Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130302e302f32342d3234203d3e203534303034.roa
File:                     3137332e302e3130302e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier:          LZZGMfJJg+fiO+v+yohzjzhBTpngSNk/Y3eXuVTYRLY=
Subject key identifier:   CE:97:2C:D9:45:97:CF:38:2C:5C:8B:BF:68:C4:E3:F0:D6:4A:E9:9E
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       70F1E82F8EAB7DF26E05175C4171CB5DDB518EA7
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130302e302f32342d3234203d3e203534303034.roa
Signing time:             Wed 30 Sep 2026 09:14:21 +0000
ROA not before:           Wed 30 Sep 2026 09:09:21 +0000
ROA not after:            Wed 29 Sep 2027 09:14:21 +0000
asID:                     54004
IP address blocks:        173.0.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f1:e8:2f:8e:ab:7d:f2:6e:05:17:5c:41:71:cb:5d:db:51:8e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:09:21 2026 GMT
            Not After : Sep 29 09:14:21 2027 GMT
        Subject: CN=CE972CD94597CF382C5C8BBF68C4E3F0D64AE99E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8a:fe:7d:e2:64:19:da:ce:12:37:5b:bc:f6:
                    e9:92:5d:2d:6b:ae:48:17:fa:83:37:17:48:47:63:
                    4b:b0:fb:00:80:d5:80:2a:db:c9:ae:65:66:e1:a8:
                    ac:25:70:b9:18:98:f0:f7:f7:1c:0e:e8:68:2f:ee:
                    06:6c:43:f2:5d:c8:87:5d:d8:f5:ee:73:4d:47:c3:
                    35:35:6e:52:ad:28:ff:57:f0:03:a6:4c:c4:7a:cd:
                    15:e0:13:6a:fb:34:d8:b1:92:c6:5d:5d:05:1b:f3:
                    29:30:d3:18:85:7a:95:28:b0:b2:58:3b:3d:6b:b2:
                    b6:c5:f6:2e:3c:02:ad:6d:3d:31:4d:bd:11:ea:5e:
                    c1:35:e4:79:c8:39:6e:da:8c:66:3f:df:f1:f4:da:
                    ba:3d:47:87:78:f0:ae:35:75:5c:1b:dc:53:8b:32:
                    07:4c:82:6d:3b:09:0f:93:e7:71:b0:14:61:f2:b6:
                    0a:a4:fe:f5:6e:6a:54:8d:8d:f9:1a:b9:63:52:60:
                    1e:85:e6:e9:37:71:9c:27:0f:c4:1e:6e:65:05:8a:
                    db:cb:f8:93:d5:a1:83:45:60:d7:99:60:92:b6:d8:
                    84:9e:5a:6b:3b:90:74:48:c4:0a:ca:f2:bf:6b:dd:
                    76:5f:ec:1e:0d:37:61:f8:4d:6b:3f:0b:aa:a0:67:
                    17:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:97:2C:D9:45:97:CF:38:2C:5C:8B:BF:68:C4:E3:F0:D6:4A:E9:9E
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130302e302f32342d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:bd:2e:be:77:3c:be:05:55:99:84:96:cc:2f:f8:8f:e0:ca:
         0d:f8:67:68:e6:89:b2:99:ef:2d:96:5c:ef:a6:d4:ee:52:5e:
         de:b0:e8:02:4e:33:69:94:83:09:a6:fe:c5:b5:8d:9d:79:42:
         70:67:b8:ee:ac:bb:11:72:d7:6d:e8:4c:e6:5f:31:b1:cd:c1:
         df:69:ad:8e:9f:b0:2a:0f:17:8d:cc:9a:c3:93:54:c5:f2:af:
         06:26:34:48:a1:c3:f3:5b:39:e0:b9:97:d7:06:88:6c:10:26:
         c4:5a:dc:d0:38:54:05:7e:86:1a:04:f6:06:0c:e7:68:3e:a2:
         78:aa:71:fc:fd:bb:fd:2e:f7:2e:5f:47:57:a2:62:24:55:b3:
         8a:81:4a:2d:ff:da:89:48:0b:be:1f:0c:93:89:b7:b8:ee:41:
         de:6a:3b:21:30:39:db:94:80:e1:8b:fa:f9:de:5a:ea:40:85:
         db:86:8c:92:db:cc:2e:e9:9b:7e:4f:ec:0c:3c:00:66:ee:d4:
         1d:14:8f:c2:63:c5:a4:f8:5b:19:67:33:15:1f:f0:53:3b:01:
         7c:9d:b4:5e:08:e7:bc:6e:ca:a4:6e:72:a5:f9:e0:65:7b:43:
         37:89:18:f2:06:c1:3d:3e:97:9a:32:95:c1:59:79:8f:21:82:
         fd:5e:a0:66
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUcPHoL46rffJuBRdcQXHLXdtRjqcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTA3NDk5NmMyNzA3ZTY2YWJmY2JmY2VlZmQ0NzBlNDFj
YjM2MGFhYzY3OGZlMzgyNzIwHhcNMjYwOTMwMDkwOTIxWhcNMjcwOTI5MDkxNDIx
WjAzMTEwLwYDVQQDEyhDRTk3MkNEOTQ1OTdDRjM4MkM1QzhCQkY2OEM0RTNGMEQ2
NEFFOTlFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4r+feJkGdrO
EjdbvPbpkl0ta65IF/qDNxdIR2NLsPsAgNWAKtvJrmVm4aisJXC5GJjw9/ccDuho
L+4GbEPyXciHXdj17nNNR8M1NW5SrSj/V/ADpkzEes0V4BNq+zTYsZLGXV0FG/Mp
MNMYhXqVKLCyWDs9a7K2xfYuPAKtbT0xTb0R6l7BNeR5yDlu2oxmP9/x9Nq6PUeH
ePCuNXVcG9xTizIHTIJtOwkPk+dxsBRh8rYKpP71bmpUjY35GrljUmAehebpN3Gc
Jw/EHm5lBYrby/iT1aGDRWDXmWCSttiEnlprO5B0SMQKyvK/a912X+weDTdh+E1r
PwuqoGcXzwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFM6XLNlFl884LFyLv2jE4/DW
SumeMB8GA1UdIwQYMBaAFBRdzfcdn4kSrVlXRJDXWAvADTsWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2FmYjAxZjZlMDFkZTQyYTI5ZWJmYzM5YzAyZGQ1MzY4LzAv
MTQ1RENERjcxRDlGODkxMkFENTk1NzQ0OTBENzU4MEJDMDBEM0IxNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5L2Q3NGNhNjY0LThiYTQtNGRiOS1iZTg1LWRiZGIyMGY2YWYyNy9hMDc0
OTk2YzI3MDdlNjZhYmZjYmZjZWVmZDQ3MGU0MWNiMzYwYWFjNjc4ZmUzODI3Mi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9hZmIwMWY2ZTAxZGU0MmEyOWViZmMz
OWMwMmRkNTM2OC8wLzMxMzczMzJlMzAyZTMxMzAzMDJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM1MzQzMDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACtAGQwDQYJKoZIhvcNAQELBQAD
ggEBADG9Lr53PL4FVZmElswv+I/gyg34Z2jmibKZ7y2WXO+m1O5SXt6w6AJOM2mU
gwmm/sW1jZ15QnBnuO6suxFy123oTOZfMbHNwd9prY6fsCoPF43MmsOTVMXyrwYm
NEihw/NbOeC5l9cGiGwQJsRa3NA4VAV+hhoE9gYM52g+oniqcfz9u/0u9y5fR1ei
YiRVs4qBSi3/2olIC74fDJOJt7juQd5qOyEwOduUgOGL+vneWupAhduGjJLbzC7p
m35P7Aw8AGbu1B0Uj8JjxaT4WxlnMxUf8FM7AXydtF4I57xuyqRucqX54GV7QzeJ
GPIGwT0+l5oylcFZeY8hgv1eoGY=
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:23 2026 by rpki-client