Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130342e302f32342d3234203d3e2037343539.roa
File:                     3137332e302e3130342e302f32342d3234203d3e2037343539.roa (raw, json)
Hash identifier:          NnW0YyTkM0VU9UMBkB2f9TGocPdY3u5676Ro9yNa6NE=
Subject key identifier:   FA:40:81:98:B7:3A:05:38:78:8B:ED:B4:1E:BA:6F:DE:61:F9:26:E8
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       31B489AB737B0DF75AA1E7D4730137CE2C8D7E61
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130342e302f32342d3234203d3e2037343539.roa
Signing time:             Wed 30 Sep 2026 09:14:20 +0000
ROA not before:           Wed 30 Sep 2026 09:09:20 +0000
ROA not after:            Wed 29 Sep 2027 09:14:20 +0000
asID:                     7459
IP address blocks:        173.0.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b4:89:ab:73:7b:0d:f7:5a:a1:e7:d4:73:01:37:ce:2c:8d:7e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:09:20 2026 GMT
            Not After : Sep 29 09:14:20 2027 GMT
        Subject: CN=FA408198B73A0538788BEDB41EBA6FDE61F926E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:48:61:d7:73:b1:fe:9d:8a:13:44:c7:3b:
                    34:aa:d1:6a:f4:c2:64:05:fc:2e:3a:e5:b2:53:9e:
                    a6:99:59:f6:ac:1a:72:40:81:77:45:1d:49:22:c7:
                    32:bb:6e:61:a1:0e:3c:fa:a2:68:b4:8b:46:10:c4:
                    97:9d:9a:23:49:69:d0:c2:21:a0:42:c3:97:2c:41:
                    19:73:29:40:ad:f3:1e:75:90:a8:13:b8:1c:8f:9f:
                    cf:61:c6:60:ee:d8:45:f7:85:bf:7c:dc:92:68:c3:
                    d4:cd:d5:ae:29:95:c2:ba:8f:52:3a:82:f2:c8:6d:
                    78:6a:01:d8:08:15:e2:ed:5f:8a:12:44:24:b9:fc:
                    7a:3c:57:38:5f:a2:d1:8a:5d:5c:06:20:4d:52:9c:
                    40:af:b2:81:db:42:19:f1:90:7a:cf:54:7d:2d:d6:
                    f7:df:20:72:3b:c2:1c:6f:41:71:9e:6c:cf:3c:cd:
                    e2:82:00:e7:e6:5b:d1:c1:9f:57:32:ad:c9:6f:25:
                    f1:a7:f7:70:88:f5:36:c3:c4:45:d9:c3:58:ce:ca:
                    f1:8a:33:7d:25:2c:4f:e2:20:42:4a:1a:9f:cd:1b:
                    8b:f9:56:cd:32:9d:5e:b0:30:ce:dd:a9:fc:07:63:
                    3a:a3:98:4e:a2:d1:93:6a:6a:68:bf:a7:25:c1:99:
                    ff:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:40:81:98:B7:3A:05:38:78:8B:ED:B4:1E:BA:6F:DE:61:F9:26:E8
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130342e302f32342d3234203d3e2037343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:36:65:34:0e:cb:60:45:17:8f:f5:44:48:9b:59:4c:69:f4:
         75:64:cc:a7:b4:25:9d:92:a4:cc:79:cc:64:a0:e7:8a:67:4e:
         ed:f6:d7:64:2c:04:96:19:15:5c:fe:8d:dc:6d:20:a6:6c:2f:
         47:2c:f0:28:d7:67:1d:28:c2:bd:b3:86:56:dd:b7:86:f2:7a:
         81:64:1c:74:c7:41:81:d5:66:56:a1:36:58:53:d8:50:31:ed:
         34:50:b2:c0:28:b0:a2:90:b0:94:fb:3f:58:91:b0:ce:cd:7d:
         e2:c8:5a:ff:fb:51:28:a1:26:d5:4c:fb:46:18:5a:d7:47:1a:
         1a:e3:0d:b5:f3:cb:57:e1:4e:fb:e7:4c:05:1e:ed:f6:1f:fc:
         4d:3a:7d:22:f9:ae:d6:57:c6:31:79:13:59:74:47:c1:14:c5:
         06:ea:9d:94:60:f2:57:7a:f6:25:7d:dc:1e:5c:84:c1:f7:12:
         cc:29:4f:fa:a4:21:70:d8:c8:e5:2d:c7:53:00:8b:ef:eb:3b:
         4a:83:93:c0:66:b2:70:04:04:93:62:35:dc:fc:68:7d:5a:02:
         76:89:19:d4:23:72:6a:5e:10:77:74:32:53:61:fc:21:45:b9:
         27:46:0b:97:a2:54:d5:6b:61:ad:fa:8a:3a:ee:74:df:be:d0:
         51:e8:1e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:22 2026 by rpki-client