Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e20323633373032.roa
File:                     3137322e39392e32312e302f32342d3234203d3e20323633373032.roa (raw, json)
Hash identifier:          30EUEn3ScFWbEJw73Vzt3vH04aWgE5Mhab3Xb2D4tvU=
Subject key identifier:   1C:9F:2E:AC:41:23:8F:F0:00:13:54:BD:8A:3F:97:B2:7C:15:85:5A
Certificate issuer:       /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial:       482AC872D48BDC0ACBF400223D377D48659D3CAF
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e20323633373032.roa
Signing time:             Tue 22 Sep 2026 03:36:20 +0000
ROA not before:           Tue 22 Sep 2026 03:31:20 +0000
ROA not after:            Tue 21 Sep 2027 03:36:20 +0000
asID:                     263702
IP address blocks:        172.99.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Sep 2026 00:02:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:2a:c8:72:d4:8b:dc:0a:cb:f4:00:22:3d:37:7d:48:65:9d:3c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
        Validity
            Not Before: Sep 22 03:31:20 2026 GMT
            Not After : Sep 21 03:36:20 2027 GMT
        Subject: CN=1C9F2EAC41238FF0001354BD8A3F97B27C15855A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:64:29:1d:03:e0:5d:e9:6b:95:e7:4f:6b:98:
                    e5:30:ac:f2:28:50:b3:74:93:ce:e6:25:df:55:a2:
                    83:8a:68:ff:d9:68:5b:de:ed:67:81:87:c8:d9:41:
                    6e:09:4e:cb:eb:72:9a:7f:43:a9:14:31:df:89:5d:
                    a3:84:32:9c:b7:0f:9b:b2:d5:02:b1:ad:72:dd:81:
                    89:34:dc:39:21:05:96:da:84:2a:04:16:7d:28:0c:
                    cb:b9:ad:23:c1:33:30:10:f6:b3:89:b8:81:c6:38:
                    0f:ea:dd:a4:c4:67:c5:ae:43:47:6a:97:dd:1a:f2:
                    61:c5:e0:59:4b:77:f6:5d:2b:e6:e8:dd:99:e7:f0:
                    66:c8:5d:a0:1c:d0:d4:7b:ae:d1:64:40:4d:82:98:
                    8e:4f:d6:f2:be:94:8d:22:77:e3:9b:b6:8d:23:b8:
                    3a:0f:15:57:6a:64:58:95:8a:1b:da:9d:05:0d:7b:
                    a3:1e:d3:da:44:f4:c0:57:84:bd:bf:86:48:31:d3:
                    75:77:61:7f:93:ef:28:98:2b:e4:3b:49:76:b2:a3:
                    86:f0:a6:c5:bb:72:21:cc:62:52:1b:bc:3b:73:ff:
                    3d:89:36:c1:89:d8:6f:73:99:1c:d0:af:f9:bb:b1:
                    e7:96:0e:72:36:e3:b2:11:c3:87:37:ed:50:b9:11:
                    c9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:9F:2E:AC:41:23:8F:F0:00:13:54:BD:8A:3F:97:B2:7C:15:85:5A
            X509v3 Authority Key Identifier:
                keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32312e302f32342d3234203d3e20323633373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e3:0a:06:72:90:84:c1:27:3d:55:6e:0d:74:7d:21:8c:72:73:
         3a:75:05:55:fc:a6:db:82:d4:4e:b0:5d:4e:a1:8b:f0:86:3f:
         9c:0a:27:aa:be:61:be:a5:23:fb:43:36:29:ae:86:3c:a8:f0:
         6d:ec:72:e0:56:da:c5:1c:47:70:44:a4:2f:0d:7e:f3:46:be:
         fe:71:a6:a0:9e:b4:0a:16:b1:16:99:68:72:01:2c:ea:96:63:
         71:bd:b9:e3:5f:45:6e:52:f5:71:24:03:42:07:5e:7b:ec:00:
         26:bc:cd:5d:54:d5:a5:90:ed:54:9f:9b:ed:48:3a:28:7c:42:
         54:41:5c:84:7c:09:f2:d2:a3:34:24:b0:21:37:81:5b:64:e9:
         b6:f6:96:cc:2b:69:c9:82:2d:4c:e9:83:dd:0e:a9:01:a2:30:
         34:f7:de:71:0e:ae:a1:03:40:f8:4a:2e:22:33:c7:b4:ee:09:
         bb:e5:cc:f6:1c:75:25:5d:17:9c:fd:9e:cc:40:b2:73:4e:4c:
         16:10:d3:93:64:38:8e:0a:b4:ed:02:05:9c:21:87:59:35:22:
         9a:95:a2:91:7c:a4:26:72:d9:4e:c0:e6:fd:e2:0d:a1:fa:3a:
         71:2d:bf:56:49:fb:00:22:15:42:22:7b:37:f4:9e:9f:9f:e0:
         37:8d:64:2c
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUSCrIctSL3ArL9AAiPTd9SGWdPK8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyOGFhODAwYTgxNGFmMGRlYjA2NmE5NWY3OTk2ZjgzY2Q3
MjlhNDhkMDc1YjA5NTJmYmUwHhcNMjYwOTIyMDMzMTIwWhcNMjcwOTIxMDMzNjIw
WjAzMTEwLwYDVQQDEygxQzlGMkVBQzQxMjM4RkYwMDAxMzU0QkQ4QTNGOTdCMjdD
MTU4NTVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumQpHQPgXelr
ledPa5jlMKzyKFCzdJPO5iXfVaKDimj/2Whb3u1ngYfI2UFuCU7L63Kaf0OpFDHf
iV2jhDKctw+bstUCsa1y3YGJNNw5IQWW2oQqBBZ9KAzLua0jwTMwEPazibiBxjgP
6t2kxGfFrkNHapfdGvJhxeBZS3f2XSvm6N2Z5/BmyF2gHNDUe67RZEBNgpiOT9by
vpSNInfjm7aNI7g6DxVXamRYlYob2p0FDXujHtPaRPTAV4S9v4ZIMdN1d2F/k+8o
mCvkO0l2sqOG8KbFu3IhzGJSG7w7c/89iTbBidhvc5kc0K/5u7Hnlg5yNuOyEcOH
N+1QuRHJbwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFByfLqxBI4/wABNUvYo/l7J8
FYVaMB8GA1UdIwQYMBaAFEplnSvSDXBuifDpyKHoIvLdrr4fMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGJhYTY0YTgwMThiYWUwNTg0MGQwNDNiLzAv
NEE2NTlEMkJEMjBENzA2RTg5RjBFOUM4QTFFODIyRjJEREFFQkUxRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3Lzk0NmFmZDM0LTY5NzEtNDIzZi1iMjJhLTU3NWUyYzczYWIyNy84YWE4
MDBhODE0YWYwZGViMDY2YTk1Zjc5OTZmODNjZDcyOWE0OGQwNzViMDk1MmZiZS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhiYWE2NGE4MDE4YmFl
MDU4NDBkMDQzYi8wLzMxMzczMjJlMzkzOTJlMzIzMTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMyMzYzMzM3MzAzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKxjFTANBgkqhkiG9w0BAQsF
AAOCAQEA4woGcpCEwSc9VW4NdH0hjHJzOnUFVfym24LUTrBdTqGL8IY/nAonqr5h
vqUj+0M2Ka6GPKjwbexy4FbaxRxHcESkLw1+80a+/nGmoJ60ChaxFplocgEs6pZj
cb25419FblL1cSQDQgdee+wAJrzNXVTVpZDtVJ+b7Ug6KHxCVEFchHwJ8tKjNCSw
ITeBW2TptvaWzCtpyYItTOmD3Q6pAaIwNPfecQ6uoQNA+EouIjPHtO4Ju+XM9hx1
JV0XnP2ezECyc05MFhDTk2Q4jgq07QIFnCGHWTUimpWikXykJnLZTsDm/eINofo6
cS2/Vkn7ACIVQiJ7N/Sen5/gN41kLA==
-----END CERTIFICATE-----
Generated at Wed Sep 23 04:31:12 2026 by rpki-client