Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e39372e302f32342d3234203d3e203134333135.roa
File:                     3137332e302e39372e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          vRQZ94wV/OtdJeIE5JqACSAUfOod2gHD0BDd0i+aOP8=
Subject key identifier:   EE:7E:28:32:FA:54:F4:F3:B0:43:87:CA:EF:37:7B:97:F8:A3:44:ED
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       0B75AAA97C0179A196983BD7AFBC184021567597
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e39372e302f32342d3234203d3e203134333135.roa
Signing time:             Wed 30 Sep 2026 09:14:20 +0000
ROA not before:           Wed 30 Sep 2026 09:09:20 +0000
ROA not after:            Wed 29 Sep 2027 09:14:20 +0000
asID:                     14315
IP address blocks:        173.0.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:75:aa:a9:7c:01:79:a1:96:98:3b:d7:af:bc:18:40:21:56:75:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:09:20 2026 GMT
            Not After : Sep 29 09:14:20 2027 GMT
        Subject: CN=EE7E2832FA54F4F3B04387CAEF377B97F8A344ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5f:73:d4:26:08:0b:09:0d:63:9c:86:26:c6:
                    0f:5e:e3:52:91:fe:17:ae:56:02:9a:dc:c5:13:0d:
                    95:29:21:c7:de:2b:58:22:ff:61:54:59:a0:23:da:
                    d1:7e:db:02:15:70:13:21:29:91:e6:ff:41:d0:7b:
                    4b:0d:ad:19:5f:06:d6:71:1c:f1:ef:25:d5:11:e1:
                    79:d9:5e:9a:72:c1:03:9b:c2:a1:d5:e2:d5:c3:7e:
                    b7:c3:be:c2:43:45:b6:b5:5c:f4:3e:bf:cc:8f:2b:
                    a8:aa:2d:cb:ac:3f:d9:63:d6:21:64:7b:31:ce:a2:
                    2e:8b:41:dd:a8:d9:3f:ee:ca:c3:0d:0d:3f:f8:8f:
                    9e:9b:d8:42:03:5e:9b:a2:80:75:a9:c9:82:07:73:
                    b9:1c:83:b8:a2:b6:14:64:67:94:40:f5:70:45:a1:
                    69:9e:c7:67:34:83:6e:71:62:88:45:e9:86:81:a5:
                    cc:07:8b:cb:4f:65:d9:a3:8a:e8:9a:19:5c:a0:61:
                    b3:c4:b7:55:96:45:a9:86:18:d9:f1:9f:75:b4:b7:
                    e9:d2:41:97:50:8f:c8:12:6f:90:78:07:6c:ea:f1:
                    30:2f:2a:68:0e:bd:fe:3e:ab:34:2f:1e:a5:44:f6:
                    cb:d0:12:64:ae:f5:27:73:28:cc:b1:b3:3d:d9:06:
                    db:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7E:28:32:FA:54:F4:F3:B0:43:87:CA:EF:37:7B:97:F8:A3:44:ED
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e39372e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:cd:3a:00:c7:af:a3:4f:26:58:c5:25:4f:02:87:fa:50:7b:
         5a:32:6b:37:1e:46:80:36:b1:e5:e6:56:ff:e1:b7:70:e7:1d:
         5f:ff:31:14:30:49:72:e8:b9:56:35:e4:b2:b5:70:4d:f5:e4:
         10:54:e8:09:b9:59:f5:dd:25:b6:8e:e0:7e:52:3c:8e:f9:1f:
         30:95:cb:28:dc:0c:2c:0f:43:da:41:1b:cf:9d:20:6c:32:77:
         b6:61:2e:38:8a:16:ee:09:d7:05:65:fe:c2:f6:18:d3:a8:28:
         ce:42:6a:1f:00:d0:d3:04:6e:d5:33:7e:0f:c8:63:3c:ac:16:
         93:bd:b3:71:37:0b:01:13:e4:43:c2:70:3c:48:eb:5c:e1:66:
         52:53:1d:45:fb:ff:39:db:e4:da:d6:c7:52:be:a2:40:60:32:
         e9:ec:b7:ab:41:ad:84:f0:22:d3:2b:42:d4:38:30:1d:7a:5e:
         2d:e8:d1:0a:2b:6d:25:f3:11:b6:4e:9f:25:34:7e:76:e5:47:
         6e:55:7d:b8:05:d0:92:42:c1:f9:74:bc:84:27:14:9b:c5:a0:
         86:f6:42:ee:94:ec:6d:f8:67:91:d2:c9:85:53:1e:66:a9:65:
         84:16:3e:ce:91:bc:c8:58:42:e5:12:d3:c5:99:85:d9:ab:99:
         eb:1f:c9:be
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUC3WqqXwBeaGWmDvXr7wYQCFWdZcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTA3NDk5NmMyNzA3ZTY2YWJmY2JmY2VlZmQ0NzBlNDFj
YjM2MGFhYzY3OGZlMzgyNzIwHhcNMjYwOTMwMDkwOTIwWhcNMjcwOTI5MDkxNDIw
WjAzMTEwLwYDVQQDEyhFRTdFMjgzMkZBNTRGNEYzQjA0Mzg3Q0FFRjM3N0I5N0Y4
QTM0NEVEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz19z1CYICwkN
Y5yGJsYPXuNSkf4XrlYCmtzFEw2VKSHH3itYIv9hVFmgI9rRftsCFXATISmR5v9B
0HtLDa0ZXwbWcRzx7yXVEeF52V6acsEDm8Kh1eLVw363w77CQ0W2tVz0Pr/Mjyuo
qi3LrD/ZY9YhZHsxzqIui0HdqNk/7srDDQ0/+I+em9hCA16booB1qcmCB3O5HIO4
orYUZGeUQPVwRaFpnsdnNINucWKIRemGgaXMB4vLT2XZo4romhlcoGGzxLdVlkWp
hhjZ8Z91tLfp0kGXUI/IEm+QeAds6vEwLypoDr3+Pqs0Lx6lRPbL0BJkrvUncyjM
sbM92QbbYwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFO5+KDL6VPTzsEOHyu83e5f4
o0TtMB8GA1UdIwQYMBaAFBRdzfcdn4kSrVlXRJDXWAvADTsWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2FmYjAxZjZlMDFkZTQyYTI5ZWJmYzM5YzAyZGQ1MzY4LzAv
MTQ1RENERjcxRDlGODkxMkFENTk1NzQ0OTBENzU4MEJDMDBEM0IxNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5L2Q3NGNhNjY0LThiYTQtNGRiOS1iZTg1LWRiZGIyMGY2YWYyNy9hMDc0
OTk2YzI3MDdlNjZhYmZjYmZjZWVmZDQ3MGU0MWNiMzYwYWFjNjc4ZmUzODI3Mi5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5L2FmYjAxZjZlMDFkZTQyYTI5ZWJmYzM5
YzAyZGQ1MzY4LzAvMzEzNzMzMmUzMDJlMzkzNzJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMxMzQzMzMxMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACtAGEwDQYJKoZIhvcNAQELBQADggEB
AFbNOgDHr6NPJljFJU8Ch/pQe1oyazceRoA2seXmVv/ht3DnHV//MRQwSXLouVY1
5LK1cE315BBU6Am5WfXdJbaO4H5SPI75HzCVyyjcDCwPQ9pBG8+dIGwyd7ZhLjiK
Fu4J1wVl/sL2GNOoKM5Cah8A0NMEbtUzfg/IYzysFpO9s3E3CwET5EPCcDxI61zh
ZlJTHUX7/znb5NrWx1K+okBgMunst6tBrYTwItMrQtQ4MB16Xi3o0QorbSXzEbZO
nyU0fnblR25VfbgF0JJCwfl0vIQnFJvFoIb2Qu6U7G34Z5HSyYVTHmapZYQWPs6R
vMhYQuUS08WZhdmrmesfyb4=
-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:23 2026 by rpki-client