Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3138392e3135302e302f32332d3234203d3e2037303138.roa
File:                     3139392e3138392e3135302e302f32332d3234203d3e2037303138.roa (raw, json)
Hash identifier:          9Vg0QanpxMfTmJRS9InzUTL/EXWEsLzH1rAsTFx+ZxA=
Subject key identifier:   EB:83:58:0F:8B:54:4F:D9:AF:A3:7A:85:B5:5B:3D:1A:57:DD:15:0C
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       7EC40E75410DC2AFD5EE8777911D26A0D62D6A7C
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3138392e3135302e302f32332d3234203d3e2037303138.roa
Signing time:             Wed 30 Sep 2026 09:14:48 +0000
ROA not before:           Wed 30 Sep 2026 09:09:48 +0000
ROA not after:            Wed 29 Sep 2027 09:14:48 +0000
asID:                     7018
IP address blocks:        199.189.150.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 Oct 2026 12:42:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c4:0e:75:41:0d:c2:af:d5:ee:87:77:91:1d:26:a0:d6:2d:6a:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Sep 30 09:09:48 2026 GMT
            Not After : Sep 29 09:14:48 2027 GMT
        Subject: CN=EB83580F8B544FD9AFA37A85B55B3D1A57DD150C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:8e:f1:15:ee:69:1d:c2:a5:60:25:7d:49:
                    7d:f7:0f:1f:a0:05:54:d2:2b:58:2c:f4:13:e8:07:
                    00:e3:7d:84:97:cd:13:9a:c9:bd:b3:4a:d8:60:21:
                    45:4b:91:8c:6d:0f:3c:7c:ce:fb:f8:55:3c:ac:01:
                    cd:25:bc:c6:d1:d6:e3:55:b0:e7:3c:20:3f:a1:96:
                    c0:51:f9:6c:fe:43:16:c8:75:77:7f:81:09:93:cf:
                    d7:38:ab:e9:de:b0:46:b7:00:30:47:ce:81:f9:9b:
                    b5:cf:80:83:d6:3b:f8:a9:e1:53:55:54:b3:64:03:
                    19:34:37:01:f9:1a:79:f1:18:9d:a4:a1:6e:52:67:
                    2e:17:3a:26:d4:be:04:91:13:f0:a8:a7:67:fe:99:
                    9d:b0:51:a5:d4:b5:3e:83:71:72:38:54:07:6c:f8:
                    fb:0f:4f:1b:a7:aa:b9:24:55:ee:22:99:44:e9:2c:
                    9f:2c:41:a3:de:5a:24:44:c4:88:10:51:77:51:6d:
                    73:a7:71:d3:9b:cc:2f:53:51:2b:77:33:02:8a:f4:
                    d7:ba:0b:b5:80:e2:76:0c:47:02:9a:ec:91:ef:5d:
                    ce:2c:53:5c:bd:a5:f6:64:c2:cb:1b:da:50:24:4d:
                    05:c2:e4:6a:6c:17:77:7f:0b:04:39:88:75:fd:d0:
                    f7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:83:58:0F:8B:54:4F:D9:AF:A3:7A:85:B5:5B:3D:1A:57:DD:15:0C
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3138392e3135302e302f32332d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:3a:89:f1:82:8d:1c:a8:c7:14:55:d6:1f:8c:74:0f:62:bc:
         4a:a4:49:e9:4a:c9:f8:61:bd:2f:ab:ff:b9:f3:01:09:cf:13:
         cf:f6:4a:20:62:5f:9e:bf:72:d8:e3:8e:87:de:b7:ad:82:b6:
         43:02:45:e7:13:29:4f:36:34:27:58:d1:3f:a4:00:cd:a0:65:
         66:c1:d8:e7:91:0a:a3:05:d6:ec:50:7a:25:24:16:44:07:d2:
         93:c4:1b:21:d6:21:1c:eb:fe:37:8f:e4:ff:25:ef:73:a5:f3:
         e6:ad:c4:fa:87:43:1a:03:29:a5:db:42:d5:a5:66:80:44:98:
         5c:1f:50:a3:58:85:d4:67:94:22:b3:3c:c5:ec:d1:fa:3a:c6:
         90:24:7e:9e:5f:76:37:f4:9a:30:76:c5:d9:23:47:d9:9f:77:
         de:8a:10:fe:9a:31:29:b7:dd:98:51:1b:a7:2a:0d:f1:ec:df:
         4c:e5:b9:7b:79:d7:8c:9c:3b:81:71:74:47:8a:a8:bb:16:59:
         51:e8:03:1c:1c:60:d7:f9:37:6b:32:16:23:eb:8d:35:8f:8f:
         15:75:5a:6d:ce:24:e7:9b:5d:b0:ac:9c:4b:63:44:d9:63:c5:
         76:44:bb:3d:b7:89:7c:07:dd:e7:72:f9:3a:82:e3:4b:a8:21:
         3f:54:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:16:31 2026 by rpki-client