Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136382e302f32342d3234203d3e2036303739.roa
File:                     3139392e3130312e3136382e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          YPMlqC7s+cmrHYDVqIO43JcC97BFbqV2CRbg6Z+uSoo=
Subject key identifier:   9A:39:00:24:24:97:20:65:A2:35:01:A0:46:0F:A6:52:39:EE:D4:23
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       49280A74C650E10BB53B4445B5F629E4D39FFAE4
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136382e302f32342d3234203d3e2036303739.roa
Signing time:             Thu 11 Jun 2026 14:53:37 +0000
ROA not before:           Thu 11 Jun 2026 14:48:37 +0000
ROA not after:            Thu 10 Jun 2027 14:53:37 +0000
asID:                     6079
IP address blocks:        199.101.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:28:0a:74:c6:50:e1:0b:b5:3b:44:45:b5:f6:29:e4:d3:9f:fa:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Jun 11 14:48:37 2026 GMT
            Not After : Jun 10 14:53:37 2027 GMT
        Subject: CN=9A39002424972065A23501A0460FA65239EED423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d3:fe:6d:7b:ac:01:54:ac:bb:11:25:0b:33:
                    95:79:ca:5b:98:8d:2a:39:28:41:14:33:10:22:70:
                    05:b7:73:74:52:f0:9f:7b:56:cd:22:69:eb:9e:aa:
                    7d:19:40:cd:75:e6:20:73:b6:df:50:d3:2a:1c:9a:
                    2d:e0:10:26:e6:04:03:5f:d4:80:ce:c8:07:04:f9:
                    99:5d:13:7f:80:17:1e:dd:48:2d:23:2e:b0:6f:aa:
                    2a:f7:52:49:c9:dd:4e:91:ea:b0:0a:79:ee:21:97:
                    28:0d:f6:7a:93:63:38:d7:08:ad:84:5a:36:55:05:
                    7e:3b:52:7c:19:d9:a5:dd:4d:bb:5b:d2:ad:c8:6a:
                    cc:b5:7c:4a:4f:91:49:69:b1:50:9a:24:2f:76:20:
                    e3:a0:13:13:82:0d:ee:c3:f7:ab:bb:77:0c:bb:76:
                    21:ad:d4:dc:db:3a:81:0b:18:e6:4f:a8:78:d8:62:
                    53:9a:44:49:6f:40:89:4c:a6:49:ea:20:3c:6d:5f:
                    84:0d:7b:11:53:39:c6:6c:53:78:df:c4:f0:90:45:
                    fd:3a:34:0b:51:ae:98:2f:e3:b0:a4:7c:bb:f9:3b:
                    45:98:bd:79:f3:24:5d:3b:4f:8d:55:18:57:73:04:
                    08:5c:ec:ed:f2:fa:c5:ec:f0:54:80:08:3a:05:8e:
                    36:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:39:00:24:24:97:20:65:A2:35:01:A0:46:0F:A6:52:39:EE:D4:23
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136382e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:c1:a1:3b:3d:fe:71:51:eb:55:91:05:53:63:d3:fa:ba:c9:
         79:98:cf:c6:6e:d5:ad:03:d6:07:68:84:cf:c4:9f:7c:b0:b6:
         bf:14:f1:2e:be:63:b6:38:63:2c:73:f0:eb:f9:b3:35:d2:56:
         32:d3:d7:82:7f:4a:63:29:00:f4:53:95:93:f7:bc:57:56:e7:
         11:da:a9:35:b5:05:28:c2:79:76:6d:61:48:3a:81:ba:15:22:
         d8:f2:c4:73:42:18:51:ba:a3:24:34:3f:fd:83:f1:0c:14:13:
         c8:17:fa:81:8b:3c:9a:53:32:b3:e1:12:96:93:bc:23:33:0a:
         e9:03:07:e0:5d:e5:98:b9:bb:bc:00:05:9a:dc:6f:7b:eb:63:
         33:9c:ab:4d:27:8e:7c:d8:00:73:8c:66:8c:51:b8:f1:1f:36:
         8a:52:ab:b1:56:da:85:7a:87:5d:a0:7e:6e:8d:85:64:6e:ef:
         d7:f7:93:bc:3a:c5:8e:a6:96:56:ca:22:6c:56:71:2d:63:89:
         3f:49:76:1e:0a:ce:fb:0c:e0:e9:5a:4c:75:3f:d5:3d:61:3d:
         80:ee:c2:0f:a5:0a:34:5e:6c:9c:a3:f6:a8:c4:ce:da:d6:95:
         a5:ee:2a:c6:d5:cd:55:1f:f9:25:b7:f3:5e:3a:88:39:f1:82:
         4c:b5:36:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:28 2026 by rpki-client