Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
File:                     3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa (raw, json)
Hash identifier:          H9yho/ebKMw5Havn7xrLTgm7rWusKKcYxD+TD11NItA=
Subject key identifier:   1D:B8:94:78:5E:B9:72:88:10:4D:FB:3E:4F:EC:8D:81:C1:51:FB:62
Certificate issuer:       /CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Certificate serial:       798ACCE10A77D7E4D7399B5B5B88358032ED1D14
Authority key identifier: FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
Signing time:             Wed 07 Oct 2026 04:57:06 +0000
ROA not before:           Wed 07 Oct 2026 04:52:06 +0000
ROA not after:            Wed 06 Oct 2027 04:57:06 +0000
asID:                     54110
IP address blocks:        199.182.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/a816e8ad-9bcc-46da-afd8-70dd97bd0232.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/a816e8ad-9bcc-46da-afd8-70dd97bd0232.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 Oct 2026 08:34:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8a:cc:e1:0a:77:d7:e4:d7:39:9b:5b:5b:88:35:80:32:ed:1d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
        Validity
            Not Before: Oct  7 04:52:06 2026 GMT
            Not After : Oct  6 04:57:06 2027 GMT
        Subject: CN=1DB894785EB97288104DFB3E4FEC8D81C151FB62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b4:9c:64:15:e2:55:05:df:3f:b8:d2:c0:01:
                    79:41:b4:32:62:2b:28:a7:5a:05:2b:33:5f:cf:0c:
                    ef:8f:ae:2a:3b:19:08:3d:2a:17:67:24:5a:8f:35:
                    fb:f2:76:8e:13:5b:c3:0e:7b:6d:01:27:5f:7b:c1:
                    9c:40:97:09:af:61:24:a0:af:2d:5e:d9:f9:d4:5b:
                    de:53:a9:2a:5e:3d:ed:14:5a:07:5b:9e:cc:48:84:
                    a3:25:5b:1e:79:b2:ba:d4:c4:a0:ca:9d:04:a8:34:
                    6e:12:e9:95:70:3b:d3:17:72:d2:af:9e:b3:14:8c:
                    42:f9:86:b6:09:6d:c2:0a:fa:fa:79:7b:5d:33:17:
                    b0:a8:ce:bf:56:19:0e:12:ae:c3:99:db:ab:cc:73:
                    cb:47:2e:f3:93:f0:2f:db:c2:9c:55:8b:29:d7:47:
                    70:3f:28:7a:53:42:0b:a2:39:d4:4d:32:3f:44:b5:
                    08:33:64:16:a2:39:ae:1f:85:3b:8a:35:ab:b7:e3:
                    64:7f:22:27:e5:49:5f:bf:12:25:de:6b:7f:84:3f:
                    fa:2a:4d:71:df:27:85:92:af:5f:cf:7e:0d:5a:4b:
                    49:3f:e7:b1:58:e4:4e:9c:4d:a0:b8:3c:36:ba:a9:
                    16:be:5e:0c:6b:c3:2a:28:d8:83:8e:b9:39:4d:d1:
                    62:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:B8:94:78:5E:B9:72:88:10:4D:FB:3E:4F:EC:8D:81:C1:51:FB:62
            X509v3 Authority Key Identifier:
                keyid:FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:54:76:c1:c7:3b:08:26:4b:8b:68:d6:03:ad:d7:aa:09:8e:
         cd:0c:87:db:16:1f:5f:8b:91:af:9b:0a:29:1b:ad:2d:f2:f4:
         7b:f2:97:29:ad:62:ae:ed:50:a1:ee:2e:85:35:ad:f2:a7:2e:
         a2:e9:37:db:c6:38:05:b8:4f:7a:25:de:54:86:59:3d:e3:36:
         9e:2e:38:b6:f4:95:a9:4c:66:21:57:7d:9e:b8:bb:9a:f3:65:
         7c:60:13:6e:1c:5f:31:b1:54:eb:98:70:9d:9d:e3:05:e3:aa:
         a8:e3:fe:63:6b:70:96:74:60:95:12:aa:cd:f1:79:1e:f5:c9:
         4e:22:24:37:87:5a:ca:99:98:d9:1a:e5:19:a3:4e:46:d2:3c:
         db:c0:a1:a2:ed:df:0c:15:d0:e3:0a:a7:a3:a1:84:2e:fc:55:
         82:4e:2b:fd:25:b8:cf:c5:70:c7:ab:26:e7:08:28:5a:2e:ee:
         3c:e1:61:d2:a0:2f:b5:80:fe:ba:6c:53:16:d3:0f:c4:c9:0b:
         d4:8b:26:a1:bd:6c:0d:aa:80:2e:65:76:f4:e7:a8:31:7e:39:
         80:ca:da:4c:99:0e:e6:a7:8f:12:56:eb:4a:76:a6:4a:c6:2f:
         46:e4:c4:c6:e7:60:83:ee:95:b6:b7:a8:50:ee:7a:c9:b0:6a:
         15:1d:76:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 22:56:04 2026 by rpki-client