Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39372e302f32342d3234203d3e203233343730.roa
File:                     3139392e39312e39372e302f32342d3234203d3e203233343730.roa (raw, json)
Hash identifier:          VmohnWpGROXNZfZB08dSB8GpMOWXiBT39G5V9PmshiA=
Subject key identifier:   37:E8:D0:E5:A5:6D:AC:D9:15:5B:BF:04:F2:C7:3D:D3:B7:70:0B:D5
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       2265AB49F44354C11D989A4B8DDC26DBD06AA4A0
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39372e302f32342d3234203d3e203233343730.roa
Signing time:             Wed 08 Apr 2026 18:35:56 +0000
ROA not before:           Wed 08 Apr 2026 18:30:56 +0000
ROA not after:            Wed 07 Apr 2027 18:35:56 +0000
asID:                     23470
IP address blocks:        199.91.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:65:ab:49:f4:43:54:c1:1d:98:9a:4b:8d:dc:26:db:d0:6a:a4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Apr  8 18:30:56 2026 GMT
            Not After : Apr  7 18:35:56 2027 GMT
        Subject: CN=37E8D0E5A56DACD9155BBF04F2C73DD3B7700BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:09:27:cc:3d:84:18:f0:f1:75:0d:b7:c6:c6:
                    a6:10:ef:ff:6f:74:c0:1d:ce:18:eb:4c:1c:9b:5d:
                    76:0e:12:a4:0a:10:ac:22:df:d1:45:40:0b:2f:15:
                    84:83:3e:2d:ff:45:72:49:59:2c:bf:3d:75:ff:3b:
                    ed:e0:1a:a1:62:3d:56:2c:57:63:60:b3:8d:67:a4:
                    2e:5b:dc:1c:e4:35:86:66:f2:df:55:17:15:d5:b8:
                    18:d3:eb:a2:c0:51:aa:03:79:d1:a1:35:3f:db:ce:
                    54:2f:ca:af:66:aa:4e:23:0e:a3:cc:cb:4b:82:48:
                    af:16:e9:1c:35:60:58:65:d9:e3:0b:a4:f6:f9:1d:
                    48:99:44:48:b7:73:ec:a4:50:d4:a6:21:4e:50:f2:
                    90:8f:9f:40:b5:48:b4:a1:5f:6a:22:6d:8e:2e:db:
                    aa:e1:02:1a:50:0e:a7:f5:5b:03:b2:67:db:1a:18:
                    29:a7:42:ac:11:8e:69:4b:d3:31:7d:5b:4e:e2:59:
                    d4:00:1c:4f:b7:07:4f:db:29:86:80:b5:75:a7:73:
                    a7:a3:08:03:55:10:d6:50:73:f3:95:0c:c6:4e:0b:
                    c1:99:e6:4a:aa:70:8b:b0:11:6f:dd:41:e5:c6:77:
                    12:95:a8:b5:4a:2a:3a:13:06:84:9d:b2:16:ee:54:
                    30:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E8:D0:E5:A5:6D:AC:D9:15:5B:BF:04:F2:C7:3D:D3:B7:70:0B:D5
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39372e302f32342d3234203d3e203233343730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:35:ae:f1:b8:6e:7a:97:3c:df:97:02:ce:30:de:07:f9:f4:
         6d:68:d9:e5:8b:31:0f:7d:44:db:98:37:98:dc:6d:b3:7f:6b:
         57:e9:ad:4e:b9:d1:42:72:98:91:5d:90:02:d5:eb:6e:88:df:
         f3:a0:fe:68:9c:d9:89:84:2f:fc:f1:0f:66:ae:15:a3:fe:08:
         97:5c:01:ab:43:68:1a:5d:7d:8d:38:05:91:7f:b8:17:3e:ac:
         bb:a6:52:cb:7d:fc:f5:a7:b2:7f:41:2f:d3:b7:d5:83:10:40:
         f7:a6:f0:9c:52:c6:7d:55:fa:92:3c:ce:ae:64:05:1d:e6:68:
         77:ab:16:5b:a3:7e:b8:a5:63:5e:91:72:16:32:cb:a2:6d:08:
         08:84:a4:e5:ec:32:72:64:e9:3d:79:c9:12:9f:4c:c1:ae:d0:
         ae:6e:7c:f1:80:89:c1:95:92:83:7c:96:50:11:a5:aa:5f:f2:
         7f:5e:50:b9:dd:d7:87:c4:63:1a:84:50:7e:55:a8:c9:cf:73:
         3c:d0:11:ac:08:7c:f9:98:e4:ff:af:db:32:2c:4b:d6:8c:d0:
         07:b5:70:dd:38:23:90:61:6c:67:d9:59:8a:42:5a:c7:59:fa:
         04:b1:6d:92:9f:b3:45:ae:be:74:3d:11:f8:59:19:0d:29:fc:
         06:d4:e9:b5
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUImWrSfRDVMEdmJpLjdwm29BqpKAwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjYwNDA4MTgzMDU2WhcNMjcwNDA3MTgzNTU2
WjAzMTEwLwYDVQQDEygzN0U4RDBFNUE1NkRBQ0Q5MTU1QkJGMDRGMkM3M0REM0I3
NzAwQkQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AknzD2EGPDx
dQ23xsamEO//b3TAHc4Y60wcm112DhKkChCsIt/RRUALLxWEgz4t/0VySVksvz11
/zvt4BqhYj1WLFdjYLONZ6QuW9wc5DWGZvLfVRcV1bgY0+uiwFGqA3nRoTU/285U
L8qvZqpOIw6jzMtLgkivFukcNWBYZdnjC6T2+R1ImURIt3PspFDUpiFOUPKQj59A
tUi0oV9qIm2OLtuq4QIaUA6n9VsDsmfbGhgpp0KsEY5pS9MxfVtO4lnUABxPtwdP
2ymGgLV1p3OnowgDVRDWUHPzlQzGTgvBmeZKqnCLsBFv3UHlxncSlai1Sio6EwaE
nbIW7lQw3QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFDfo0OWlbazZFVu/BPLHPdO3
cAvVMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzkzNzJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzMzNDM3MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADHW2EwDQYJKoZIhvcNAQELBQAD
ggEBAEs1rvG4bnqXPN+XAs4w3gf59G1o2eWLMQ99RNuYN5jcbbN/a1fprU650UJy
mJFdkALV626I3/Og/mic2YmEL/zxD2auFaP+CJdcAatDaBpdfY04BZF/uBc+rLum
Ust9/PWnsn9BL9O31YMQQPem8JxSxn1V+pI8zq5kBR3maHerFlujfrilY16RchYy
y6JtCAiEpOXsMnJk6T15yRKfTMGu0K5ufPGAicGVkoN8llARpapf8n9eULnd14fE
YxqEUH5VqMnPczzQEawIfPmY5P+v2zIsS9aM0Ae1cN04I5BhbGfZWYpCWsdZ+gSx
bZKfs0WuvnQ9EfhZGQ0p/AbU6bU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:00 2026 by rpki-client