Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38322e302f32332d3234203d3e2032393134.roa
File:                     3139392e3131352e38322e302f32332d3234203d3e2032393134.roa (raw, json)
Hash identifier:          4DHDD5FiPjE6g4xoZp3O/XRGOPF8SYuSJdZllytMnms=
Subject key identifier:   4F:C4:AC:D3:60:A8:1E:08:FB:79:FB:D4:5B:80:3C:8E:5F:CA:7B:D5
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       43A2F8A46A70806909FFC9806654206E82849BD2
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38322e302f32332d3234203d3e2032393134.roa
Signing time:             Wed 30 Sep 2026 09:15:17 +0000
ROA not before:           Wed 30 Sep 2026 09:10:17 +0000
ROA not after:            Wed 29 Sep 2027 09:15:17 +0000
asID:                     2914
IP address blocks:        199.115.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:a2:f8:a4:6a:70:80:69:09:ff:c9:80:66:54:20:6e:82:84:9b:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:10:17 2026 GMT
            Not After : Sep 29 09:15:17 2027 GMT
        Subject: CN=4FC4ACD360A81E08FB79FBD45B803C8E5FCA7BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:f1:a8:17:5f:e2:6b:8b:6d:d1:ab:3b:5a:
                    b3:0d:32:b0:1a:58:93:d0:da:0d:e6:f8:49:04:af:
                    d2:d9:a1:30:cf:7b:51:d1:48:24:2c:59:f4:44:e6:
                    2e:25:f9:a8:c8:23:41:93:c3:65:62:88:b6:40:0a:
                    bd:f0:75:9e:09:f1:6c:21:9d:52:ff:25:9c:1f:d1:
                    dc:93:bc:b8:4e:58:a7:d7:8c:74:49:2f:86:ab:60:
                    56:3e:e0:2c:d1:df:2d:52:dd:30:54:92:0e:3d:d0:
                    b4:39:a6:1c:bf:2b:a7:c2:40:88:68:23:80:f1:55:
                    92:66:17:a0:14:bb:96:83:ac:74:42:32:d6:8c:de:
                    fb:dd:39:df:60:1c:b8:78:01:25:90:ca:b6:ea:87:
                    59:3c:2d:9a:51:f1:d0:f8:c6:c3:7f:72:41:90:a4:
                    00:fc:5e:02:23:23:64:3b:ff:5a:14:4d:ec:46:b9:
                    e3:7e:f3:59:04:2f:79:a9:7f:53:7e:ac:81:20:77:
                    49:ba:90:f9:e2:a0:d6:9e:69:37:69:b0:a9:01:c2:
                    29:76:f6:a1:9f:05:2a:40:a2:81:06:e4:44:c5:4c:
                    fe:51:15:32:91:a9:99:43:00:f6:dd:69:75:f0:23:
                    59:f9:44:41:36:c9:3d:ec:ba:bb:14:31:a4:1d:3f:
                    52:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C4:AC:D3:60:A8:1E:08:FB:79:FB:D4:5B:80:3C:8E:5F:CA:7B:D5
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38322e302f32332d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:24:3d:00:12:26:09:11:26:9b:74:03:13:b4:e4:74:ca:49:
         5c:97:47:72:24:5c:e5:f3:d5:3e:8a:84:b6:e0:bb:59:66:a3:
         67:04:f7:32:4e:c1:28:96:c6:5c:00:08:43:4f:28:d1:96:6e:
         84:94:8c:92:89:3b:43:d6:3c:0f:ab:63:8c:80:90:88:16:4d:
         b0:97:6c:53:bb:12:c2:d4:b0:fc:f2:25:78:1f:15:47:8c:c5:
         d9:38:0a:dd:2d:c9:d1:79:e4:e2:0c:0c:ff:3e:7e:83:82:2e:
         33:be:3c:f6:68:29:3e:c7:a1:e2:9b:d9:46:b5:15:36:f4:47:
         28:ee:ea:41:51:ed:cf:43:8d:2d:b3:de:da:b1:b5:f8:74:60:
         4f:2a:14:50:4e:ea:61:9f:c5:e3:b4:e9:8b:a4:16:4a:63:31:
         9e:29:1b:90:bb:b5:4b:60:b2:28:be:53:e9:99:75:0a:e5:d5:
         25:60:48:38:13:78:35:7f:d0:f2:85:36:66:ad:c5:98:e0:d7:
         6a:84:00:bc:bb:9d:56:7b:2b:71:da:6a:5d:09:4b:d2:af:5a:
         71:da:32:ce:35:2b:ae:b4:fc:b5:8e:b6:a4:ae:65:cf:02:10:
         a6:c6:e2:da:01:2e:4f:ff:11:7c:bb:43:f2:36:de:ab:c8:6d:
         ec:8c:86:32
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUQ6L4pGpwgGkJ/8mAZlQgboKEm9IwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYTA3NDk5NmMyNzA3ZTY2YWJmY2JmY2VlZmQ0NzBlNDFj
YjM2MGFhYzY3OGZlMzgyNzIwHhcNMjYwOTMwMDkxMDE3WhcNMjcwOTI5MDkxNTE3
WjAzMTEwLwYDVQQDEyg0RkM0QUNEMzYwQTgxRTA4RkI3OUZCRDQ1QjgwM0M4RTVG
Q0E3QkQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg/xqBdf4muL
bdGrO1qzDTKwGliT0NoN5vhJBK/S2aEwz3tR0UgkLFn0ROYuJfmoyCNBk8NlYoi2
QAq98HWeCfFsIZ1S/yWcH9Hck7y4Tlin14x0SS+Gq2BWPuAs0d8tUt0wVJIOPdC0
OaYcvyunwkCIaCOA8VWSZhegFLuWg6x0QjLWjN773TnfYBy4eAElkMq26odZPC2a
UfHQ+MbDf3JBkKQA/F4CIyNkO/9aFE3sRrnjfvNZBC95qX9TfqyBIHdJupD54qDW
nmk3abCpAcIpdvahnwUqQKKBBuRExUz+URUykamZQwD23Wl18CNZ+URBNsk97Lq7
FDGkHT9SoQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFE/ErNNgqB4I+3n71FuAPI5f
ynvVMB8GA1UdIwQYMBaAFBRdzfcdn4kSrVlXRJDXWAvADTsWMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5L2FmYjAxZjZlMDFkZTQyYTI5ZWJmYzM5YzAyZGQ1MzY4LzAv
MTQ1RENERjcxRDlGODkxMkFENTk1NzQ0OTBENzU4MEJDMDBEM0IxNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvMGRmZTU4ZjItZWRmZS00NjE5LTg2YmQtZGVmMmNh
M2FkOTE5L2Q3NGNhNjY0LThiYTQtNGRiOS1iZTg1LWRiZGIyMGY2YWYyNy9hMDc0
OTk2YzI3MDdlNjZhYmZjYmZjZWVmZDQ3MGU0MWNiMzYwYWFjNjc4ZmUzODI3Mi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS9hZmIwMWY2ZTAxZGU0MmEyOWViZmMz
OWMwMmRkNTM2OC8wLzMxMzkzOTJlMzEzMTM1MmUzODMyMmUzMDJmMzIzMzJkMzIz
NDIwM2QzZTIwMzIzOTMxMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAHHc1IwDQYJKoZIhvcNAQELBQAD
ggEBAA0kPQASJgkRJpt0AxO05HTKSVyXR3IkXOXz1T6KhLbgu1lmo2cE9zJOwSiW
xlwACENPKNGWboSUjJKJO0PWPA+rY4yAkIgWTbCXbFO7EsLUsPzyJXgfFUeMxdk4
Ct0tydF55OIMDP8+foOCLjO+PPZoKT7HoeKb2Ua1FTb0Ryju6kFR7c9DjS2z3tqx
tfh0YE8qFFBO6mGfxeO06YukFkpjMZ4pG5C7tUtgsii+U+mZdQrl1SVgSDgTeDV/
0PKFNmatxZjg12qEALy7nVZ7K3Haal0JS9KvWnHaMs41K660/LWOtqSuZc8CEKbG
4toBLk//EXy7Q/I23qvIbeyMhjI=
-----END CERTIFICATE-----
Generated at Tue Oct 6 20:24:42 2026 by rpki-client