Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e2036303739.roa
File:                     3139322e37302e3137362e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          fMml117QaUs484Fe256uWbsK06fotgwzzdVrAruReZc=
Subject key identifier:   AC:72:A9:58:23:64:C9:DF:70:4F:33:45:C6:25:32:38:4A:99:BD:07
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       1689EF3E3C67671C98464BDC383DF0F75844BFEC
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e2036303739.roa
Signing time:             Mon 06 Jul 2026 18:22:29 +0000
ROA not before:           Mon 06 Jul 2026 18:17:29 +0000
ROA not after:            Mon 05 Jul 2027 18:22:29 +0000
asID:                     6079
IP address blocks:        192.70.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Jul 2026 12:41:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:89:ef:3e:3c:67:67:1c:98:46:4b:dc:38:3d:f0:f7:58:44:bf:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jul  6 18:17:29 2026 GMT
            Not After : Jul  5 18:22:29 2027 GMT
        Subject: CN=AC72A9582364C9DF704F3345C62532384A99BD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:15:7c:f8:90:2c:4c:22:0a:48:55:5c:00:f2:
                    63:95:5c:81:23:b8:8d:8a:cc:06:b3:ec:c4:e2:9d:
                    5a:27:48:79:8c:e9:99:ae:d2:28:77:f7:52:ad:28:
                    69:b9:40:e2:fc:f1:24:a2:e9:e2:57:a3:44:84:38:
                    c0:f5:83:97:57:21:27:99:3d:ee:50:e6:e9:65:cb:
                    6f:5d:95:b9:f2:7d:9b:d2:ae:5b:37:4e:82:24:ed:
                    da:8e:5d:4b:ad:bf:34:bc:2e:10:76:fe:07:fd:3f:
                    59:d4:5d:0c:9b:f1:7b:a0:ef:84:cb:72:12:09:a0:
                    1d:74:db:a7:6b:df:1b:db:44:63:2c:1c:6f:a3:c0:
                    69:69:0f:32:bc:14:a6:04:b4:10:45:9a:eb:ab:94:
                    5b:36:2b:16:8f:9d:46:7b:37:13:9a:c9:40:d9:50:
                    20:5a:15:25:0b:e5:ec:1e:77:e5:a7:5b:0f:2d:bd:
                    88:24:e9:67:d3:bd:01:62:18:b9:08:00:8f:23:73:
                    d7:1f:ef:56:7d:45:f9:73:ef:4f:3c:93:8d:2b:93:
                    4f:6f:f9:40:f1:7b:68:62:49:e2:72:e7:9d:d5:90:
                    63:a6:90:8e:b8:4e:8d:a0:f4:ce:b8:7b:01:fa:9e:
                    af:88:84:2f:ca:32:33:56:f9:53:68:7d:53:a4:89:
                    96:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:72:A9:58:23:64:C9:DF:70:4F:33:45:C6:25:32:38:4A:99:BD:07
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:a6:6a:f1:cf:bb:50:79:8d:ec:57:0e:03:a8:7e:24:c1:6d:
         af:dc:fe:06:d9:23:cc:d3:b0:58:55:a5:e0:50:84:e0:20:66:
         29:be:14:f8:55:33:52:49:17:6b:25:58:f8:6d:90:62:0f:33:
         45:d8:19:4d:5f:44:a7:58:16:4f:82:ab:bf:5b:1c:f7:cf:27:
         64:6d:e4:a0:e6:f9:f6:0f:0a:f6:29:4e:56:97:7e:70:11:62:
         94:87:ca:cd:7f:76:fa:20:24:e1:d1:90:67:e7:ec:bb:76:07:
         62:54:e0:4d:c7:d9:fb:57:d6:0d:c0:9f:ec:a9:ac:7c:06:80:
         45:5e:4f:c4:46:80:81:d4:48:ab:89:f9:35:2b:f8:fb:96:86:
         cc:0c:ec:61:f1:19:f3:3a:69:f2:47:72:90:05:8f:68:2f:89:
         c3:2e:9c:e4:77:f6:86:e4:00:9b:c1:60:94:87:bf:dc:09:40:
         46:ab:c8:37:54:63:fa:3d:76:14:96:8a:49:fa:44:02:d1:46:
         81:f8:c9:57:1f:05:35:f0:49:e7:c5:70:49:82:2c:5d:96:7a:
         24:0d:2d:ac:d9:50:76:7a:98:6c:e6:1b:29:6f:17:c2:73:f1:
         1b:3c:19:86:57:cc:bd:f3:26:9b:fc:f5:b5:12:3f:dc:66:b8:
         ad:c9:e3:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:49 2026 by rpki-client