Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e20323139333933.roa
File:                     3139382e3137372e36332e302f32342d3234203d3e20323139333933.roa (raw, json)
Hash identifier:          yHC37xLNZN/t/KR6eQN/lGTrZLF6//IyhalaQgzfD9I=
Subject key identifier:   4B:8A:45:75:42:01:75:D5:7C:AD:52:BB:D4:3D:84:A0:70:E2:A0:FB
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       3D7F7A5CEAD0A40EA262BE81AA39FD6BC9EC7491
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e20323139333933.roa
Signing time:             Sun 30 Aug 2026 15:44:27 +0000
ROA not before:           Sun 30 Aug 2026 15:39:27 +0000
ROA not after:            Sun 29 Aug 2027 15:44:27 +0000
asID:                     219393
IP address blocks:        198.177.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:7f:7a:5c:ea:d0:a4:0e:a2:62:be:81:aa:39:fd:6b:c9:ec:74:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Aug 30 15:39:27 2026 GMT
            Not After : Aug 29 15:44:27 2027 GMT
        Subject: CN=4B8A4575420175D57CAD52BBD43D84A070E2A0FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:0b:d0:68:d8:06:8b:f0:11:1a:9b:7e:02:14:
                    ea:cc:49:dc:9d:9f:06:bb:90:ce:1e:37:85:07:d9:
                    fe:e4:05:a6:e2:ff:fa:4a:de:6f:bd:f3:ca:2e:99:
                    2c:f6:7f:ff:c6:d6:28:29:b4:5c:de:f3:6c:35:58:
                    df:40:0c:55:dc:10:91:a4:04:4d:6a:fa:18:81:1c:
                    14:b5:9f:27:20:ba:69:fe:03:67:45:44:71:93:51:
                    80:01:ab:34:72:d1:5d:ca:81:87:ef:d3:9c:37:42:
                    e9:49:80:79:91:16:d2:05:0c:3d:12:42:9f:74:bf:
                    f7:8e:e3:48:1a:2c:22:ea:41:77:50:37:b6:56:d2:
                    03:18:cb:27:83:8f:a0:95:af:ac:ce:8a:fb:35:10:
                    67:e2:4f:10:dd:9a:d9:b0:74:6b:36:9d:c4:6d:41:
                    90:31:7e:d0:c3:33:e3:29:19:be:c2:fa:01:dd:f2:
                    31:69:43:26:bf:fb:10:56:a3:e4:79:91:52:d2:4f:
                    58:db:f6:36:1e:df:a4:65:d1:87:2e:fc:37:6a:37:
                    b1:7d:9e:1b:79:20:b7:8c:f2:d7:ee:35:1a:5b:9f:
                    f2:57:5e:ea:a6:ee:6f:39:96:05:7a:bb:e8:b5:bd:
                    a2:9f:60:6b:2d:a8:2f:52:de:78:93:93:d2:7a:25:
                    d1:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8A:45:75:42:01:75:D5:7C:AD:52:BB:D4:3D:84:A0:70:E2:A0:FB
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e20323139333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:17:05:1b:4b:98:dd:b3:8d:52:d3:06:a9:6a:c4:0b:57:ae:
         8a:91:3f:cb:94:5c:21:b3:d9:ea:c5:2d:c0:b3:aa:36:86:55:
         bc:05:17:b1:63:39:74:9c:5c:3c:8d:34:9e:0a:68:01:41:1a:
         94:f4:a0:87:42:22:97:7e:fd:00:e3:3f:78:70:cb:08:fd:17:
         7c:f6:39:6c:05:03:56:86:11:38:98:73:7b:e8:dc:d4:af:14:
         90:f2:ca:3d:4b:93:a4:1d:be:02:fb:77:13:77:b8:4f:09:e3:
         24:18:09:2e:91:fb:89:a9:92:09:aa:0a:b4:f1:a8:a8:4c:b7:
         ec:17:01:73:d3:97:70:3e:77:8b:78:40:6a:3d:41:26:3f:9a:
         75:76:e2:10:69:46:60:7d:cd:f1:ca:68:ef:3b:8d:94:7f:96:
         b8:17:ca:a5:93:ef:2c:e6:bd:81:e4:c5:e7:1f:65:d4:96:ae:
         c9:3e:fd:43:1b:bd:03:78:db:89:a8:ee:86:1c:51:18:3d:30:
         7c:e9:b4:18:27:37:3e:4e:b7:5d:0a:47:f4:d3:b8:7f:1b:25:
         60:e1:cc:c9:43:c1:63:54:63:c5:53:b2:05:f3:2d:96:74:92:
         5e:45:51:fe:92:41:cb:60:53:ac:8c:52:d8:62:66:6c:50:db:
         a6:82:14:bc
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUPX96XOrQpA6iYr6Bqjn9a8nsdJEwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjYwODMwMTUzOTI3WhcNMjcwODI5MTU0NDI3
WjAzMTEwLwYDVQQDEyg0QjhBNDU3NTQyMDE3NUQ1N0NBRDUyQkJENDNEODRBMDcw
RTJBMEZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6AvQaNgGi/AR
Gpt+AhTqzEncnZ8Gu5DOHjeFB9n+5AWm4v/6St5vvfPKLpks9n//xtYoKbRc3vNs
NVjfQAxV3BCRpARNavoYgRwUtZ8nILpp/gNnRURxk1GAAas0ctFdyoGH79OcN0Lp
SYB5kRbSBQw9EkKfdL/3juNIGiwi6kF3UDe2VtIDGMsng4+gla+szor7NRBn4k8Q
3ZrZsHRrNp3EbUGQMX7QwzPjKRm+wvoB3fIxaUMmv/sQVqPkeZFS0k9Y2/Y2Ht+k
ZdGHLvw3ajexfZ4beSC3jPLX7jUaW5/yV17qpu5vOZYFervotb2in2BrLagvUt54
k5PSeiXRnwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFEuKRXVCAXXVfK1Su9Q9hKBw
4qD7MB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0
MjhlYTliNzI2Ny8wLzMxMzkzODJlMzEzNzM3MmUzNjMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTM5MzMzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrE/MA0GCSqGSIb3DQEB
CwUAA4IBAQCpFwUbS5jds41S0wapasQLV66KkT/LlFwhs9nqxS3As6o2hlW8BRex
Yzl0nFw8jTSeCmgBQRqU9KCHQiKXfv0A4z94cMsI/Rd89jlsBQNWhhE4mHN76NzU
rxSQ8so9S5OkHb4C+3cTd7hPCeMkGAkukfuJqZIJqgq08aioTLfsFwFz05dwPneL
eEBqPUEmP5p1duIQaUZgfc3xymjvO42Uf5a4F8qlk+8s5r2B5MXnH2XUlq7JPv1D
G70DeNuJqO6GHFEYPTB86bQYJzc+TrddCkf007h/GyVg4czJQ8FjVGPFU7IF8y2W
dJJeRVH+kkHLYFOsjFLYYmZsUNumghS8
-----END CERTIFICATE-----
Generated at Mon Sep 21 12:37:57 2026 by rpki-client