Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3138332e302f32342d3234203d3e20343031383139.roa
File:                     3139382e3130352e3138332e302f32342d3234203d3e20343031383139.roa (raw, json)
Hash identifier:          fn3LzYp024jPfBSDyONVKFn7EuAmE2/Nt7602VN/zj4=
Subject key identifier:   F7:A0:CF:BE:D8:6F:72:8E:B7:26:C9:8D:AA:A7:F2:09:70:56:ED:FE
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       0360D42F711D4B172CDA5CBD7D2D3729158B9DFF
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3138332e302f32342d3234203d3e20343031383139.roa
Signing time:             Thu 26 Feb 2026 09:23:20 +0000
ROA not before:           Thu 26 Feb 2026 09:18:20 +0000
ROA not after:            Thu 25 Feb 2027 09:23:20 +0000
asID:                     401819
IP address blocks:        198.105.183.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Mar 2026 21:30:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:60:d4:2f:71:1d:4b:17:2c:da:5c:bd:7d:2d:37:29:15:8b:9d:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Feb 26 09:18:20 2026 GMT
            Not After : Feb 25 09:23:20 2027 GMT
        Subject: CN=F7A0CFBED86F728EB726C98DAAA7F2097056EDFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b9:1a:b6:b9:d3:dd:48:fa:2d:79:2b:0e:79:
                    e8:fd:38:90:5a:8a:19:8d:86:21:3b:8a:4d:37:bf:
                    0c:dc:9c:59:5f:44:2d:dd:6d:cf:8c:7f:de:35:4e:
                    5c:dd:ed:b5:da:2d:d1:97:a2:8f:d1:bf:91:b4:fc:
                    a0:87:28:91:0c:75:39:11:ec:cd:08:c6:73:0c:cd:
                    b3:c2:b9:28:95:b5:25:86:b8:63:06:91:11:b9:29:
                    06:51:48:3c:6e:7b:4f:d9:83:ba:33:10:72:c5:20:
                    f1:bb:19:32:c4:f3:6b:cd:26:ee:4d:56:be:07:57:
                    c4:da:51:9e:09:c5:e9:d1:65:e5:6c:97:bc:4c:f1:
                    4b:9d:3c:65:39:5f:81:e0:47:ed:eb:25:2e:c7:36:
                    65:e8:4d:74:5f:94:61:0a:be:be:66:1e:fe:6e:e6:
                    c9:4d:9c:50:40:b1:cb:45:44:7f:0d:8e:85:8d:5b:
                    2b:9f:6e:a3:33:66:d5:47:59:05:a9:4e:27:fe:d2:
                    b3:95:0c:ca:35:cb:e4:1f:d5:d7:52:f0:09:f4:c8:
                    de:f1:3b:97:77:ef:45:0f:10:a1:24:72:8a:61:5a:
                    6b:d3:ba:7e:05:71:54:3a:d6:05:ea:09:ef:12:18:
                    cd:ee:41:98:50:7d:4a:41:23:60:ec:2f:c6:13:ee:
                    fb:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A0:CF:BE:D8:6F:72:8E:B7:26:C9:8D:AA:A7:F2:09:70:56:ED:FE
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3130352e3138332e302f32342d3234203d3e20343031383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.105.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:15:36:6e:e7:75:90:e9:79:11:2d:ea:ee:44:b2:a6:38:3d:
         2f:fb:ca:57:33:4f:18:dd:76:66:52:41:1e:2c:f3:2c:53:4d:
         bf:4b:ef:62:37:59:7d:67:48:52:2d:e6:94:65:13:96:c3:e3:
         64:40:22:a0:9e:9d:c4:1a:92:46:3d:d9:93:a3:62:a1:a5:80:
         54:1f:9d:3b:e9:57:01:94:74:f2:e2:33:1b:b6:5e:65:46:04:
         a5:e1:56:de:d9:9c:f1:73:74:0b:5b:19:8c:75:79:17:a8:26:
         a4:2f:ae:47:ce:5c:0d:57:8f:5e:84:e2:c1:2a:95:d5:84:5b:
         66:51:a7:25:f4:ab:c8:1f:b7:8f:5f:18:16:89:d5:3c:69:47:
         5b:bf:ae:71:df:dd:d0:ca:1b:3c:5c:2f:ca:1a:91:ec:7d:19:
         10:bc:7e:0a:de:5b:26:a2:0d:b4:1d:ce:02:15:64:9f:38:17:
         4f:a1:13:87:35:61:9d:d7:30:73:9a:95:5d:d2:bf:b1:1f:73:
         49:97:ae:2c:72:42:17:d4:0d:81:24:02:c9:62:a1:a5:3f:76:
         00:98:ab:6f:da:17:23:65:52:7f:0a:70:be:c8:e0:2a:d9:55:
         a2:25:d2:38:32:77:aa:13:f5:48:6c:54:e7:b5:b9:04:d2:1f:
         53:ab:b0:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:45:23 2026 by rpki-client