Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e203134333135.roa
File:                     3139392e3230342e3136312e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          Mvf4QwQyYjYRE0s/ps7i+iToNQE7kFGdnJVx72z1uOs=
Subject key identifier:   0C:6C:20:71:4B:15:2B:76:50:3A:4E:F6:52:74:D2:3F:FF:59:34:DE
Certificate issuer:       /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial:       5BA682B3D6160A910BED1BA8C61DFC243FF1EB91
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e203134333135.roa
Signing time:             Sun 05 Apr 2026 06:08:56 +0000
ROA not before:           Sun 05 Apr 2026 06:03:56 +0000
ROA not after:            Sun 04 Apr 2027 06:08:56 +0000
asID:                     14315
IP address blocks:        199.204.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:19:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:a6:82:b3:d6:16:0a:91:0b:ed:1b:a8:c6:1d:fc:24:3f:f1:eb:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Validity
            Not Before: Apr  5 06:03:56 2026 GMT
            Not After : Apr  4 06:08:56 2027 GMT
        Subject: CN=0C6C20714B152B76503A4EF65274D23FFF5934DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:b0:ab:e1:b2:e3:34:1d:0b:62:4a:b4:29:6c:
                    68:d1:06:61:ca:9b:55:de:b6:6c:85:b0:25:ac:ce:
                    04:f4:e4:8e:92:bb:df:74:6c:48:9e:29:e0:44:19:
                    91:21:2c:5f:9f:21:e1:61:83:9a:27:7a:0b:f8:b5:
                    8c:c5:a9:27:93:18:44:d1:30:19:b6:6f:f8:dd:96:
                    6c:76:a5:7f:ee:0c:9b:5b:d0:3b:62:2c:10:d6:c3:
                    22:3b:92:3f:28:ac:79:6b:e4:13:a6:72:7c:cc:c3:
                    8e:81:8a:73:98:63:27:6d:a9:d7:77:4e:d5:d3:fa:
                    4f:7a:01:a1:b8:09:7d:07:87:bf:ae:e2:ff:50:dc:
                    a2:03:fd:8a:11:cd:f7:a6:78:16:24:2c:4e:16:0a:
                    b9:52:e2:96:10:fe:14:22:c0:0d:0f:7d:97:71:8a:
                    a4:fc:f6:08:b5:ce:7d:05:8a:9e:20:f2:3d:90:2b:
                    27:bd:28:27:a9:94:45:05:07:cc:c4:52:3b:b4:0f:
                    f8:e1:0e:cf:88:a7:4d:c0:c7:e5:af:4a:5f:71:06:
                    36:0b:05:a8:e4:ed:07:d7:12:c8:52:28:18:df:01:
                    10:13:92:bf:05:25:17:aa:3e:10:53:00:2e:93:bb:
                    ec:51:95:73:68:3f:b2:11:80:7a:9b:b1:0e:a0:09:
                    78:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:6C:20:71:4B:15:2B:76:50:3A:4E:F6:52:74:D2:3F:FF:59:34:DE
            X509v3 Authority Key Identifier:
                keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:29:0b:6e:a3:f8:ff:6f:ce:50:2f:a9:dc:40:97:77:08:8b:
         1c:5e:2c:00:06:f6:e1:f0:5c:3b:02:d2:87:24:0d:6b:41:7a:
         c7:dc:60:a7:4c:e8:41:12:27:db:ac:cc:4c:82:86:25:e5:1a:
         52:ec:3c:ad:61:07:bd:9c:7b:4d:43:ae:7d:65:14:ed:ba:bd:
         41:b1:f8:5d:96:2d:33:75:7b:79:6f:63:eb:50:41:8c:bc:b2:
         ac:8e:66:1d:a0:55:ed:ff:4d:c6:f8:01:ca:5e:c5:68:df:7e:
         2d:8a:ad:47:0d:73:f7:5f:d6:f7:75:e4:66:7f:0d:c6:16:77:
         ae:5a:b4:73:9d:8c:e4:e5:1e:84:f9:76:62:6d:4b:31:c9:95:
         98:08:11:74:2c:ae:38:da:d2:6c:ce:f2:82:e0:1b:29:01:02:
         0a:3f:b3:c8:a4:f2:3b:35:4d:a9:73:cf:3b:59:cb:3c:98:37:
         18:6c:1a:8e:c9:43:ba:3a:44:30:43:c6:e8:1c:a3:c5:63:26:
         64:11:96:77:d0:43:f7:cf:be:ae:0f:c9:f8:e3:1f:67:31:30:
         72:2e:3f:1b:5b:e0:25:47:10:30:82:65:b3:3e:8d:32:26:f1:
         36:c9:39:e5:cb:9f:10:41:94:ca:ed:79:15:d5:41:69:6b:a8:
         6d:9e:13:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:01:25 2026 by rpki-client