Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130392e302f32342d3234203d3e203134333135.roa
File:                     3137332e302e3130392e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          kTHJi2g/WaVLpzaeWRATzcdYv8juq5kxVI2hAGG6MeA=
Subject key identifier:   EA:42:8E:12:A7:D4:8F:77:E9:7D:2D:B1:E2:30:C6:E5:67:61:0B:AF
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       50E37F182A278DF667D64BEF2C62CB6729F5E5C8
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130392e302f32342d3234203d3e203134333135.roa
Signing time:             Wed 30 Sep 2026 09:14:20 +0000
ROA not before:           Wed 30 Sep 2026 09:09:20 +0000
ROA not after:            Wed 29 Sep 2027 09:14:20 +0000
asID:                     14315
IP address blocks:        173.0.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e3:7f:18:2a:27:8d:f6:67:d6:4b:ef:2c:62:cb:67:29:f5:e5:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:09:20 2026 GMT
            Not After : Sep 29 09:14:20 2027 GMT
        Subject: CN=EA428E12A7D48F77E97D2DB1E230C6E567610BAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:cf:cc:61:ba:f9:d8:55:9e:d1:f2:d9:46:6f:
                    e1:63:a7:35:be:6e:db:23:ae:57:5e:11:41:7e:40:
                    5e:29:df:f0:04:23:88:f4:d3:dc:6e:5b:6b:73:ab:
                    3c:f7:cd:ed:bf:a0:6f:0f:3f:2c:62:0c:c9:85:72:
                    fb:5a:50:d4:bf:1a:ad:12:c2:aa:7f:50:72:cc:0d:
                    34:41:c8:d4:47:ab:b9:4d:00:ba:65:38:4c:7b:db:
                    46:67:7a:97:d6:2b:c6:f2:fa:ae:21:26:81:af:1b:
                    fb:bb:ee:8d:7f:f1:b3:94:5d:b1:6e:85:9c:78:5d:
                    76:fb:f0:7a:87:9c:68:bf:0f:f7:cf:ca:52:71:a3:
                    0b:44:ed:4c:ec:43:94:be:52:e6:2b:14:16:f7:78:
                    06:5e:08:f2:9f:f6:fe:3b:63:de:75:12:fa:e9:6a:
                    43:10:90:55:a2:52:93:fc:45:b4:af:76:e0:6b:ea:
                    f6:6c:d1:1a:22:65:94:ac:a9:42:2c:11:73:e8:8d:
                    b3:c0:ad:b1:82:01:26:61:8a:ec:19:ce:d1:44:c9:
                    20:22:e6:84:38:2d:a7:61:29:5d:a4:7e:e9:01:02:
                    b7:de:0b:0e:1a:2d:84:1d:a5:f9:2a:a6:8d:92:42:
                    ff:17:05:be:c2:c1:b9:10:f4:49:5e:da:97:a3:24:
                    a9:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:42:8E:12:A7:D4:8F:77:E9:7D:2D:B1:E2:30:C6:E5:67:61:0B:AF
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3130392e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:db:18:53:c2:45:23:b9:cd:0e:a3:4c:2f:e9:63:9e:3b:e0:
         a1:71:e7:05:7e:b6:d4:50:2d:5c:0e:76:c8:59:cd:5c:0b:1b:
         c3:32:50:76:b5:c0:8e:5f:47:a7:66:3e:72:10:c9:f2:cd:70:
         ec:a0:eb:e1:a3:ae:e9:bb:62:b0:ad:5d:98:f4:5e:35:ac:c0:
         14:e8:db:8f:f0:a9:2b:ad:00:7d:71:25:be:67:15:06:c3:f9:
         c5:8d:ec:39:fd:2a:e9:c4:de:ec:cc:cc:c1:e3:fd:1a:1c:f5:
         9b:6e:2f:77:4e:25:eb:d2:b4:d2:16:32:50:d2:fc:b1:1e:21:
         5e:b2:d9:19:6b:a7:5e:0e:9b:82:7c:ce:d9:c7:8b:00:2c:c3:
         d7:31:de:d5:c2:b8:ea:9f:3c:f3:4e:95:64:c9:e6:d8:1f:97:
         99:38:f2:d6:76:8c:58:3b:f5:80:bb:43:b5:99:cc:4b:34:ef:
         4b:e4:eb:f9:41:40:0a:02:3a:6f:e5:c8:f4:f8:27:f8:db:f7:
         fb:4d:8b:08:6b:6b:43:c4:2c:a2:be:ee:00:09:f4:97:a5:56:
         bd:b2:33:46:2d:ef:bc:02:e4:83:e4:8f:63:08:ed:a5:bc:14:
         77:f4:fb:0b:aa:00:e8:a1:33:30:52:6e:27:26:fc:11:67:43:
         7d:28:84:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:28 2026 by rpki-client