Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38322e302f32332d3234203d3e20343031373833.roa
File:                     3139392e3131352e38322e302f32332d3234203d3e20343031373833.roa (raw, json)
Hash identifier:          pInVTAmIZkk7W183gktWLkCslyCTw3VvveunqiDU9x4=
Subject key identifier:   F0:9F:76:10:18:98:6C:45:FC:4A:73:7A:7D:EB:63:14:A7:3F:3F:05
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       22C00A755FCBA52FC53EE0BFF4D4562C2BEED42D
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38322e302f32332d3234203d3e20343031373833.roa
Signing time:             Wed 30 Sep 2026 09:15:01 +0000
ROA not before:           Wed 30 Sep 2026 09:10:01 +0000
ROA not after:            Wed 29 Sep 2027 09:15:01 +0000
asID:                     401783
IP address blocks:        199.115.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:c0:0a:75:5f:cb:a5:2f:c5:3e:e0:bf:f4:d4:56:2c:2b:ee:d4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:10:01 2026 GMT
            Not After : Sep 29 09:15:01 2027 GMT
        Subject: CN=F09F761018986C45FC4A737A7DEB6314A73F3F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e6:05:f6:1a:45:3e:39:b1:4b:d6:68:a8:2b:
                    dc:3e:bb:83:4d:a9:4e:34:25:b3:86:cb:52:ee:53:
                    9d:52:47:d0:88:fb:8f:d8:bd:33:52:04:51:a7:91:
                    88:02:c9:46:79:61:a3:28:25:ce:5f:c1:55:c9:bb:
                    fb:d8:c0:7e:13:c6:be:96:e5:ed:ee:b6:36:58:7b:
                    c9:7b:74:9b:09:ba:c8:5c:af:39:a6:26:32:54:e0:
                    c5:68:4e:df:90:4a:ec:57:d5:82:65:64:97:12:9a:
                    96:aa:60:23:76:bd:5b:f5:ec:3d:bd:fd:29:a7:96:
                    e9:16:8c:6c:0f:39:52:84:39:58:03:cb:b5:d3:31:
                    57:7d:d0:7b:db:b8:de:f8:e9:8f:13:ba:cd:db:74:
                    ac:2d:1a:f9:89:b1:3d:ec:51:5e:59:7a:ae:59:23:
                    c8:06:56:03:1d:d4:8d:70:c6:5c:b3:4c:4e:a6:a8:
                    3a:2f:1e:7d:a3:97:52:a5:18:3e:c4:0c:54:b5:8b:
                    06:a9:f7:36:f8:3e:92:b9:7c:3c:8c:08:ed:be:f9:
                    31:b3:63:1e:a4:8c:33:95:c3:9b:6e:70:de:3c:9f:
                    8a:2b:7e:9d:ae:f5:77:14:ad:17:e8:05:42:19:77:
                    fe:0a:14:17:7e:80:ed:f2:1a:ce:82:7c:76:af:9b:
                    57:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9F:76:10:18:98:6C:45:FC:4A:73:7A:7D:EB:63:14:A7:3F:3F:05
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38322e302f32332d3234203d3e20343031373833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:ad:c1:bf:b3:a2:ac:31:25:9f:c4:c7:0a:97:b5:61:69:dd:
         b8:75:be:86:8e:a2:d3:84:f0:a3:6d:a3:f8:67:38:1a:fc:5e:
         06:86:13:31:5d:86:69:f7:39:2d:69:54:58:65:14:1e:8e:36:
         60:fb:4c:c9:d1:68:60:0e:8c:58:62:1d:02:36:d6:eb:f1:82:
         92:b6:82:cf:f3:27:03:35:60:19:41:be:f9:f1:60:ab:f9:f9:
         28:ce:8c:c0:83:50:e7:9f:f3:de:0b:94:3d:2d:c2:c7:1c:ac:
         78:99:32:9f:5d:b0:4c:ce:35:da:f8:5a:54:a2:04:74:bd:31:
         f1:9f:aa:bb:2a:a7:91:c2:4c:26:08:0f:f9:a3:8d:98:65:dc:
         c9:fd:ef:79:fe:6e:c6:74:91:90:11:93:7f:e5:2a:6a:e2:69:
         59:94:f0:8b:11:62:bf:58:09:4a:7b:82:6e:04:d3:ef:86:80:
         85:4d:41:c3:ab:19:41:38:42:8b:7b:be:03:32:39:fa:10:e8:
         64:25:0d:13:2d:f1:8f:b9:35:82:e0:0d:f5:8e:1f:58:d7:73:
         90:18:33:c8:57:73:7b:5b:d0:ff:01:91:7c:23:f8:8b:c6:9c:
         62:60:3e:7e:bd:03:ee:37:77:9c:2d:e5:d7:f5:da:44:ad:ac:
         8f:74:39:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:30 2026 by rpki-client