Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa
File:                     3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa (raw, json)
Hash identifier:          UIyEIquglC4ukj/tSJtJn1K0HGtV7ZIcUB4eJGYnZL4=
Subject key identifier:   10:B7:55:33:06:D0:0D:62:F0:A9:66:A9:BA:8F:9B:63:51:DA:0D:BF
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       5200C8621C287F5B2CAB7FE21E488FE5A0BC30BD
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa
Signing time:             Thu 13 Aug 2026 07:36:20 +0000
ROA not before:           Thu 13 Aug 2026 07:31:20 +0000
ROA not after:            Thu 12 Aug 2027 07:36:20 +0000
asID:                     1239
IP address blocks:        199.101.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 11:38:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:00:c8:62:1c:28:7f:5b:2c:ab:7f:e2:1e:48:8f:e5:a0:bc:30:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Aug 13 07:31:20 2026 GMT
            Not After : Aug 12 07:36:20 2027 GMT
        Subject: CN=10B7553306D00D62F0A966A9BA8F9B6351DA0DBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a3:9a:3f:48:a3:4a:61:de:a8:60:3c:7f:95:
                    28:30:ed:49:4b:ac:4c:57:33:3b:42:b6:65:74:ae:
                    cf:d5:81:dd:e5:29:03:03:31:14:1d:43:e6:67:a3:
                    ae:eb:20:80:76:89:a2:36:eb:37:5a:0a:80:f4:c8:
                    dc:ed:56:db:a1:46:12:9e:1e:66:b4:85:62:c8:c7:
                    37:79:4b:07:11:5d:61:3d:1a:7e:6b:6a:f6:a3:bd:
                    a2:cf:b2:72:81:56:5c:0b:67:02:bc:b6:a2:97:9e:
                    14:30:7d:4f:56:28:98:a6:3b:80:63:75:34:91:92:
                    12:9d:01:ef:55:ce:c6:d7:c0:83:99:65:b7:10:b4:
                    42:36:b4:78:e8:a1:9d:e4:84:af:ba:34:12:fb:fd:
                    67:ca:cf:95:a8:25:1f:f2:11:94:69:91:96:5c:24:
                    0f:b3:7d:c2:3f:66:23:43:d9:bf:e6:17:ce:f7:15:
                    c4:33:54:de:a7:cf:2d:88:d1:de:a9:33:ae:e8:fb:
                    dd:8e:48:cd:a8:66:44:cc:9b:1a:f2:96:b9:8c:f5:
                    8a:b3:2d:cc:2e:ee:3d:f2:09:2f:18:45:82:8f:79:
                    c0:63:22:f3:ce:92:b2:15:14:0c:82:a1:24:b7:7b:
                    fa:2e:e6:1e:50:f3:d5:38:eb:f1:e9:bd:2d:93:0a:
                    b4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B7:55:33:06:D0:0D:62:F0:A9:66:A9:BA:8F:9B:63:51:DA:0D:BF
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137312e302f32342d3234203d3e2031323339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:50:6b:79:bb:3d:bb:c4:6c:5b:59:a8:5e:d4:4d:b9:90:42:
         92:71:21:81:c2:3b:6f:52:66:6d:cd:85:2c:91:51:fb:04:41:
         cb:7d:2d:72:b9:7d:29:3e:ec:6d:be:11:4a:31:b8:7f:d6:5e:
         af:c9:c6:c9:c7:43:2c:58:30:f3:88:27:18:18:14:68:eb:67:
         a0:53:59:7d:b7:e0:15:20:85:00:8e:ad:90:94:d8:d7:f1:7c:
         ce:90:d1:3d:2d:b3:1e:52:a0:6b:a5:30:10:b6:d0:43:4b:2c:
         c1:94:9a:52:80:e5:68:36:70:6c:66:47:ec:be:8f:a7:4d:90:
         29:d4:8c:35:59:17:25:54:4a:78:e5:20:36:aa:fc:8a:2a:cc:
         13:50:2b:c1:49:bc:7b:f7:55:95:c7:02:a6:d4:af:2f:89:96:
         ba:83:bb:ad:e9:a0:72:8e:5f:cf:c7:5b:14:37:1e:a5:3b:f3:
         f0:17:c4:c5:8b:67:c0:6c:a0:37:1b:34:8b:9b:56:1f:bc:d7:
         f9:46:6c:a9:5d:08:56:b4:31:56:65:56:5f:47:6e:52:dd:08:
         9d:1b:3b:6e:23:1a:f5:36:cb:30:d9:d2:aa:6e:ee:5e:e6:ac:
         c9:d8:e3:20:25:d5:f5:45:04:c0:b5:3d:75:7b:b9:77:d7:70:
         71:6d:75:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:16:39 2026 by rpki-client