Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3138392e3135302e302f32332d3234203d3e2032393134.roa
File:                     3139392e3138392e3135302e302f32332d3234203d3e2032393134.roa (raw, json)
Hash identifier:          l19pAUbQUVGJvUsVd/SEIgce4MogBe51iLEHWlQaZAo=
Subject key identifier:   FD:F8:8D:D6:CC:56:4C:98:AB:CA:2E:03:73:37:EE:4B:02:D3:33:FF
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       385BDACFED05B4E89C30D3C361CC81E3D296515E
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3138392e3135302e302f32332d3234203d3e2032393134.roa
Signing time:             Wed 30 Sep 2026 09:14:36 +0000
ROA not before:           Wed 30 Sep 2026 09:09:36 +0000
ROA not after:            Wed 29 Sep 2027 09:14:36 +0000
asID:                     2914
IP address blocks:        199.189.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 Oct 2026 07:21:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:5b:da:cf:ed:05:b4:e8:9c:30:d3:c3:61:cc:81:e3:d2:96:51:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:09:36 2026 GMT
            Not After : Sep 29 09:14:36 2027 GMT
        Subject: CN=FDF88DD6CC564C98ABCA2E037337EE4B02D333FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:35:a1:1c:bf:83:5a:82:35:f6:6e:53:f8:a5:
                    54:96:c3:7f:7f:0a:a4:0b:37:7b:ec:be:a7:36:23:
                    18:e8:d0:70:70:cb:a6:93:2a:e4:18:b4:c3:66:13:
                    d9:87:fb:b4:f3:bd:1e:59:cc:52:52:1b:a1:39:96:
                    32:28:98:5c:3a:32:12:ed:92:d3:d0:b7:61:75:18:
                    d6:13:6e:2e:d6:26:f4:4c:7e:82:95:42:2d:26:31:
                    8e:9e:68:03:03:55:8a:c9:72:a1:f5:8b:1a:09:dd:
                    ce:95:45:32:fe:e2:72:64:e3:48:ce:9e:f8:a7:14:
                    9b:16:d7:15:00:4f:4c:06:67:d8:2d:29:72:a0:6c:
                    0e:db:c2:97:3e:81:79:27:20:fd:99:70:42:6e:85:
                    e0:66:3d:8c:2b:e5:3f:f7:14:2b:4b:44:72:36:71:
                    0f:9e:cd:e9:5c:f2:a3:9c:08:f6:fe:34:0c:2d:d0:
                    58:16:ed:c8:4c:08:7a:f5:70:00:8b:ae:8c:d7:29:
                    b0:c0:77:0a:68:52:ea:38:55:f9:2b:c4:96:1d:fc:
                    af:71:f5:22:27:e9:76:ca:30:46:a2:29:2b:22:20:
                    84:32:e3:75:68:d2:7b:61:0d:85:12:fd:d0:71:72:
                    08:49:e2:79:7e:68:87:a7:5a:6e:48:8d:d8:8e:0d:
                    91:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:F8:8D:D6:CC:56:4C:98:AB:CA:2E:03:73:37:EE:4B:02:D3:33:FF
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3138392e3135302e302f32332d3234203d3e2032393134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:99:56:8a:b3:1d:9a:0c:c7:a2:f9:50:9c:25:ff:a7:3e:ad:
         d6:55:a7:d7:90:9b:dc:10:41:74:e4:50:72:7d:47:08:8a:aa:
         8e:95:e9:5e:6d:9e:6d:b3:6f:a5:24:b9:3f:58:db:43:59:9b:
         1e:1d:a4:9b:64:a6:d7:bc:11:b4:15:7c:c9:e2:23:de:ac:7a:
         41:e2:5e:19:77:1e:47:f4:b0:2c:69:64:dc:b0:c7:19:25:a4:
         38:73:02:e3:79:ea:6d:a7:2d:90:ee:21:af:6f:92:ab:64:8b:
         7c:7e:1d:a8:0c:de:a9:ca:cd:31:1b:52:68:a3:c5:17:ce:2c:
         f9:57:1d:ea:e1:2d:56:78:33:c7:da:74:94:07:30:b0:a3:b6:
         b8:57:52:cd:43:96:ad:55:9d:e7:46:3a:8c:a9:1c:c6:3f:5f:
         a3:4c:bb:cc:1d:55:0c:f8:fb:e9:22:25:be:3d:96:17:a3:fc:
         34:3c:5a:95:c6:9e:c8:27:76:10:df:6e:d3:f4:08:c5:44:a9:
         c6:34:7c:a7:65:da:c8:41:a1:3a:df:99:7d:7f:b5:d8:3f:ba:
         7e:75:78:a3:e7:21:e9:d0:37:11:25:ff:d5:98:fb:6c:84:50:
         52:f5:26:7a:88:c3:fb:d0:0b:60:b6:cf:e4:34:0e:6b:5d:71:
         3b:72:01:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:51:12 2026 by rpki-client