Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38322e302f32332d3234203d3e2037303138.roa
File:                     3139392e3131352e38322e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier:          Lfbogr6CZPsEloVxm4x+NdqHFjXsJliZf5yAWFJ3MaI=
Subject key identifier:   A4:38:23:1E:5D:60:09:1C:51:74:CF:1D:0E:7B:1D:EC:6F:52:01:E1
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       32E98AEE4A8969D7DCC399C1802A5FF68B44DB2F
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38322e302f32332d3234203d3e2037303138.roa
Signing time:             Wed 30 Sep 2026 09:15:30 +0000
ROA not before:           Wed 30 Sep 2026 09:10:30 +0000
ROA not after:            Wed 29 Sep 2027 09:15:30 +0000
asID:                     7018
IP address blocks:        199.115.82.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:e9:8a:ee:4a:89:69:d7:dc:c3:99:c1:80:2a:5f:f6:8b:44:db:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:10:30 2026 GMT
            Not After : Sep 29 09:15:30 2027 GMT
        Subject: CN=A438231E5D60091C5174CF1D0E7B1DEC6F5201E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:1a:cb:21:92:ae:88:a1:3c:2a:68:a6:df:
                    32:47:e0:a4:1e:c7:be:33:89:9d:1c:55:4d:00:15:
                    e6:d8:99:56:10:b1:80:c8:9d:15:e5:47:7c:77:51:
                    d8:05:fc:01:80:85:de:13:bb:5a:e3:6b:35:dd:a4:
                    6e:93:c5:bf:ce:e1:bd:52:ed:1a:e2:5c:61:01:af:
                    40:b5:6e:6d:30:11:cc:12:46:57:09:c2:1f:9c:77:
                    82:89:f8:47:80:e4:a4:14:0a:74:b3:6f:18:69:6d:
                    d0:11:b0:72:93:38:21:18:a0:17:70:a9:50:2d:d4:
                    b6:19:d2:ba:20:80:c6:17:b6:0d:b5:c4:62:d2:9d:
                    19:2f:f5:51:7c:73:b2:6b:4d:f5:09:af:83:cf:85:
                    e1:4a:aa:38:7c:87:d3:11:51:55:67:66:bb:01:f3:
                    36:51:2b:e0:d6:44:32:9e:16:15:ee:44:37:b7:62:
                    e0:50:cd:d1:be:ef:12:94:69:01:da:8f:d3:82:3c:
                    3e:f6:49:99:c8:f0:72:76:65:fd:25:52:af:71:c9:
                    0b:e4:e6:99:95:38:3a:58:95:20:24:de:6b:05:86:
                    ad:a0:2d:b5:be:19:88:af:fc:67:c1:b4:a0:dd:79:
                    e1:27:23:f4:4f:cb:04:48:c7:b0:46:63:38:03:c7:
                    3c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:38:23:1E:5D:60:09:1C:51:74:CF:1D:0E:7B:1D:EC:6F:52:01:E1
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38322e302f32332d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:7f:cd:6b:06:06:c7:6a:38:bd:18:b9:f7:49:5a:2d:dd:a9:
         4e:dd:d0:33:d1:b3:80:09:e6:e0:05:00:15:b8:9c:52:49:51:
         46:18:1d:e5:76:17:90:8d:6f:9a:b8:f3:fa:69:22:e6:fc:3a:
         63:71:d8:d1:f6:bc:df:6a:25:0d:61:48:5d:f6:8f:a7:04:83:
         29:7c:2c:e3:96:1d:55:39:1a:2a:35:6d:24:b0:3d:b3:ab:78:
         46:65:98:bc:0e:e4:7a:77:a5:7c:fa:31:d7:1a:2f:92:ad:5a:
         5d:67:da:41:6b:9d:82:cc:9f:1c:a5:7f:f8:c6:7e:b9:4f:81:
         2f:ed:6a:a1:8b:35:94:a6:da:11:0a:12:56:53:71:15:88:d3:
         33:89:72:4a:02:97:19:f0:78:8e:57:da:d7:cc:22:b2:c7:b9:
         bb:62:11:6b:8b:fe:0f:87:44:af:83:71:32:bb:75:10:0a:b0:
         1a:35:95:e5:05:c4:fd:22:5e:95:6b:fb:0c:99:d1:d1:61:02:
         83:97:6d:5f:31:5c:cd:a9:1a:54:62:a0:12:eb:7c:af:8d:3b:
         db:85:3a:8f:9d:b3:bc:32:c4:84:fc:13:53:1b:cc:5d:fd:30:
         0d:7a:44:61:51:a2:c5:f4:f6:36:14:fc:28:1c:ed:dd:df:b1:
         40:8a:e9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:29 2026 by rpki-client