Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20313436383133.roa
File:                     3139392e3233312e36372e302f32342d3234203d3e20313436383133.roa (raw, json)
Hash identifier:          L0lXr4zDYqf6NN9O/BB3YX0+MHT/vnVN550I5qC/fFM=
Subject key identifier:   44:A0:9F:4E:4B:01:E2:F4:87:C5:BF:CD:CB:A0:9A:DB:1F:F3:14:73
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       694091B3ECBEF6E7C9B45A20B231A73C55CD9929
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20313436383133.roa
Signing time:             Fri 25 Sep 2026 07:30:21 +0000
ROA not before:           Fri 25 Sep 2026 07:25:21 +0000
ROA not after:            Fri 24 Sep 2027 07:30:21 +0000
asID:                     146813
IP address blocks:        199.231.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 21 Oct 2026 15:25:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:40:91:b3:ec:be:f6:e7:c9:b4:5a:20:b2:31:a7:3c:55:cd:99:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Sep 25 07:25:21 2026 GMT
            Not After : Sep 24 07:30:21 2027 GMT
        Subject: CN=44A09F4E4B01E2F487C5BFCDCBA09ADB1FF31473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:46:93:12:4b:e8:5c:e8:fe:06:99:d4:b5:a7:
                    f0:12:44:78:bb:9d:c1:c5:23:e1:b9:fd:50:2b:70:
                    d9:79:99:f6:49:7d:0d:0c:37:eb:21:2b:62:af:53:
                    21:b8:88:68:dc:19:ae:74:8b:ba:a4:7d:48:73:6f:
                    30:ea:e6:f7:2d:3c:7a:d9:93:8e:62:44:1f:19:5f:
                    ae:4c:cf:bb:ef:4c:e3:1c:b3:ea:03:b3:0f:bd:83:
                    76:91:15:2d:5b:aa:1c:c2:a6:b5:41:ee:75:f4:21:
                    ed:00:b8:af:91:bb:7b:a0:06:3d:06:ff:54:0b:1e:
                    bc:04:f6:37:b8:ad:2f:16:4b:36:a5:61:57:0d:1a:
                    50:16:d2:46:ce:12:f5:39:79:e4:4c:3c:c8:be:90:
                    ac:83:6d:d2:eb:82:c1:57:a0:c5:c1:3d:d8:89:2a:
                    4f:6b:92:20:41:f2:ec:60:37:32:20:2e:b2:ab:16:
                    29:23:3e:ef:ba:83:2d:fd:77:82:98:43:48:9f:1e:
                    1c:1e:01:ac:7c:0d:74:21:53:5a:aa:d2:6e:88:b5:
                    0d:60:41:d2:bc:8b:73:71:7d:0c:73:55:45:3f:2b:
                    c7:a8:4c:91:05:4b:2a:e0:ea:a7:d6:a0:0d:b1:b5:
                    ad:19:5f:61:e6:11:75:74:e9:62:42:4d:23:5c:18:
                    d1:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A0:9F:4E:4B:01:E2:F4:87:C5:BF:CD:CB:A0:9A:DB:1F:F3:14:73
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20313436383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:60:f1:8f:ac:3d:65:21:77:5e:ba:09:7b:af:c3:67:01:fe:
         a5:c6:65:06:cf:ed:79:31:ca:ec:96:90:dc:72:2e:92:3d:ad:
         9a:35:b8:63:79:d5:82:20:3b:06:f7:64:2c:4d:e4:cc:84:d2:
         b9:81:61:32:fe:1c:45:05:7c:1e:db:18:c1:2d:c5:cd:b3:2b:
         0d:4f:2f:9f:e2:9f:bf:a3:45:52:c6:56:9a:1a:53:77:2b:bc:
         86:45:1c:86:5f:32:c3:12:5f:aa:ca:a7:fd:95:0a:18:9b:18:
         f2:18:45:64:57:56:66:6a:f7:9d:14:da:6d:bb:cf:9f:a9:76:
         b5:c6:8a:5f:a3:9c:3e:05:65:ed:c6:e6:58:c8:04:8c:53:df:
         26:a3:b9:e7:e5:ca:7f:0e:43:9b:dd:51:8d:19:10:16:ed:10:
         6d:1c:88:c8:c4:cd:14:f3:fe:52:c6:81:63:8b:c6:56:e6:6a:
         c0:55:45:06:09:ef:bd:c9:2b:46:76:b0:98:6d:af:f8:c8:ac:
         81:b1:b7:fa:78:dd:54:a4:a8:91:fb:0e:5c:18:84:b1:c4:40:
         7c:b8:8c:2e:ad:98:af:5c:e5:89:1e:af:55:15:13:a6:04:a3:
         ef:45:ce:c8:33:e7:00:d7:1f:7b:22:77:f1:e3:d3:dd:a1:35:
         e9:2a:77:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:18 2026 by rpki-client