09:58:25:db:a3:e2:51:b4:cb:4e:
                    ca:47:a7:85:62:08:11:8f:55:bc:75:62:78:a4:06:
                    0a:cd:70:c3:52:cb:e8:77:10:90:49:4f:e8:fd:02:
                    1f:6a:eb:c6:00:7a:13:fa:16:01:c6:2f:b6:12:de:
                    35:d8:b5:c2:38:4c:0b:57:3c:30:61:a5:ec:2f:3b:
                    88:be:11:e5:64:36:68:15:ab:5e:ce:f1:41:51:db:
                    b7:a9:91:aa:6a:9b:4a:39:c8:1b:12:23:96:2f:9e:
                    db:b8:49:ef:b4:1b:c3:40:70:90:5a:0c:b2:29:de:
                    19:f7:a6:5e:6c:5b:9d:99:1e:ca:ec:47:4d:f3:e6:
                    f9:c8:89:e6:f1:6e:a4:3a:8e:9b:71:02:6f:d6:0b:
                    5e:90:5d:9c:5a:2d:a5:e0:ad:24:c1:83:e7:07:35:
                    9d:d2:26:be:87:6b:fb:c0:62:e7:89:d4:d5:fc:06:
                    9e:b7:3f:09:6d:34:34:fd:0d:68:59:67:8d:3f:d5:
                    bb:92:c7:74:81:7c:3f:89:e1:26:c2:7f:4b:49:42:
                    46:48:63:b1:36:06:f7:24:94:e6:2a:80:87:10:49:
                    80:65:e2:5f:79:f1:49:35:a5:fa:c1:77:48:f6:87:
                    1c:b8:b8:ca:4b:a2:5d:48:0c:aa:e7:ad:3b:84:cf:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:FD:35:6B:69:76:7B:FF:CE:5C:74:7E:2D:7D:D2:BA:73:81:16:E7
            X509v3 Authority Key Identifier:
                keyid:D3:F9:CD:28:8A:96:34:B5:39:63:8F:E7:DF:A6:C8:54:27:C3:03:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/D3F9CD288A9634B539638FE7DFA6C85427C303F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/43b7fbf4-4def-4904-87fd-e598bf9cf2e3/ede78162c790f7ae09c1f534cc7a2cf48471a263d94ccf7fb2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856490f4453b7b/0/AS139642.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.103.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a9:47:f3:c5:c5:b7:0f:47:3e:36:90:b7:23:ca:df:51:b9:
         4d:d6:aa:19:db:98:7f:19:f4:05:5d:b3:30:9a:55:b5:f2:f3:
         19:29:c6:a8:cb:6b:34:1e:3f:b9:0f:16:2d:b1:87:b0:6a:16:
         12:3b:51:8c:43:82:4d:06:fe:14:09:5c:50:85:c9:c6:49:a2:
         48:e1:6e:26:22:9a:aa:68:99:6d:a5:03:06:31:e4:3b:cd:c6:
         a5:8d:43:d5:ec:7e:db:a4:b9:84:17:2e:fe:e1:af:2f:31:8e:
         8c:53:02:90:8a:9e:90:e2:0b:71:0f:6d:ba:3c:77:a5:19:08:
         95:b6:79:cb:e6:08:c0:f4:ae:a3:73:a5:03:10:1e:70:97:bd:
         ad:d1:58:6d:58:c0:81:30:f8:29:d6:fa:17:e5:88:e6:e2:98:
         d3:a2:4b:06:11:c7:b6:a0:7f:f1:3d:6a:46:02:bf:8b:98:e2:
         b7:99:35:84:bf:57:c6:0b:1c:5e:34:84:9b:26:d7:29:46:9d:
         e1:7b:c5:0f:31:d5:3c:3a:80:74:fb:a7:9d:9e:08:5d:5e:d0:
         9b:71:3c:84:30:a3:80:49:40:15:6d:b5:b6:55:91:3c:1c:81:
         23:b6:ae:a4:51:a2:e1:a1:6b:79:88:fb:f1:2d:92:f6:c5:fa:
         01:32:d0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:05:14 2026 by rpki-client