Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39382e302f32342d3234203d3e203631333137.roa
File:                     3139392e39312e39382e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          zwHldhOO/YLMaaa7PU3TtJsgB5nKkzwaYZ4MInaJYH8=
Subject key identifier:   8E:3E:F2:CD:21:51:C3:19:16:96:3D:95:21:E6:A1:17:42:89:8F:E9
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       2FD4A2259A4E9D865C7C2691FC5DCA0CFB1C38E7
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39382e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 08 Apr 2026 18:35:56 +0000
ROA not before:           Wed 08 Apr 2026 18:30:56 +0000
ROA not after:            Wed 07 Apr 2027 18:35:56 +0000
asID:                     61317
IP address blocks:        199.91.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 18 Apr 2026 00:07:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d4:a2:25:9a:4e:9d:86:5c:7c:26:91:fc:5d:ca:0c:fb:1c:38:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Apr  8 18:30:56 2026 GMT
            Not After : Apr  7 18:35:56 2027 GMT
        Subject: CN=8E3EF2CD2151C31916963D9521E6A11742898FE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:37:3b:d2:52:06:0d:45:81:a5:75:42:90:c9:
                    88:1b:7e:5d:c2:fc:d9:1f:52:1e:ca:a7:bd:e7:ca:
                    d0:da:0a:ce:f9:29:6e:ca:5e:4c:e6:83:05:6c:11:
                    43:f5:f5:19:14:15:ea:d4:74:5b:5b:be:22:3a:60:
                    0e:12:6a:c8:66:80:04:ed:8c:f9:35:1b:90:24:08:
                    b7:22:99:77:c1:4e:2e:f4:70:81:12:6d:cd:a7:c1:
                    aa:c7:8b:d8:80:3f:19:a7:ce:35:f2:81:b4:5b:e4:
                    e4:bf:fc:94:77:af:3b:cb:9f:f7:14:cb:7a:da:2c:
                    b2:e1:12:df:aa:c9:60:d7:37:0a:c7:c2:6b:87:ec:
                    a3:86:70:0a:61:17:52:82:73:94:a8:62:a2:24:f7:
                    83:5f:55:aa:0c:40:6c:21:2e:be:85:f7:ee:49:f6:
                    78:a3:12:37:df:8d:da:b6:9d:9b:52:5d:bc:9f:a3:
                    8c:f9:73:00:36:58:8d:17:a9:76:eb:be:02:fb:20:
                    d6:0a:c8:7f:13:6c:ba:37:67:85:7e:e0:ff:50:07:
                    c2:99:60:d2:d4:5c:63:4d:93:85:dd:af:02:5a:72:
                    e6:f5:9e:db:c0:d3:2d:4f:57:59:fc:45:e0:81:db:
                    ba:31:8a:4a:35:07:cb:a7:bf:2c:3d:cb:40:32:81:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:3E:F2:CD:21:51:C3:19:16:96:3D:95:21:E6:A1:17:42:89:8F:E9
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39382e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:8f:58:0a:16:5a:49:8f:fe:09:10:b7:29:23:a3:27:86:48:
         fb:0d:88:d4:b4:07:95:ed:8d:fa:9c:b6:17:2d:89:e7:cc:38:
         f4:d3:a7:e0:23:a9:be:5d:56:b0:d6:cc:54:d4:e3:f1:11:8a:
         9a:27:c4:10:1a:bc:9d:97:85:0e:90:0d:ac:71:dc:16:85:7b:
         ca:59:04:b8:9e:74:4e:38:95:2d:bf:04:dc:36:97:9e:0c:20:
         60:2b:08:20:38:c1:95:51:25:85:f9:71:bc:3c:fd:b4:f6:df:
         53:a6:5e:3e:06:e7:f8:56:68:98:23:78:5b:01:41:b5:66:e0:
         d9:d0:3e:90:73:a8:f1:8b:4d:7a:8e:e0:e2:89:af:f7:47:12:
         eb:d2:d6:24:08:00:85:bd:96:8f:4c:fd:11:f6:74:5b:46:c5:
         55:f4:2f:c2:52:a8:df:49:10:e1:e2:96:df:7b:1e:4d:32:e6:
         c9:b9:5f:45:89:8f:00:f3:f8:b4:2a:81:f9:40:77:77:ba:62:
         d1:ca:32:17:94:7d:a9:12:6f:34:c9:68:e5:85:2f:ba:bf:f3:
         0a:53:31:d2:19:c8:95:69:73:07:c2:ec:7b:9c:89:c7:9a:71:
         f4:9a:5c:f0:8d:39:10:c8:7e:63:67:d6:bf:06:eb:27:6a:e8:
         dc:3f:94:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:39:40 2026 by rpki-client