Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3132382e302f31392d3234203d3e20383334.roa
File:                     3139382e312e3132382e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier:          nVD7X42Pe/AXqmisR0qxug+CLenlxeMKkxoRBFbg/P8=
Subject key identifier:   FD:22:B1:34:57:9D:03:43:D0:5D:75:75:FE:CE:39:C6:6A:3C:C7:57
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       7BC14143ADED42E5414E03FF5B0C776122312031
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3132382e302f31392d3234203d3e20383334.roa
Signing time:             Fri 04 Sep 2026 00:01:36 +0000
ROA not before:           Thu 03 Sep 2026 23:56:36 +0000
ROA not after:            Fri 03 Sep 2027 00:01:36 +0000
asID:                     834
IP address blocks:        198.1.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Sep 2026 15:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:c1:41:43:ad:ed:42:e5:41:4e:03:ff:5b:0c:77:61:22:31:20:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Sep  3 23:56:36 2026 GMT
            Not After : Sep  3 00:01:36 2027 GMT
        Subject: CN=FD22B134579D0343D05D7575FECE39C66A3CC757
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5e:14:87:f5:60:c0:a7:49:6d:9a:0a:88:f0:
                    23:4c:dc:f8:fb:2f:df:cc:6e:41:99:c6:34:e2:7f:
                    56:74:4c:76:69:f1:df:1b:62:70:a9:78:18:f0:ce:
                    e9:df:aa:1b:df:e0:70:f5:54:6d:de:47:90:d7:fb:
                    30:15:cb:6d:6c:77:5e:c7:ac:14:ea:f0:64:98:72:
                    da:01:1c:38:f7:62:f6:a1:92:2b:e6:6d:fe:ef:f9:
                    5e:81:13:fb:bc:3d:0a:1a:17:44:d5:d9:19:14:93:
                    f0:3f:f2:16:74:83:83:59:e2:9c:72:82:f5:2c:5b:
                    d7:a3:fe:93:d2:a3:ee:95:ff:8c:fa:08:e5:50:ee:
                    e1:11:b8:12:61:c7:24:58:e7:54:2e:a4:13:3d:e9:
                    1f:f9:d9:1b:9b:f7:49:f7:70:d5:cf:b6:58:90:ea:
                    9a:c4:b8:a5:de:6a:59:8d:1a:48:3e:2d:e9:62:36:
                    2c:d1:82:fe:a6:d3:3c:e4:ad:f4:57:f3:1a:c5:dc:
                    2a:90:8f:da:f6:63:17:31:2a:8e:7e:69:7d:cc:be:
                    36:08:15:0b:0d:0f:b3:43:41:8d:6f:ea:ef:4e:da:
                    31:60:d2:cc:ed:d8:83:78:37:f9:9e:f6:ae:71:53:
                    c4:d4:c7:d8:a4:fb:38:51:c3:40:67:98:a1:55:ac:
                    e2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:22:B1:34:57:9D:03:43:D0:5D:75:75:FE:CE:39:C6:6A:3C:C7:57
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e312e3132382e302f31392d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.1.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         26:76:61:65:49:a7:c3:52:73:2c:4e:23:a9:71:5f:02:ba:4f:
         69:2c:7a:9b:60:4b:b7:54:72:bb:dd:00:79:8e:b2:6c:50:f1:
         d7:c4:f2:0c:6f:46:a5:ff:e9:8a:ea:ec:8e:4f:68:3d:5a:2d:
         5d:f8:c1:d2:74:4f:db:90:f7:a8:2b:95:2f:ad:0a:53:7d:b6:
         91:ef:66:47:1a:e9:3e:f6:00:87:79:85:84:29:ef:6e:8c:36:
         7d:76:9d:02:36:1c:ae:b4:3e:e2:b9:53:0b:dd:8a:82:09:f4:
         8a:16:9e:e6:0d:ea:75:dd:72:46:ca:09:bc:68:42:10:5a:b1:
         63:d0:93:11:bb:f4:9e:c9:69:fb:10:68:0b:fc:c4:c8:c5:06:
         9e:6b:26:d5:fd:73:78:41:ad:ab:7c:1d:fd:23:73:75:8b:5d:
         55:1c:9a:5f:7e:2f:d6:e4:3f:ee:e6:e8:56:70:40:1d:f7:65:
         5c:0a:ac:bf:3c:d7:d1:0a:81:fa:90:82:73:64:3f:88:6b:7f:
         27:33:2c:7e:73:1a:3f:64:28:a0:bc:15:0a:c4:d5:14:9c:65:
         4e:1f:26:e9:82:3d:c8:56:55:72:c4:a9:a1:1a:57:79:46:e8:
         d3:0f:47:ff:0f:b2:3f:f1:bd:07:9b:ec:4d:d3:02:91:90:7b:
         31:79:2b:d9
-----BEGIN CERTIFICATE-----
MIIFqzCCBJOgAwIBAgIUe8FBQ63tQuVBTgP/Wwx3YSIxIDEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYwOTAzMjM1NjM2WhcNMjcwOTAzMDAwMTM2
WjAzMTEwLwYDVQQDEyhGRDIyQjEzNDU3OUQwMzQzRDA1RDc1NzVGRUNFMzlDNjZB
M0NDNzU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuV4Uh/VgwKdJ
bZoKiPAjTNz4+y/fzG5BmcY04n9WdEx2afHfG2JwqXgY8M7p36ob3+Bw9VRt3keQ
1/swFcttbHdex6wU6vBkmHLaARw492L2oZIr5m3+7/legRP7vD0KGhdE1dkZFJPw
P/IWdIODWeKccoL1LFvXo/6T0qPulf+M+gjlUO7hEbgSYcckWOdULqQTPekf+dkb
m/dJ93DVz7ZYkOqaxLil3mpZjRpIPi3pYjYs0YL+ptM85K30V/MaxdwqkI/a9mMX
MSqOfml9zL42CBULDQ+zQ0GNb+rvTtoxYNLM7diDeDf5nvaucVPE1MfYpPs4UcNA
Z5ihVazirQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFP0isTRXnQND0F11df7OOcZq
PMdXMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy
OGVhOWI3MjY3LzAvMzEzOTM4MmUzMTJlMzEzMjM4MmUzMDJmMzEzOTJkMzIzNDIw
M2QzZTIwMzgzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsG
AQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxgGAMA0GCSqGSIb3DQEBCwUAA4IBAQAm
dmFlSafDUnMsTiOpcV8Cuk9pLHqbYEu3VHK73QB5jrJsUPHXxPIMb0al/+mK6uyO
T2g9Wi1d+MHSdE/bkPeoK5UvrQpTfbaR72ZHGuk+9gCHeYWEKe9ujDZ9dp0CNhyu
tD7iuVML3YqCCfSKFp7mDep13XJGygm8aEIQWrFj0JMRu/SeyWn7EGgL/MTIxQae
aybV/XN4Qa2rfB39I3N1i11VHJpffi/W5D/u5uhWcEAd92VcCqy/PNfRCoH6kIJz
ZD+Ia38nMyx+cxo/ZCigvBUKxNUUnGVOHybpgj3IVlVyxKmhGld5RujTD0f/D7I/
8b0Hm+xN0wKRkHsxeSvZ
-----END CERTIFICATE-----
Generated at Sun Sep 20 20:27:53 2026 by rpki-client