Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32332d3234203d3e20383334.roa
File:                     3139392e39312e3130302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          i8MxH3Fk4coCQSLJpn2QwypQ+bSWkpaU9u48iYELq4A=
Subject key identifier:   84:A1:64:76:39:09:0A:72:AB:00:B0:A1:BB:FB:02:B1:88:23:37:07
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       417DBBEF2E88B28CCBF97E9D07E55AC39B5A35BC
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32332d3234203d3e20383334.roa
Signing time:             Sun 22 Feb 2026 03:33:57 +0000
ROA not before:           Sun 22 Feb 2026 03:28:57 +0000
ROA not after:            Sun 21 Feb 2027 03:33:57 +0000
asID:                     834
IP address blocks:        199.91.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 17:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7d:bb:ef:2e:88:b2:8c:cb:f9:7e:9d:07:e5:5a:c3:9b:5a:35:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Feb 22 03:28:57 2026 GMT
            Not After : Feb 21 03:33:57 2027 GMT
        Subject: CN=84A1647639090A72AB00B0A1BBFB02B188233707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:28:26:79:f2:af:e3:2a:33:1d:0b:8b:fa:35:
                    b5:45:cd:29:a8:db:c5:80:79:ed:e6:c2:ab:c4:00:
                    2a:15:7c:74:18:01:96:8b:37:e7:f8:94:61:19:11:
                    65:0f:7f:00:29:a5:2e:77:db:e2:cb:8c:a6:4a:24:
                    84:24:57:d4:4d:98:07:78:02:00:6f:65:0c:e0:45:
                    65:a1:9a:58:7d:1f:a1:7d:cc:5c:1b:41:31:eb:94:
                    a4:89:0b:b7:98:04:da:d8:9c:ac:f0:f3:15:80:bf:
                    73:c9:72:59:e2:a3:11:49:db:49:59:1b:2a:92:55:
                    e6:30:eb:76:d2:8f:34:ba:f4:16:a9:94:af:01:6c:
                    b2:61:81:09:a1:9a:77:c1:27:51:ce:cb:e3:8c:ec:
                    ad:dc:30:fc:91:c4:2b:90:cc:7b:81:eb:d0:49:99:
                    90:2b:10:91:36:d4:1a:f8:dc:25:87:8f:5a:a3:bf:
                    ce:fa:b4:dc:fe:be:57:80:68:62:b2:ab:ea:c6:13:
                    12:7e:84:d1:b9:c9:43:61:8b:39:c3:79:bb:1b:01:
                    ba:ab:64:ab:81:95:9e:b8:fb:b8:32:46:b0:01:2f:
                    2b:a5:14:a9:07:41:88:fc:84:91:f8:24:c2:d3:c3:
                    47:4c:ae:d4:69:96:01:62:b5:e4:81:fe:21:77:67:
                    5d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:A1:64:76:39:09:0A:72:AB:00:B0:A1:BB:FB:02:B1:88:23:37:07
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:ad:06:31:84:8d:64:a7:b4:9f:2c:54:56:c6:3b:3c:02:08:
         c2:a4:5e:28:14:d9:32:c8:b2:0b:0a:2e:7a:55:8b:21:ba:02:
         46:f3:f8:a2:7d:4e:30:34:cc:04:af:57:2e:96:af:31:be:c4:
         86:ef:e9:60:48:f7:c1:d0:98:6a:4f:12:23:e5:46:01:32:62:
         7a:b8:51:ab:fe:6d:f4:08:64:09:2a:93:cc:68:b5:1b:ff:59:
         2c:3e:e5:12:61:94:35:0a:fe:25:bb:1d:97:51:0f:13:f3:bb:
         9f:c0:db:ea:b5:f4:4c:f7:d3:c1:1c:1f:49:1d:31:88:be:dd:
         45:4d:f8:0d:78:07:b0:c7:1b:a7:20:87:98:d1:82:55:00:b3:
         7f:f1:c4:3f:3e:b1:b2:af:06:c0:9c:05:29:37:2d:7b:b8:12:
         6e:2e:6e:51:39:e8:e6:c0:a4:4d:3d:48:b9:57:70:8e:7c:88:
         e6:bb:48:ca:e0:bd:0b:c0:6a:1a:12:6b:5d:02:2f:3e:44:a0:
         8d:1e:47:5e:ea:2e:71:88:26:ef:50:b9:f7:a9:38:64:06:f1:
         1b:6f:89:38:1c:bf:a5:e1:45:a1:3e:0b:8c:37:b6:ab:f8:8f:
         1c:b9:d6:f4:00:fa:db:e6:43:41:f6:c6:40:73:67:e7:f7:72:
         a7:11:56:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:43:07 2026 by rpki-client