Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203634323637.roa
File:                     3139392e3233312e36382e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          5gXxL+euRVg1ikMSvjqKeagTVMEZ+WTjlcjslCH6/QQ=
Subject key identifier:   BE:41:93:00:0E:7E:0C:30:80:6C:E4:6F:8F:B6:78:E5:3F:A6:05:BE
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       06AEE846D11161ED3823AB0A2E77B3CE644DB063
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203634323637.roa
Signing time:             Fri 11 Sep 2026 12:36:20 +0000
ROA not before:           Fri 11 Sep 2026 12:31:20 +0000
ROA not after:            Fri 10 Sep 2027 12:36:20 +0000
asID:                     64267
IP address blocks:        199.231.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Sep 2026 09:59:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ae:e8:46:d1:11:61:ed:38:23:ab:0a:2e:77:b3:ce:64:4d:b0:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Sep 11 12:31:20 2026 GMT
            Not After : Sep 10 12:36:20 2027 GMT
        Subject: CN=BE4193000E7E0C30806CE46F8FB678E53FA605BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b2:d7:6e:2d:54:3d:95:c2:28:a0:ac:e7:bf:
                    e1:04:29:5a:7b:ce:b1:37:57:cf:28:aa:10:73:0f:
                    0e:1e:9c:b6:6a:34:7d:40:2d:29:b0:c6:3a:fd:31:
                    7b:74:f2:c3:dd:5a:ed:40:73:f1:d4:b0:a1:ab:a0:
                    b9:88:8c:74:3e:4d:9f:4b:c0:91:b6:7d:38:c6:b4:
                    cc:42:6a:e2:d6:a0:0e:9a:1e:38:1b:95:e4:39:82:
                    44:52:5f:42:de:ad:3d:e9:1f:1e:09:8c:b9:e0:df:
                    75:b8:ee:02:5e:b8:8b:8a:fb:c6:57:16:29:e7:52:
                    72:fa:a0:51:10:f5:32:f9:89:42:21:19:bd:bc:d4:
                    73:67:76:54:f2:ff:5f:7f:bf:db:dc:d2:ef:7c:e3:
                    29:2a:7d:ba:51:05:40:a3:ac:8d:29:6c:8a:1b:2d:
                    bb:5e:02:5a:e3:7e:a6:7c:36:db:9c:16:3c:2d:e8:
                    2b:86:1e:2a:09:0d:6e:55:8c:6c:fc:d8:64:ca:14:
                    fe:3d:35:f3:71:df:0d:c2:d4:27:b3:e7:62:7e:ea:
                    74:15:00:a0:61:f3:53:77:3e:a4:12:97:68:bb:b5:
                    85:85:bf:d9:13:6f:e9:c1:dc:33:57:d7:47:c3:60:
                    ed:d3:c9:cf:30:d6:7d:5f:8f:7c:a9:d1:a1:21:d9:
                    c2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:41:93:00:0E:7E:0C:30:80:6C:E4:6F:8F:B6:78:E5:3F:A6:05:BE
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:f8:d1:f1:df:82:3f:cc:44:32:73:42:8a:35:63:0c:b6:a9:
         10:a2:d5:ce:82:74:74:6e:ec:3b:f8:e1:bf:07:ac:e3:07:6d:
         10:36:ba:11:80:1f:e9:30:9a:b0:99:30:d3:be:03:29:76:ec:
         0c:8a:e9:43:b9:6e:9f:7a:6a:c0:8e:6d:2c:e1:8a:d9:e6:73:
         c4:74:77:32:16:c4:cb:3c:0b:55:63:a7:fe:73:4d:b8:3e:80:
         23:c4:03:a0:d1:34:2e:1f:05:63:53:6c:41:fe:6c:17:05:8c:
         d0:a2:e3:e8:7a:27:27:db:ed:82:75:6e:4e:9d:2c:8c:c8:a2:
         eb:f3:fa:c1:0c:d3:c5:4f:0f:4c:48:81:9c:04:d3:25:85:e4:
         5f:3c:64:66:66:ee:b5:14:1a:0a:3f:e2:3e:52:c6:17:93:4a:
         9c:64:d4:ec:d7:f0:38:a7:7a:74:0b:2e:32:ec:2f:a8:93:e3:
         43:0e:1e:fb:ca:5e:2d:85:81:af:57:b7:c6:09:62:3f:26:a6:
         4f:9e:f6:d9:bb:00:87:94:79:4d:70:3d:2f:9e:91:18:c8:82:
         d7:37:56:0d:e6:62:8f:67:29:80:a2:ca:44:fb:aa:8c:2b:74:
         79:df:75:63:e2:d7:dd:d6:4c:15:66:03:67:29:25:1a:34:6f:
         30:b0:47:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 14:29:16 2026 by rpki-client