Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e39382e302f32342d3234203d3e20313437323831.roa
File:                     3137332e302e39382e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier:          9ROlov4CX01PEw6TIueXJP+iw0XdzqJ1gVOoqCbtDNE=
Subject key identifier:   F3:0C:DE:A5:79:D6:16:8F:A5:97:24:E7:38:55:AA:9C:F3:58:C8:58
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       63B5EE33445D0633874000BCFF367049F37BF2A4
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e39382e302f32342d3234203d3e20313437323831.roa
Signing time:             Wed 30 Sep 2026 09:14:20 +0000
ROA not before:           Wed 30 Sep 2026 09:09:20 +0000
ROA not after:            Wed 29 Sep 2027 09:14:20 +0000
asID:                     147281
IP address blocks:        173.0.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b5:ee:33:44:5d:06:33:87:40:00:bc:ff:36:70:49:f3:7b:f2:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:09:20 2026 GMT
            Not After : Sep 29 09:14:20 2027 GMT
        Subject: CN=F30CDEA579D6168FA59724E73855AA9CF358C858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:df:7b:ae:30:7b:b5:1b:21:58:ee:46:90:5b:
                    fa:39:ee:2d:de:77:83:26:88:0c:c3:03:34:ab:56:
                    d3:c5:b8:95:88:15:fc:65:26:47:4c:21:f2:09:bc:
                    05:36:29:26:e5:43:6c:79:05:d6:c9:68:5c:e6:01:
                    a9:07:33:40:a0:76:f6:99:93:d6:91:80:15:fb:b9:
                    63:96:3a:c0:af:8e:7b:eb:de:1d:6c:41:49:e0:7f:
                    ec:31:3c:c8:f6:81:fc:cc:cf:c0:e6:7d:02:08:81:
                    f4:7d:1a:1c:70:bb:19:80:d2:7d:4b:71:52:7f:17:
                    01:36:0d:5b:9c:83:ae:ad:96:66:59:38:78:96:9b:
                    27:b5:a1:cf:1c:71:f9:b9:65:12:f2:05:dc:e2:79:
                    8b:a1:e9:c4:a8:61:02:13:21:9a:fb:3f:3d:b4:cb:
                    27:c6:6c:92:20:ec:e6:42:98:88:c0:4c:c6:5d:46:
                    ee:65:84:62:d5:cf:4c:2b:5b:a8:52:44:78:0f:e5:
                    4a:04:04:b5:da:b9:8b:28:a0:dd:14:90:e5:08:b0:
                    4f:e2:35:f6:cb:c1:3a:ca:6b:f6:12:0d:88:38:43:
                    b8:2b:4e:cf:0c:8a:a7:bd:fa:ce:b9:74:cc:7c:7a:
                    24:29:f8:68:84:46:81:95:45:62:cd:6b:9c:06:ef:
                    47:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:0C:DE:A5:79:D6:16:8F:A5:97:24:E7:38:55:AA:9C:F3:58:C8:58
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e39382e302f32342d3234203d3e20313437323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:5f:0e:9f:75:91:28:bf:df:0d:05:60:51:cf:55:2f:ef:30:
         36:c0:b4:15:65:e2:c8:31:16:13:36:c8:6f:03:bc:21:1c:d4:
         2a:84:b7:34:23:94:dd:0c:1f:6a:a2:a3:b3:aa:db:40:b7:fc:
         be:a3:a7:eb:f9:c8:2f:15:44:bd:5a:59:76:b2:69:65:5a:42:
         ac:c2:7a:3b:4a:cc:f7:cd:a8:34:56:76:cd:0b:2b:21:ec:39:
         ed:69:e0:e4:e6:12:ec:94:8e:c7:35:22:d4:f2:4a:33:03:a1:
         af:5a:36:89:31:2f:d8:68:64:67:b6:7e:0f:50:bb:13:be:04:
         98:67:06:53:6f:cd:0d:d0:9f:12:a9:a6:f0:bd:66:96:b9:8e:
         1b:49:a6:a2:06:99:91:b6:27:b5:43:af:aa:74:8a:b2:10:d0:
         66:46:05:00:b5:61:b0:ec:21:91:cb:eb:fe:13:5c:55:3a:5b:
         72:52:6d:55:b5:9a:ca:12:ef:ff:d0:4d:6a:7e:77:8b:b7:9b:
         76:1e:c8:af:85:c7:1a:d8:21:09:41:b8:07:a2:e6:33:6d:6f:
         47:e1:3f:27:2e:df:49:9c:26:4f:cc:f3:11:52:a3:aa:1b:65:
         f7:b0:3e:4e:0c:e3:e4:ea:ad:f8:13:33:c6:92:c9:42:68:d4:
         dc:94:fc:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:27 2026 by rpki-client