Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e20313937393539.roa
File:                     3139392e3233312e37302e302f32342d3234203d3e20313937393539.roa (raw, json)
Hash identifier:          qqMqKOmADVK1kkO0F/GsB/Zk39j/dSdqVEzi2CATxVQ=
Subject key identifier:   CF:84:C5:38:2D:8B:21:A7:99:B4:4F:AE:44:60:BC:44:33:4F:3E:CE
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       5728119E54C5262630A98D03C21E177DD2F740D8
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e20313937393539.roa
Signing time:             Wed 10 Jun 2026 08:51:31 +0000
ROA not before:           Wed 10 Jun 2026 08:46:31 +0000
ROA not after:            Wed 09 Jun 2027 08:51:31 +0000
asID:                     197959
IP address blocks:        199.231.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 12 Jun 2026 05:54:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:28:11:9e:54:c5:26:26:30:a9:8d:03:c2:1e:17:7d:d2:f7:40:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun 10 08:46:31 2026 GMT
            Not After : Jun  9 08:51:31 2027 GMT
        Subject: CN=CF84C5382D8B21A799B44FAE4460BC44334F3ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:83:a7:68:b6:96:67:dd:40:63:73:11:02:09:
                    5c:25:05:3b:33:ef:e4:8e:b1:ed:78:3b:89:19:9b:
                    50:c2:05:3b:4b:55:52:d1:55:58:7a:8c:19:20:93:
                    cd:b0:d2:b0:6e:84:07:b5:99:e2:43:82:b9:54:c9:
                    3b:49:c5:76:4a:3d:ad:6a:c1:b5:5f:c9:1a:5e:74:
                    c7:b7:1d:e4:57:ab:7b:6b:66:a1:e9:46:a5:00:69:
                    3e:bc:71:89:4a:d1:e3:29:fc:e4:77:ee:6a:6a:96:
                    a7:3c:70:76:78:a2:0d:17:4c:80:59:b2:98:f6:ed:
                    ab:a6:9a:7c:06:68:57:e2:42:0a:15:d9:dd:c3:95:
                    5e:9b:fd:d1:92:8a:bc:8b:27:33:4b:92:62:bd:0a:
                    11:6e:74:ad:2a:51:05:1b:ce:72:11:c2:54:78:11:
                    66:f1:bd:f8:bb:8e:62:88:ad:af:f2:a5:bc:28:86:
                    1a:43:2e:37:f5:4e:f1:05:b6:fc:8e:a2:f4:da:73:
                    0d:64:ca:97:3c:60:5c:b2:68:05:15:2a:b5:93:e3:
                    95:61:b9:21:ff:f8:04:cd:10:d2:e8:d0:f5:de:fb:
                    0b:52:cf:6c:c4:94:bb:7a:45:1a:87:8e:b4:aa:09:
                    c5:4d:d6:9a:13:5b:53:9c:8b:d1:63:b4:1c:8d:57:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:84:C5:38:2D:8B:21:A7:99:B4:4F:AE:44:60:BC:44:33:4F:3E:CE
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e37302e302f32342d3234203d3e20313937393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:44:0a:6b:c0:a6:bd:d9:ec:b8:7a:ba:ed:d6:32:da:38:20:
         47:62:3d:e8:5e:94:4e:d1:49:29:2f:fd:bc:fc:63:be:04:81:
         2c:c6:b7:3e:09:16:7b:4d:3d:3e:53:f9:3f:24:1e:ff:bb:ce:
         eb:94:5c:78:17:df:33:14:c4:14:65:f7:0c:35:fe:46:fa:f3:
         7c:8c:19:7b:57:a6:ff:1a:d3:2b:f0:a9:79:6c:e2:3b:37:e0:
         40:69:be:53:99:7d:f1:a4:c0:b2:b3:3b:fc:0f:7a:e6:49:3e:
         37:e3:e6:cd:4a:2e:c9:0a:7c:a3:1b:2f:2f:28:19:58:16:ce:
         5e:ce:8d:f6:2b:00:8a:73:17:85:e3:bc:18:51:bb:5f:18:4d:
         d1:55:79:96:76:89:3c:55:b9:9d:3f:bf:24:f8:9c:08:6c:ed:
         54:6b:11:0f:12:56:03:1d:1a:f0:54:ab:b1:85:dd:f0:86:1d:
         0d:33:88:b1:29:f7:1a:16:f3:fd:a1:fc:66:e5:07:e0:32:e3:
         df:1b:f7:f7:04:08:a2:b7:24:e1:16:0a:2c:74:7b:e5:88:db:
         a1:00:60:ad:fa:a8:c0:ca:57:a8:0d:2c:fd:05:70:9b:f6:60:
         63:81:f0:9e:11:ef:4e:9f:eb:80:69:db:ad:00:34:50:c6:96:
         81:80:9e:12
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUVygRnlTFJiYwqY0Dwh4XfdL3QNgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYwNjEwMDg0NjMxWhcNMjcwNjA5MDg1MTMx
WjAzMTEwLwYDVQQDEyhDRjg0QzUzODJEOEIyMUE3OTlCNDRGQUU0NDYwQkM0NDMz
NEYzRUNFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24OnaLaWZ91A
Y3MRAglcJQU7M+/kjrHteDuJGZtQwgU7S1VS0VVYeowZIJPNsNKwboQHtZniQ4K5
VMk7ScV2Sj2tasG1X8kaXnTHtx3kV6t7a2ah6UalAGk+vHGJStHjKfzkd+5qapan
PHB2eKINF0yAWbKY9u2rppp8BmhX4kIKFdndw5Vem/3Rkoq8iyczS5JivQoRbnSt
KlEFG85yEcJUeBFm8b34u45iiK2v8qW8KIYaQy439U7xBbb8jqL02nMNZMqXPGBc
smgFFSq1k+OVYbkh//gEzRDS6ND13vsLUs9sxJS7ekUah460qgnFTdaaE1tTnIvR
Y7QcjVemOQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFM+ExTgtiyGnmbRPrkRgvEQz
Tz7OMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0
MjhlYTliNzI2Ny8wLzMxMzkzOTJlMzIzMzMxMmUzNzMwMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzOTM3MzkzNTM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx+dGMA0GCSqGSIb3DQEB
CwUAA4IBAQAzRAprwKa92ey4errt1jLaOCBHYj3oXpRO0UkpL/28/GO+BIEsxrc+
CRZ7TT0+U/k/JB7/u87rlFx4F98zFMQUZfcMNf5G+vN8jBl7V6b/GtMr8Kl5bOI7
N+BAab5TmX3xpMCyszv8D3rmST434+bNSi7JCnyjGy8vKBlYFs5ezo32KwCKcxeF
47wYUbtfGE3RVXmWdok8VbmdP78k+JwIbO1UaxEPElYDHRrwVKuxhd3whh0NM4ix
KfcaFvP9ofxm5QfgMuPfG/f3BAiityThFgosdHvliNuhAGCt+qjAyleoDSz9BXCb
9mBjgfCeEe9On+uAadutADRQxpaBgJ4S
-----END CERTIFICATE-----
Generated at Thu Jun 11 16:44:46 2026 by rpki-client