Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31342e302f32342d3234203d3e20313437323831.roa
File:                     3136322e3232312e31342e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier:          eakr2v1v70JZgbRMnRttFtupASj8fqKtq5dKhxHOk8Y=
Subject key identifier:   91:21:39:77:34:0F:3D:DE:B9:9E:40:FC:3F:CF:D6:EA:2E:C0:D0:AD
Certificate issuer:       /CN=9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e
Certificate serial:       7F59D5BA874E7092B1B45420E3852FFD15493E7E
Authority key identifier: EE:2E:BA:7A:2F:07:A4:74:7A:75:EB:84:07:67:ED:C1:2A:E9:E9:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31342e302f32342d3234203d3e20313437323831.roa
Signing time:             Thu 17 Sep 2026 15:28:57 +0000
ROA not before:           Thu 17 Sep 2026 15:23:57 +0000
ROA not after:            Thu 16 Sep 2027 15:28:57 +0000
asID:                     147281
IP address blocks:        162.221.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.crl
                          rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9dfde804-a898-43cd-a5ef-baa9e166dbb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 19:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:59:d5:ba:87:4e:70:92:b1:b4:54:20:e3:85:2f:fd:15:49:3e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e
        Validity
            Not Before: Sep 17 15:23:57 2026 GMT
            Not After : Sep 16 15:28:57 2027 GMT
        Subject: CN=91213977340F3DDEB99E40FC3FCFD6EA2EC0D0AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8e:21:a8:cd:c8:45:13:92:d9:b6:57:e7:6a:
                    18:65:47:85:5f:0c:40:d4:7d:bd:22:d7:a5:99:b5:
                    3f:08:3d:37:64:fd:0f:ec:83:74:8a:d1:77:d7:a7:
                    5d:61:5c:5e:7e:a1:bb:75:59:3f:fd:ef:2e:04:c7:
                    88:8e:30:e0:b0:e5:f4:60:fc:4b:53:00:0e:93:c1:
                    c7:d0:41:aa:c6:d0:5e:25:00:59:cb:be:35:ea:b3:
                    3c:ef:76:ea:54:c6:f1:7e:ed:7f:67:5e:af:29:91:
                    e1:5a:e3:43:cd:9d:31:ca:d1:43:c0:58:58:fd:4d:
                    e2:f3:15:55:8e:2e:d4:05:bf:c0:b2:2d:e4:51:69:
                    60:95:b3:92:c0:22:05:ac:73:21:e0:a0:eb:2f:98:
                    f9:f0:b8:06:b7:89:cd:88:3b:6a:25:3e:2e:ec:32:
                    d3:be:21:09:ff:4d:b5:18:d7:b7:f8:45:88:3d:3e:
                    61:7a:78:08:ad:4c:7a:47:35:01:ed:ac:f5:26:f9:
                    07:48:ba:e9:d9:28:20:a5:b0:b4:0f:3e:38:67:b1:
                    ce:4c:00:a1:c0:2e:53:a9:b9:6c:a1:3d:33:dd:35:
                    5f:fd:78:f3:67:ea:70:24:d3:f0:a6:4f:35:99:12:
                    83:1d:0a:61:23:e9:4b:01:0d:49:a4:b3:dd:72:9c:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:21:39:77:34:0F:3D:DE:B9:9E:40:FC:3F:CF:D6:EA:2E:C0:D0:AD
            X509v3 Authority Key Identifier:
                keyid:EE:2E:BA:7A:2F:07:A4:74:7A:75:EB:84:07:67:ED:C1:2A:E9:E9:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/EE2EBA7A2F07A4747A75EB840767EDC12AE9E9DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/9dfde804-a898-43cd-a5ef-baa9e166dbb7/9bc79fa8a1575d5bfe39e71e80f9cf60cbe37cc641fc89930e.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/736c1dbeabd74b60bd9f07e891ec1c6a/0/3136322e3232312e31342e302f32342d3234203d3e20313437323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:37:01:87:2c:4a:38:ec:e9:7e:74:7f:4d:9f:97:3a:93:77:
         8f:1f:d8:73:b7:0c:3d:29:c1:b7:0e:25:af:6e:c0:33:6e:67:
         61:90:24:00:c1:a4:4a:3d:5c:a1:43:8b:31:54:da:86:41:be:
         e6:1f:8c:17:25:d7:ae:52:ce:17:32:26:a7:d7:ca:a4:22:2b:
         ab:d3:fd:bc:59:ca:6d:81:58:39:f8:b5:45:9b:8d:38:95:3a:
         d4:bf:73:c4:d9:23:61:53:b9:72:53:f7:f8:e2:54:3c:ca:c0:
         a0:0c:86:9c:03:11:a3:23:c4:0a:db:8b:94:7c:ae:8f:cd:a1:
         19:31:3d:18:c0:67:5b:b6:ae:e1:4e:77:2a:4e:60:7d:a9:02:
         ba:bb:29:f3:db:78:6b:e1:ec:21:db:89:fb:2e:32:7a:7f:df:
         5f:93:ef:a2:fe:28:7e:85:b4:46:a9:cf:0c:da:8c:5a:37:ce:
         e8:42:e6:5d:0b:b2:f3:f8:9f:eb:4b:37:93:21:d6:87:e3:b0:
         52:a8:3b:e6:73:7f:fa:76:f8:ab:2e:8e:84:a7:dd:4a:f3:ab:
         d0:5a:5d:27:c7:1e:a9:a3:c6:bc:b4:2b:89:6a:33:3a:78:4c:
         ec:1f:c2:f8:c0:93:55:36:dd:56:37:c0:30:83:50:51:ea:af:
         84:1f:e3:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:52:57 2026 by rpki-client