Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2036303739.roa
File:                     3139392e3130312e3136392e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          jQlbhC97Hdr7YF09iIrWqyzQzqFHdOXGPiOssTCtRlI=
Subject key identifier:   93:B8:FB:04:35:C7:E8:B6:7F:12:64:B5:2A:9F:B6:19:A8:E2:81:7D
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       632817F751FF28EEA7A4A8356049CE9C08BDCFB3
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2036303739.roa
Signing time:             Thu 11 Jun 2026 14:53:38 +0000
ROA not before:           Thu 11 Jun 2026 14:48:38 +0000
ROA not after:            Thu 10 Jun 2027 14:53:38 +0000
asID:                     6079
IP address blocks:        199.101.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:19:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:28:17:f7:51:ff:28:ee:a7:a4:a8:35:60:49:ce:9c:08:bd:cf:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Jun 11 14:48:38 2026 GMT
            Not After : Jun 10 14:53:38 2027 GMT
        Subject: CN=93B8FB0435C7E8B67F1264B52A9FB619A8E2817D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:88:0d:85:c8:6c:a1:f1:cc:52:d8:72:93:0f:
                    0b:d3:e8:9d:9c:99:80:50:17:6a:c2:84:53:1e:28:
                    2e:55:4d:d4:c0:75:54:a1:d0:db:86:38:0e:ce:84:
                    4f:8c:22:5c:12:12:d2:1d:ae:1c:9f:bb:91:b2:a4:
                    2d:4f:d8:c4:54:7e:22:50:d6:b9:62:61:8a:f7:68:
                    09:45:f6:51:b6:7d:b2:c6:83:f9:2c:df:d4:b6:22:
                    3e:d6:a7:c1:17:85:b2:dd:83:44:94:31:de:6e:3f:
                    31:0c:fb:ce:d8:c9:0b:67:73:b8:f7:1d:ae:ed:f6:
                    45:63:e6:37:86:67:e7:03:a9:ac:ff:1c:f7:8c:81:
                    90:a3:3d:e3:02:82:3a:1e:ba:31:ac:f0:7c:d1:a7:
                    d5:aa:62:1e:87:b7:79:22:69:66:12:19:c3:0b:e4:
                    fe:ff:13:7f:3a:60:7c:ca:8c:29:ea:f9:a2:96:b8:
                    88:85:50:c4:00:da:81:3c:2a:11:8b:5f:56:17:db:
                    12:d6:46:f9:53:ee:01:82:51:27:62:ab:23:14:4e:
                    1a:da:dd:b2:f4:78:0b:8f:c6:0f:8a:4d:5d:9c:fa:
                    c2:59:3c:63:0c:2e:6c:ea:4f:dc:22:d8:0b:9f:7b:
                    9b:af:38:af:54:34:37:49:23:15:00:6e:79:68:c8:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B8:FB:04:35:C7:E8:B6:7F:12:64:B5:2A:9F:B6:19:A8:E2:81:7D
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:65:ad:67:fc:35:de:16:bd:ac:2b:4e:74:80:e1:18:e5:9d:
         a6:e2:f2:36:88:d8:35:7d:92:94:27:c8:23:8c:92:61:e1:ea:
         31:2b:ff:b4:fe:39:6a:a6:3a:5d:37:d9:29:2b:4d:ec:be:37:
         3c:6d:de:fb:c4:a6:7c:cb:8e:c2:43:41:2e:54:07:56:6b:95:
         b1:dc:0d:3d:b8:2a:99:7d:43:33:1f:59:c6:23:5d:1b:b2:91:
         89:56:29:98:3f:cb:49:cf:a3:66:be:00:0d:5b:17:e6:67:a8:
         ca:87:c0:61:48:20:3e:be:06:1c:4f:88:53:0a:1c:15:9f:26:
         69:7f:a5:c8:c8:06:f7:65:30:39:c0:38:57:d5:e4:05:b3:f7:
         f8:87:23:6e:b6:db:4b:22:f6:6d:c1:4e:79:83:7e:78:e9:eb:
         cd:8a:ce:a4:44:03:75:49:57:8d:08:2a:65:03:74:94:c7:a0:
         37:1f:6e:37:44:e3:b5:28:73:81:58:0d:af:8a:3d:c6:7f:38:
         dc:f5:a4:e1:ba:2b:04:42:1f:88:fa:0e:98:f4:ba:a0:17:bc:
         98:41:f1:7c:77:82:00:57:85:6e:8a:32:c3:2e:2c:33:63:5c:
         a1:40:a2:c4:df:10:cc:61:42:3e:a1:fa:3c:94:e1:ac:4c:05:
         09:a8:0f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:36 2026 by rpki-client