Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
File:                     3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa (raw, json)
Hash identifier:          bIjrLurEYBiouDJv9bzHea4NyZPNjddeVfDnIHojgSM=
Subject key identifier:   64:AE:F6:A2:3A:3B:E5:66:11:0F:56:78:B5:72:70:1C:16:A8:3F:43
Certificate issuer:       /CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
Certificate serial:       1305859CADD189A7AD9A2DA706A3D66FE5F95036
Authority key identifier: FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa
Signing time:             Wed 05 Nov 2025 04:28:03 +0000
ROA not before:           Wed 05 Nov 2025 04:23:03 +0000
ROA not after:            Wed 04 Nov 2026 04:28:03 +0000
asID:                     54110
IP address blocks:        199.182.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/a816e8ad-9bcc-46da-afd8-70dd97bd0232.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/a816e8ad-9bcc-46da-afd8-70dd97bd0232.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Nov 2025 19:55:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:05:85:9c:ad:d1:89:a7:ad:9a:2d:a7:06:a3:d6:6f:e5:f9:50:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7
        Validity
            Not Before: Nov  5 04:23:03 2025 GMT
            Not After : Nov  4 04:28:03 2026 GMT
        Subject: CN=64AEF6A23A3BE566110F5678B572701C16A83F43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b2:e5:94:00:48:5a:a3:d5:db:67:d8:aa:d8:
                    0b:39:53:07:cc:17:21:2b:73:f9:8b:65:89:82:71:
                    f5:86:0c:36:4f:1e:7c:99:3a:13:98:4a:c0:27:3f:
                    e3:f2:3c:dc:81:30:72:26:ce:37:bd:69:10:bf:8e:
                    ce:20:e6:49:38:d5:3f:60:2b:14:10:a6:36:57:22:
                    01:3a:45:ee:22:cc:6d:7c:2c:e8:26:76:36:98:44:
                    60:94:d7:ac:c4:f3:a5:cb:1f:a4:18:61:03:c3:5f:
                    87:cc:71:fa:d8:a7:19:32:11:ca:e5:43:cf:c0:7c:
                    2f:81:9a:b4:9f:ae:c1:5e:50:07:55:9b:3b:e2:a1:
                    51:a0:fd:f7:5a:e5:ed:14:40:85:64:c0:97:ee:cb:
                    e0:28:9e:e9:c6:31:be:e9:89:27:58:68:6d:ad:7e:
                    ac:bc:bd:32:b9:7a:11:ee:e2:51:95:0d:be:8a:11:
                    e0:8e:67:23:35:63:76:2e:5e:dd:bb:65:a0:ad:01:
                    2e:e5:db:e3:17:be:05:9f:e2:16:5c:24:c2:fb:fb:
                    28:bd:06:11:41:20:71:a2:30:89:a5:b1:06:44:08:
                    16:21:b3:9f:5a:25:af:f5:d8:b5:62:90:7a:40:30:
                    38:56:f0:82:ea:70:11:da:cd:25:70:c2:5b:13:a1:
                    a7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AE:F6:A2:3A:3B:E5:66:11:0F:56:78:B5:72:70:1C:16:A8:3F:43
            X509v3 Authority Key Identifier:
                keyid:FB:25:1C:C7:AA:B2:9D:28:F1:77:56:B8:8E:15:DC:43:DC:5A:CF:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/FB251CC7AAB29D28F17756B88E15DC43DC5ACF09.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a816e8ad-9bcc-46da-afd8-70dd97bd0232/69277d0a9b59c125e8d2e720fe983dd0f9ec34ef2ebcaba8f7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e01856ba3bdd43d3c/0/3139392e3138322e3133322e302f32322d3234203d3e203534313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:45:80:b6:79:9e:7b:95:e8:e7:93:10:e9:87:de:0e:09:8b:
         30:17:d7:c0:6d:42:48:4d:8a:ec:ea:02:79:7d:77:79:a1:6e:
         bc:8c:5a:71:5c:4d:52:7c:a7:cc:d7:5f:d8:da:5c:b5:69:9f:
         a2:5a:f5:d5:1d:be:9a:99:5b:05:f8:91:2e:b3:3f:92:bc:77:
         f3:50:4a:6b:a1:25:ac:f3:c7:f9:82:eb:91:3e:dc:e3:eb:02:
         b9:1e:67:25:a3:32:43:4e:cb:e8:f6:70:72:4b:dc:08:88:50:
         bb:81:99:e3:11:ff:de:c2:a0:b3:dd:d3:c8:e5:50:cc:0c:b5:
         ec:bc:22:06:79:08:c0:e4:c9:af:21:06:77:3b:9a:bf:29:d4:
         01:d2:04:e3:fb:71:60:ad:b7:40:5d:b4:72:e2:80:19:1b:9d:
         9c:4c:27:cc:18:9b:11:00:66:d2:39:ef:48:d9:26:69:cd:b9:
         67:8c:4e:49:c5:c2:c3:21:37:01:98:4b:13:e0:cc:d2:bd:5b:
         2d:75:21:4b:d5:fd:a9:50:9c:e1:8c:fb:92:f8:bc:0f:dc:80:
         21:39:c0:12:53:49:61:44:e0:bb:fc:37:11:71:ef:54:87:02:
         c2:c5:64:3e:50:1d:df:01:61:ca:1d:67:6a:2a:be:83:0e:32:
         0f:ec:fd:cc
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUEwWFnK3Riaetmi2nBqPWb+X5UDYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjkyNzdkMGE5YjU5YzEyNWU4ZDJlNzIwZmU5ODNkZDBm
OWVjMzRlZjJlYmNhYmE4ZjcwHhcNMjUxMTA1MDQyMzAzWhcNMjYxMTA0MDQyODAz
WjAzMTEwLwYDVQQDEyg2NEFFRjZBMjNBM0JFNTY2MTEwRjU2NzhCNTcyNzAxQzE2
QTgzRjQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLLllABIWqPV
22fYqtgLOVMHzBchK3P5i2WJgnH1hgw2Tx58mToTmErAJz/j8jzcgTByJs43vWkQ
v47OIOZJONU/YCsUEKY2VyIBOkXuIsxtfCzoJnY2mERglNesxPOlyx+kGGEDw1+H
zHH62KcZMhHK5UPPwHwvgZq0n67BXlAHVZs74qFRoP33WuXtFECFZMCX7svgKJ7p
xjG+6YknWGhtrX6svL0yuXoR7uJRlQ2+ihHgjmcjNWN2Ll7du2WgrQEu5dvjF74F
n+IWXCTC+/sovQYRQSBxojCJpbEGRAgWIbOfWiWv9di1YpB6QDA4VvCC6nAR2s0l
cMJbE6GnowIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGSu9qI6O+VmEQ9WeLVycBwW
qD9DMB8GA1UdIwQYMBaAFPslHMeqsp0o8XdWuI4V3EPcWs8JMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NmJhM2JkZDQzZDNjLzAv
RkIyNTFDQzdBQUIyOUQyOEYxNzc1NkI4OEUxNURDNDNEQzVBQ0YwOS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2E4MTZlOGFkLTliY2MtNDZkYS1hZmQ4LTcwZGQ5N2JkMDIzMi82OTI3
N2QwYTliNTljMTI1ZThkMmU3MjBmZTk4M2RkMGY5ZWMzNGVmMmViY2FiYThmNy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTZi
YTNiZGQ0M2QzYy8wLzMxMzkzOTJlMzEzODMyMmUzMTMzMzIyZTMwMmYzMjMyMmQz
MjM0MjAzZDNlMjAzNTM0MzEzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx7aEMA0GCSqGSIb3DQEB
CwUAA4IBAQCERYC2eZ57lejnkxDph94OCYswF9fAbUJITYrs6gJ5fXd5oW68jFpx
XE1SfKfM11/Y2ly1aZ+iWvXVHb6amVsF+JEusz+SvHfzUEproSWs88f5guuRPtzj
6wK5HmclozJDTsvo9nByS9wIiFC7gZnjEf/ewqCz3dPI5VDMDLXsvCIGeQjA5Mmv
IQZ3O5q/KdQB0gTj+3FgrbdAXbRy4oAZG52cTCfMGJsRAGbSOe9I2SZpzblnjE5J
xcLDITcBmEsT4MzSvVstdSFL1f2pUJzhjPuS+LwP3IAhOcASU0lhROC7/DcRce9U
hwLCxWQ+UB3fAWHKHWdqKr6DDjIP7P3M
-----END CERTIFICATE-----
Generated at Fri Nov 7 12:45:05 2025 by rpki-client