Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130332e302f32342d3234203d3e203534303034.roa
File:                     3137332e302e3130332e302f32342d3234203d3e203534303034.roa (raw, json)
Hash identifier:          8sJS0Uo72CNAklZHRgBelNnU2CBs7+kO4CUwH4eNhIw=
Subject key identifier:   33:EA:8D:7F:77:6C:F7:28:87:24:50:7D:73:6F:15:3D:55:E4:A4:80
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       7110287E7E2F7B471547E16A7A6BA01E6885AF6D
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130332e302f32342d3234203d3e203534303034.roa
Signing time:             Wed 30 Sep 2026 09:14:20 +0000
ROA not before:           Wed 30 Sep 2026 09:09:20 +0000
ROA not after:            Wed 29 Sep 2027 09:14:20 +0000
asID:                     54004
IP address blocks:        173.0.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:10:28:7e:7e:2f:7b:47:15:47:e1:6a:7a:6b:a0:1e:68:85:af:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:09:20 2026 GMT
            Not After : Sep 29 09:14:20 2027 GMT
        Subject: CN=33EA8D7F776CF7288724507D736F153D55E4A480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:53:c2:16:1d:4c:e6:82:3d:a9:e0:98:e5:d0:
                    60:d0:a8:9e:dd:c6:13:9c:8a:ab:f9:ed:42:48:95:
                    07:d5:d2:f4:d3:9c:06:61:f6:a2:51:ec:50:ea:f9:
                    b6:24:e1:30:fc:9d:ad:59:6f:a5:90:c5:1b:00:60:
                    55:b1:93:01:5f:d0:de:22:c1:d9:8e:e6:4d:c6:01:
                    f1:7d:55:42:7e:13:ea:6d:e9:78:9f:15:4d:80:d2:
                    0e:fd:a2:e1:6c:99:e5:0f:f1:82:19:f9:f7:8c:d2:
                    0f:d7:7a:dc:94:a0:f3:04:61:a2:19:ca:88:dc:3e:
                    df:05:d3:24:9e:5d:2c:7d:1d:49:6f:50:8a:8f:04:
                    de:71:38:3f:09:e6:bc:3b:04:9d:55:2b:0f:ea:56:
                    7c:f2:12:ca:79:bd:4f:aa:a8:57:1b:43:67:4a:51:
                    ab:b3:a4:42:0e:f9:7c:f7:48:2e:bc:91:52:26:85:
                    ee:1d:20:61:5d:c8:7e:d2:52:6b:7f:25:4c:2f:f7:
                    fe:ca:ad:78:ee:0a:ab:f8:35:bb:35:fa:ed:2e:44:
                    47:a6:0b:e6:ae:2a:19:e8:d4:b1:1e:27:fe:4a:ed:
                    88:eb:9f:7c:81:c5:fb:28:4d:30:9b:5d:76:eb:b7:
                    10:72:06:80:fd:67:3d:4e:54:08:1c:94:0e:14:89:
                    15:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:EA:8D:7F:77:6C:F7:28:87:24:50:7D:73:6F:15:3D:55:E4:A4:80
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130332e302f32342d3234203d3e203534303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:fa:6b:15:56:ee:c8:04:ab:cc:44:b0:bf:8e:dd:ca:eb:40:
         25:fc:5a:15:59:8e:fe:83:d3:5d:13:a0:67:89:22:4b:76:3a:
         97:77:82:4f:f4:02:de:8f:fd:bd:96:c6:fa:b5:a0:13:fe:9d:
         1d:2d:97:37:2f:e3:36:8c:cb:7f:51:81:b5:88:2c:07:96:9e:
         98:ec:c9:49:77:77:68:09:84:ce:79:8f:03:22:f4:35:9c:be:
         04:43:7b:17:41:f1:59:16:61:f6:57:8f:fd:0c:ff:cf:7d:8b:
         ac:27:37:f2:d8:89:92:74:cf:c0:bc:b3:90:3a:ea:4d:e9:4a:
         7f:e5:72:00:02:66:89:44:ef:46:69:7d:b5:af:8d:b6:2a:cc:
         5f:b6:14:29:c6:d0:4f:95:e0:bc:75:82:2a:fc:fa:53:6d:1e:
         85:5d:44:46:84:48:f0:ce:ed:ca:29:a6:d7:d0:86:e6:1c:e1:
         58:52:88:da:58:3f:cd:39:10:af:43:5d:6c:9b:77:fb:aa:2d:
         fb:ea:c7:52:f6:1e:6d:2c:a7:9d:d3:31:cf:5d:61:17:e6:ec:
         21:52:6b:a4:f8:14:6e:ec:eb:6d:f2:2b:18:2b:14:57:6e:6f:
         ec:dd:46:8b:2a:0c:52:06:ff:5c:9c:6d:f8:1c:c7:6e:cb:44:
         72:2b:d9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:23 2026 by rpki-client