Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3131312e302f32342d3234203d3e20383334.roa
File:                     3137332e302e3131312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          CTyBCz5lzwR1z8o64vGF18WtViCmV3+/vqe2NKlwY30=
Subject key identifier:   04:F5:C0:5D:65:9E:C7:61:A3:E1:63:1C:38:6A:B8:E2:1C:BE:D4:EE
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       10F940EBCAB04653CFB598DDDD4DEE1246A595B3
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3131312e302f32342d3234203d3e20383334.roa
Signing time:             Sun 25 Oct 2026 20:44:59 +0000
ROA not before:           Sun 25 Oct 2026 20:39:59 +0000
ROA not after:            Sun 24 Oct 2027 20:44:59 +0000
asID:                     834
IP address blocks:        173.0.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Nov 2026 17:49:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:f9:40:eb:ca:b0:46:53:cf:b5:98:dd:dd:4d:ee:12:46:a5:95:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Oct 25 20:39:59 2026 GMT
            Not After : Oct 24 20:44:59 2027 GMT
        Subject: CN=04F5C05D659EC761A3E1631C386AB8E21CBED4EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a8:66:9f:b6:b8:07:59:ed:09:e5:a7:ed:8a:
                    c0:c4:b8:e6:04:d1:91:a7:18:77:54:62:b2:74:67:
                    23:a2:be:85:a3:b8:d6:99:d0:4f:f7:e3:9b:ae:7d:
                    49:6c:b2:08:12:37:15:ea:af:a1:7d:dd:33:f7:40:
                    3a:52:d7:35:9f:69:39:63:76:fc:a0:bc:d9:aa:11:
                    32:00:7c:c2:3a:ae:a1:33:07:a0:81:c2:e2:6e:55:
                    cb:30:33:d5:c6:c1:9b:31:18:aa:7b:35:2f:a1:2e:
                    38:4d:2d:ca:8d:ed:da:72:79:05:e6:a1:a7:b0:a9:
                    97:dd:41:bd:3d:d6:a7:35:85:40:63:c9:5a:85:b7:
                    cf:d7:ae:94:ec:9c:51:29:78:3a:79:db:ed:2e:bd:
                    89:3a:b2:d3:bf:d0:4c:3b:6f:2d:55:aa:ab:cc:b8:
                    c2:20:19:b4:83:cf:46:6a:cd:b7:85:83:cc:02:03:
                    74:80:95:39:ff:e7:65:31:73:c0:11:64:70:f4:4c:
                    de:fc:e9:c9:ae:2c:35:e4:a0:aa:2a:e8:1a:3d:9f:
                    49:cb:f8:62:ac:d4:1c:d8:42:6b:ca:0d:03:30:62:
                    34:9e:35:2a:c7:3c:62:5e:4e:6d:49:d0:46:07:bc:
                    7e:56:a5:6e:e5:e6:d9:f0:43:f4:83:0b:59:de:fa:
                    ab:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F5:C0:5D:65:9E:C7:61:A3:E1:63:1C:38:6A:B8:E2:1C:BE:D4:EE
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3137332e302e3131312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:70:fd:af:24:41:37:43:1a:65:bd:d5:c5:cf:97:d6:e2:4c:
         47:41:d1:f7:ce:e3:47:66:44:db:f9:f2:f3:b6:52:d6:1d:75:
         d3:28:86:5f:a2:2e:f4:96:3e:46:cb:24:65:66:50:0e:99:30:
         05:94:eb:b6:a1:de:1e:fb:9e:07:6f:5e:20:6b:45:fd:57:05:
         3c:e7:8b:dc:3e:eb:3a:6e:6f:c4:47:a3:12:0f:1f:f0:b6:a1:
         cf:a7:03:ba:6a:aa:d8:b7:9b:2b:9f:ec:37:9b:c2:1e:15:3a:
         cb:83:25:4e:95:f8:a4:4b:f4:82:30:95:89:cf:ba:14:df:eb:
         e8:5f:4f:f9:6e:22:fb:94:87:61:73:8f:dc:18:b8:88:84:dd:
         95:5a:27:5c:6e:e1:15:f9:d8:38:b9:d4:40:8b:1c:c2:82:11:
         7d:60:70:3f:79:d5:6f:fb:28:b9:89:0a:92:28:c6:99:1f:d4:
         d5:60:5b:73:c4:a0:3f:cb:8b:48:ad:ff:81:90:7a:4a:ee:1d:
         7b:5b:66:14:09:ee:20:69:56:93:fc:9a:34:33:00:f7:4a:6a:
         88:a3:49:12:cd:3a:6a:09:16:ae:48:25:0e:a8:3e:42:cb:cc:
         ca:14:a9:af:a9:ff:93:47:a5:4b:b7:11:f1:59:a5:6d:6e:26:
         6f:4e:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 18:56:52 2026 by rpki-client