Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139382e31332e31362e302f32332d3332203d3e20333938393931.roa
File:                     3139382e31332e31362e302f32332d3332203d3e20333938393931.roa (raw, json)
Hash identifier:          pOnzJTrguDWOsGImnMJthADWtfhs1hb5kOXYcpmLelQ=
Subject key identifier:   B9:FC:A8:56:06:A7:67:78:B4:4C:84:C1:A3:F3:AE:0A:0F:FB:97:31
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       58D8A03509C9CAA5D4541C00E9AFF0819B245C20
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139382e31332e31362e302f32332d3332203d3e20333938393931.roa
Signing time:             Fri 17 Jul 2026 04:39:39 +0000
ROA not before:           Fri 17 Jul 2026 04:34:39 +0000
ROA not after:            Fri 16 Jul 2027 04:39:39 +0000
asID:                     398991
IP address blocks:        198.13.16.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:29:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:d8:a0:35:09:c9:ca:a5:d4:54:1c:00:e9:af:f0:81:9b:24:5c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Jul 17 04:34:39 2026 GMT
            Not After : Jul 16 04:39:39 2027 GMT
        Subject: CN=B9FCA85606A76778B44C84C1A3F3AE0A0FFB9731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:44:d3:5e:cd:12:c1:25:3a:ca:47:bb:f5:74:
                    a2:e7:74:d1:21:f4:8f:ba:cb:4a:0c:60:99:24:df:
                    87:56:ba:9b:14:eb:69:6c:9c:08:ec:d6:cc:47:e3:
                    9e:b2:85:7b:64:e8:37:29:8d:67:40:ef:f5:5c:3b:
                    98:4f:98:c1:68:64:e4:b5:5b:5e:4d:bc:7a:b7:66:
                    ad:e9:11:63:b3:12:a7:4b:8a:0d:42:91:d6:20:ee:
                    5e:23:f9:a4:8f:3a:5c:5b:f1:1c:3d:a7:f2:d0:94:
                    b9:96:83:ae:28:36:ea:3a:c2:0b:5e:75:ac:e9:07:
                    c9:81:e1:e6:44:6b:3c:73:32:86:4c:ee:e9:97:35:
                    ba:69:d9:dc:a3:80:cb:44:3e:3e:31:e3:9c:8c:04:
                    f9:25:93:04:f4:ce:fd:53:e9:08:12:11:fb:07:60:
                    5b:06:c1:db:e0:41:bc:3d:7e:95:a7:d6:2b:d1:7f:
                    a2:79:70:84:39:5f:a4:08:1a:15:f8:14:cb:3d:06:
                    90:b8:bf:43:ca:f8:e5:95:3f:bf:7e:07:a5:66:d0:
                    85:9a:2a:6e:cd:ea:30:6e:15:58:c1:c8:8d:c2:f0:
                    40:93:9c:0a:ff:2f:48:14:ac:5d:17:48:c4:ab:3b:
                    e0:6a:0b:10:12:92:77:66:92:34:c5:a1:ac:d2:22:
                    18:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:FC:A8:56:06:A7:67:78:B4:4C:84:C1:A3:F3:AE:0A:0F:FB:97:31
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139382e31332e31362e302f32332d3332203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.13.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         64:ae:a5:db:ef:d8:2c:7c:a6:b1:0b:c2:72:b9:b7:20:f7:06:
         bb:7f:64:56:2c:38:93:46:eb:ee:6e:22:71:00:af:94:a7:ec:
         e8:ec:99:c3:37:bc:2b:27:cd:fe:a8:1e:5a:7b:b6:21:e5:59:
         33:29:c4:57:8a:a3:ca:d6:37:24:dd:51:e0:3e:d3:d1:d6:b6:
         68:63:01:75:10:07:e2:44:8e:7d:9c:3b:07:69:e5:16:a6:4c:
         46:f6:5f:24:b1:20:64:69:fe:1a:b6:b8:b2:f9:12:24:17:08:
         c8:1a:2f:d4:67:c1:67:b2:85:2e:fc:50:75:34:44:87:74:5c:
         2d:a1:48:92:6d:9d:0b:dd:26:ba:a9:f2:ca:1c:ed:52:f7:88:
         b5:89:ec:e7:1b:71:5e:c0:be:06:5b:28:51:bb:9a:f9:c5:1b:
         9c:6c:5d:29:db:48:77:2a:30:0d:bf:9a:6d:88:6e:ef:62:b4:
         7b:f2:90:0e:ad:cf:2d:65:d7:a1:4c:bf:7d:a9:39:d5:24:e9:
         44:48:e0:97:31:c1:67:4b:bf:47:f4:df:58:0e:2f:90:77:9b:
         8f:b0:1f:9e:df:90:8f:7a:e9:d7:4f:59:40:16:59:49:3d:89:
         87:f8:4a:9b:bd:54:d2:79:62:84:7c:77:26:80:fc:2e:93:40:
         30:8d:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:50:31 2026 by rpki-client