Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136392e302f32342d3234203d3e20323133393930.roa
File:                     3139382e3137352e3136392e302f32342d3234203d3e20323133393930.roa (raw, json)
Hash identifier:          515PZp9lCE02E2YEjzoNn0nbTNzFkCp4omzSEtKJc38=
Subject key identifier:   23:3B:65:F2:12:34:69:F7:78:7F:C3:2B:EB:31:AC:07:D4:08:23:20
Certificate issuer:       /CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Certificate serial:       29A67F470E546E32E1DCEC2213346C692EB63648
Authority key identifier: 1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136392e302f32342d3234203d3e20323133393930.roa
Signing time:             Mon 26 Jan 2026 10:37:32 +0000
ROA not before:           Mon 26 Jan 2026 10:32:32 +0000
ROA not after:            Mon 25 Jan 2027 10:37:32 +0000
asID:                     213990
IP address blocks:        198.175.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 11:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:a6:7f:47:0e:54:6e:32:e1:dc:ec:22:13:34:6c:69:2e:b6:36:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
        Validity
            Not Before: Jan 26 10:32:32 2026 GMT
            Not After : Jan 25 10:37:32 2027 GMT
        Subject: CN=233B65F2123469F7787FC32BEB31AC07D4082320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:75:99:f5:01:8d:80:27:a6:ac:2b:21:ff:09:
                    05:ba:ff:f4:47:02:2e:21:66:29:ce:b6:84:18:e5:
                    f4:81:e8:e6:5f:c5:a9:4e:b0:3f:68:6b:bb:19:de:
                    1a:bf:3c:0f:57:a9:c3:69:e4:98:2e:35:fc:91:03:
                    8c:73:5d:0e:3e:b0:5a:14:c1:d3:71:5f:1f:17:c0:
                    4f:dd:6d:26:e5:38:e5:91:b6:43:71:c7:3e:ff:d5:
                    60:2d:26:7e:fa:c5:32:4d:f9:76:1c:51:bd:29:df:
                    84:f8:4a:aa:da:e1:2f:54:fe:8a:dc:ca:2d:75:e7:
                    4c:92:ac:9e:0d:13:39:13:cf:f7:53:4b:8a:5f:75:
                    d4:67:95:dd:dd:42:da:4e:2e:17:47:c6:ee:06:5e:
                    39:e9:7b:ac:a4:2f:96:2c:be:89:f3:f3:3c:35:57:
                    77:73:21:e3:76:a5:95:b8:30:32:e1:cc:da:a8:be:
                    01:87:21:68:53:f8:3f:b7:eb:af:4b:d2:39:68:a7:
                    4f:d3:44:f1:96:f8:bf:eb:75:19:ad:ff:10:56:d5:
                    e5:15:dd:70:8c:04:57:9a:de:2f:ff:ed:96:67:f6:
                    e5:50:86:0f:86:e5:d1:08:31:5d:48:91:dc:6c:32:
                    14:8c:af:9e:ee:4d:6d:d2:2a:c9:4c:f8:72:3b:66:
                    14:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3B:65:F2:12:34:69:F7:78:7F:C3:2B:EB:31:AC:07:D4:08:23:20
            X509v3 Authority Key Identifier:
                keyid:1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136392e302f32342d3234203d3e20323133393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:7c:02:e1:df:d0:ba:0f:1b:98:80:cd:a2:b7:d8:7f:43:f4:
         9a:81:97:50:05:b7:a0:10:39:eb:da:84:c6:68:8f:c9:b4:4b:
         0a:f5:6c:51:9d:9a:b9:9b:93:bb:06:ec:8c:37:d6:ef:f6:e0:
         c0:ea:4a:28:f7:8c:4a:92:f3:b3:62:ac:52:a3:38:c5:dd:b1:
         82:d5:7a:ae:d3:af:40:3b:5b:d5:85:eb:be:a5:f1:c2:1e:46:
         d8:f4:46:ce:bb:9f:b4:7e:69:d1:a8:00:b0:b0:f1:f9:54:07:
         00:c4:8b:d5:d7:a5:05:49:14:1d:ff:68:70:72:5e:9d:3e:3a:
         13:88:d6:9c:48:b6:a2:49:e6:75:3f:82:84:75:b4:e3:05:96:
         f3:4d:a2:66:fd:fd:22:db:b1:dd:6a:94:a3:fd:11:85:23:30:
         03:09:8a:13:85:9e:1b:ad:83:45:f0:1f:13:14:e2:e0:f7:7a:
         b9:30:7b:4c:88:54:b3:72:3b:5f:10:96:86:73:a0:90:7b:dd:
         44:a9:fb:9c:cb:d0:fd:91:09:ee:bd:80:0c:30:9c:27:c1:24:
         bd:aa:f9:ea:a4:e9:26:d5:90:39:94:b6:71:31:72:2d:76:48:
         66:50:54:48:a8:88:41:a8:d9:b7:d6:a5:c9:2a:15:9f:e8:c0:
         0a:65:8e:56
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUKaZ/Rw5UbjLh3OwiEzRsaS62NkgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMjE1YzZlNmFhZjk1MDdjNmQ3MmE2M2YyZWRhZDkyMDBh
NDNkZmZkMTkwMDdjMTI1YjYwHhcNMjYwMTI2MTAzMjMyWhcNMjcwMTI1MTAzNzMy
WjAzMTEwLwYDVQQDEygyMzNCNjVGMjEyMzQ2OUY3Nzg3RkMzMkJFQjMxQUMwN0Q0
MDgyMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3WZ9QGNgCem
rCsh/wkFuv/0RwIuIWYpzraEGOX0gejmX8WpTrA/aGu7Gd4avzwPV6nDaeSYLjX8
kQOMc10OPrBaFMHTcV8fF8BP3W0m5TjlkbZDccc+/9VgLSZ++sUyTfl2HFG9Kd+E
+Eqq2uEvVP6K3MotdedMkqyeDRM5E8/3U0uKX3XUZ5Xd3ULaTi4XR8buBl456Xus
pC+WLL6J8/M8NVd3cyHjdqWVuDAy4czaqL4BhyFoU/g/t+uvS9I5aKdP00Txlvi/
63UZrf8QVtXlFd1wjARXmt4v/+2WZ/blUIYPhuXRCDFdSJHcbDIUjK+e7k1t0irJ
TPhyO2YUFwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFCM7ZfISNGn3eH/DK+sxrAfU
CCMgMB8GA1UdIwQYMBaAFB/qOPSZacGiI8Cwd15k/5xP5QTkMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTFmYjRjOTcwMTkyZDc4NmNlZmIxNzFhLzAv
MUZFQTM4RjQ5OTY5QzFBMjIzQzBCMDc3NUU2NEZGOUM0RkU1MDRFNC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNjlmZDAxNTYtYmIxZi00OGI2LWJmMzItYzk0OTIy
ODZmMTk1LzE0Y2M4ZjgzLTA3YTMtNDM4Zi04YzNkLTA0NmZkYzZmNzg2MS8yMTVj
NmU2YWFmOTUwN2M2ZDcyYTYzZjJlZGFkOTIwMGE0M2RmZmQxOTAwN2MxMjViNi5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkxZmI0Yzk3MDE5MmQ3
ODZjZWZiMTcxYS8wLzMxMzkzODJlMzEzNzM1MmUzMTM2MzkyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMxMzMzOTM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADGr6kwDQYJKoZIhvcN
AQELBQADggEBADh8AuHf0LoPG5iAzaK32H9D9JqBl1AFt6AQOevahMZoj8m0Swr1
bFGdmrmbk7sG7Iw31u/24MDqSij3jEqS87NirFKjOMXdsYLVeq7Tr0A7W9WF676l
8cIeRtj0Rs67n7R+adGoALCw8flUBwDEi9XXpQVJFB3/aHByXp0+OhOI1pxItqJJ
5nU/goR1tOMFlvNNomb9/SLbsd1qlKP9EYUjMAMJihOFnhutg0XwHxMU4uD3erkw
e0yIVLNyO18QloZzoJB73USp+5zL0P2RCe69gAwwnCfBJL2q+eqk6SbVkDmUtnEx
ci12SGZQVEioiEGo2bfWpckqFZ/owApljlY=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:11 2026 by rpki-client