Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313437323831.roa
File:                     3139392e39312e3130332e302f32342d3234203d3e20313437323831.roa (raw, json)
Hash identifier:          pV9g5y9L3ScOh3oSiGj8cHK5NX1n6/QeEuMnHuOYPIw=
Subject key identifier:   53:D2:B8:8B:C9:45:7D:98:DB:30:13:D4:B4:34:68:9E:A2:0C:AE:61
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       1556923DC5F9535802215811081DF354CB2FCBB7
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313437323831.roa
Signing time:             Fri 18 Sep 2026 11:56:12 +0000
ROA not before:           Fri 18 Sep 2026 11:51:12 +0000
ROA not after:            Fri 17 Sep 2027 11:56:12 +0000
asID:                     147281
IP address blocks:        199.91.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 17:49:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:56:92:3d:c5:f9:53:58:02:21:58:11:08:1d:f3:54:cb:2f:cb:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Sep 18 11:51:12 2026 GMT
            Not After : Sep 17 11:56:12 2027 GMT
        Subject: CN=53D2B88BC9457D98DB3013D4B434689EA20CAE61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:89:e5:0a:e5:64:cb:f0:f1:02:7a:27:8b:
                    a3:1c:74:97:08:6f:26:4d:d1:f8:42:02:45:02:b3:
                    b9:a8:b8:0b:67:ea:d1:f6:48:a8:ae:82:c6:a7:6e:
                    d6:b2:63:31:92:b7:13:81:c4:02:05:2a:f2:93:b1:
                    76:a9:e5:18:0e:cc:27:81:9c:cd:61:5c:ee:82:de:
                    83:76:c6:bf:c2:78:3c:bc:e2:e1:50:2a:f0:55:fa:
                    d4:fe:c6:59:1c:b3:cd:2b:0e:a7:10:76:00:42:d2:
                    ab:ae:6c:49:df:13:ed:27:f3:69:b7:83:3f:54:e3:
                    6c:c9:1c:86:bb:3e:99:e5:34:d8:98:c9:7e:22:e6:
                    9c:c0:24:b3:fb:30:a5:dd:32:f0:95:f8:fd:08:66:
                    91:15:26:06:96:9e:3c:c0:78:84:ec:0f:9e:df:4e:
                    10:79:ec:3c:34:00:2c:4b:18:ab:04:42:e9:ff:c5:
                    41:8d:de:e5:0c:2e:f9:01:e7:69:9f:b9:bf:8b:63:
                    29:df:1d:b5:7b:63:e4:ae:d4:79:d6:e8:2b:4b:1d:
                    ad:3c:1a:e6:a4:b0:3f:75:e2:8d:8c:36:46:4c:c8:
                    e2:ba:59:90:67:61:fe:d1:aa:35:fa:5e:e0:d2:aa:
                    53:b9:65:0b:95:54:a9:d7:2f:6d:69:60:9c:9f:ed:
                    30:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D2:B8:8B:C9:45:7D:98:DB:30:13:D4:B4:34:68:9E:A2:0C:AE:61
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130332e302f32342d3234203d3e20313437323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c3:2b:36:d8:e2:8a:e9:b6:b8:91:94:68:cc:5f:8c:cd:78:
         e4:8e:08:5e:73:64:de:66:a1:fc:2a:4b:66:30:ce:9f:4d:f2:
         be:66:d0:30:fe:ff:11:c1:dd:bd:de:94:8c:ab:b1:71:85:cc:
         e0:12:a1:3b:ee:9c:9b:20:8c:35:d2:13:3f:b9:4a:50:39:21:
         c3:77:fc:b1:18:75:47:f6:8f:df:bf:22:64:14:72:3d:74:98:
         2e:7e:9e:fd:bc:48:d5:a6:4f:38:78:89:eb:ce:d1:0c:0c:d7:
         ea:9e:5c:1a:2c:10:71:f0:05:f2:05:73:ba:0e:7a:c1:9f:e6:
         8a:31:15:3b:34:8d:99:36:d4:86:6a:b9:9a:6d:93:d4:60:46:
         41:22:55:5a:d2:1f:9c:86:a1:4f:06:eb:2d:d2:b0:85:00:87:
         5d:2c:8b:54:04:b6:57:e3:7e:32:d9:92:e3:6f:eb:07:71:d8:
         58:04:3f:00:0b:5f:40:74:33:e5:88:71:1b:1e:c2:45:fe:9c:
         f8:f5:8b:0d:0b:c9:3d:51:32:d4:bf:62:f5:57:08:fa:16:12:
         da:3a:56:69:5b:d4:30:11:08:2b:ae:1a:a9:cb:6c:f8:db:ff:
         6d:d3:c3:80:48:91:a6:e4:47:30:52:0b:72:e9:58:de:66:ec:
         56:c5:2c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:52:07 2026 by rpki-client