Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20323134303235.roa
File:                     3139392e39312e3130312e302f32342d3234203d3e20323134303235.roa (raw, json)
Hash identifier:          fFq9NBZDtG1+xDz621OvS5tjO2pGfQn9rGZMl9XHL2o=
Subject key identifier:   E8:8C:71:C7:0F:44:FD:41:44:CC:E3:41:E4:3D:59:93:B3:FC:A8:08
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       4D35EDA31FDA17884166793D2CA99817A48647FF
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20323134303235.roa
Signing time:             Sun 28 Sep 2025 10:29:20 +0000
ROA not before:           Sun 28 Sep 2025 10:24:20 +0000
ROA not after:            Sun 27 Sep 2026 10:29:20 +0000
asID:                     214025
IP address blocks:        199.91.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:35:ed:a3:1f:da:17:88:41:66:79:3d:2c:a9:98:17:a4:86:47:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Sep 28 10:24:20 2025 GMT
            Not After : Sep 27 10:29:20 2026 GMT
        Subject: CN=E88C71C70F44FD4144CCE341E43D5993B3FCA808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d0:cf:8c:1e:99:1c:76:5d:a3:b1:a1:76:a4:
                    a3:8c:37:2c:d5:1c:e5:76:ce:43:9c:fb:8c:0d:0c:
                    2f:22:08:0a:eb:36:ab:60:1e:b1:2c:0f:68:56:ec:
                    8d:8f:81:1f:08:08:c4:a6:cc:f3:49:34:ff:b1:18:
                    3e:b1:66:1a:f7:85:03:b5:c1:57:38:1b:99:3e:09:
                    7d:8f:34:f9:84:2f:e6:bd:4a:53:ca:b7:63:f2:c8:
                    89:70:a2:6e:2c:6f:88:da:ee:b7:47:ef:05:97:ac:
                    6a:19:61:a8:d1:b0:e3:58:df:da:83:be:44:78:16:
                    37:80:c6:32:af:c6:34:1b:51:96:96:e6:31:dc:33:
                    c9:ae:04:1e:c6:d9:41:51:bb:a0:df:72:d3:be:9f:
                    93:f8:78:60:8e:d0:5f:30:5d:7a:17:c9:02:d7:ed:
                    0b:bd:7c:88:64:e6:ec:0c:33:9d:8b:c5:38:7a:c4:
                    0e:1e:ba:1d:32:58:59:3e:24:ee:f6:02:aa:28:4e:
                    72:d3:90:42:4c:e0:41:21:90:b5:e3:7d:d6:4f:6b:
                    18:68:b9:5f:d1:29:eb:27:3e:b5:b4:6e:1e:76:6f:
                    6c:18:26:8b:b8:65:fc:91:b6:65:80:d7:97:4e:26:
                    9b:da:9a:6c:a1:e9:09:e0:9f:5e:c0:e7:80:95:2c:
                    2e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:8C:71:C7:0F:44:FD:41:44:CC:E3:41:E4:3D:59:93:B3:FC:A8:08
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e20323134303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:ce:7c:fa:60:2e:82:5c:35:fb:bd:e0:08:1b:03:d4:aa:1e:
         f7:ff:84:fb:6d:14:0c:4a:a8:14:ef:bc:5f:f7:91:a1:fd:d1:
         48:2b:11:44:8a:57:fa:ea:c2:8d:b9:e7:d4:52:dc:6b:24:ab:
         7e:11:1c:ac:02:ce:9e:30:d5:12:bc:7d:12:49:54:a0:77:d4:
         05:43:2a:99:1c:0d:da:77:fe:e1:a9:7a:b2:52:d1:26:5b:76:
         31:9c:4e:01:7e:4c:18:3a:3c:dc:b8:a5:84:c9:ea:e7:a9:6b:
         5a:b1:16:4b:19:df:79:ca:d8:01:e5:f3:75:3b:d3:94:ca:74:
         cc:d5:ee:8a:77:64:34:55:24:88:ce:d3:90:b8:fc:ff:9b:2b:
         3d:9a:c6:5b:3f:a6:e9:0c:70:ad:89:dd:b6:5b:b5:c8:1c:39:
         1c:1b:f8:f7:02:94:42:6d:67:8d:46:15:36:e6:ca:03:3c:af:
         ea:56:dd:04:93:86:fd:7d:d2:75:09:2c:3d:47:07:5b:78:c2:
         bf:9b:35:85:9f:e2:0c:23:33:fd:50:ad:3c:f8:96:31:4f:16:
         78:f0:56:44:ff:36:b5:1a:58:5a:42:6f:3e:e5:d7:df:87:07:
         6a:6b:46:be:db:d4:c8:2e:cd:fc:83:8e:fd:c4:fe:04:c3:5d:
         78:8c:19:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:05:08 2025 by rpki-client