Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136382e302f32342d3234203d3e2037303239.roa
File:                     3139392e3130312e3136382e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          lrQymrxsJf1CKENq8ha9FAYsjS5g6Vk0geY257s07UY=
Subject key identifier:   B5:A4:77:B7:ED:98:61:A9:BD:CC:70:1F:55:92:BF:48:80:C2:59:20
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       59742597F4D6F401D4060F85CC5922ED01F4D4C3
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136382e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 11 Sep 2025 07:29:45 +0000
ROA not before:           Thu 11 Sep 2025 07:24:45 +0000
ROA not after:            Thu 10 Sep 2026 07:29:45 +0000
asID:                     7029
IP address blocks:        199.101.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:74:25:97:f4:d6:f4:01:d4:06:0f:85:cc:59:22:ed:01:f4:d4:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Sep 11 07:24:45 2025 GMT
            Not After : Sep 10 07:29:45 2026 GMT
        Subject: CN=B5A477B7ED9861A9BDCC701F5592BF4880C25920
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ef:18:b3:bc:3d:bd:1d:c9:34:2a:30:66:5b:
                    eb:1b:d3:51:1f:3d:0d:e9:38:81:85:ee:fd:5c:af:
                    8b:94:df:10:ac:ce:c0:52:c4:d8:b7:24:30:e2:07:
                    e8:bb:18:87:47:4f:9f:1b:0b:6e:14:41:f0:7c:ee:
                    52:17:15:09:0f:4e:13:d6:51:71:b7:cd:25:cf:7d:
                    e6:11:be:6a:8c:02:cc:41:51:3d:20:df:4a:f4:08:
                    7e:38:38:65:1a:ee:1e:d6:d6:cb:8c:e0:44:ee:c5:
                    a0:01:87:5a:7a:1f:9d:86:4d:4a:35:6d:ae:60:ac:
                    9c:b8:88:cc:12:50:c5:db:06:39:fb:e8:9b:89:31:
                    a1:f7:b2:3a:3d:84:f1:72:0a:54:db:00:71:73:ed:
                    19:41:1c:03:24:d4:e6:e2:2a:d3:ee:bc:60:6a:4e:
                    b7:1d:ab:d9:4d:ff:fc:72:a9:dd:47:b5:2d:3a:a6:
                    e4:2b:50:81:03:27:c6:00:1b:57:f4:7c:9c:c1:8c:
                    9a:7f:ac:5f:ac:c8:ee:ee:0e:a0:20:e1:31:72:e9:
                    f7:ca:fa:44:aa:ca:94:58:ee:5f:1e:a9:ff:ef:0d:
                    f3:d2:68:64:75:66:11:5e:01:fb:50:06:54:a0:0c:
                    39:73:0c:2f:d3:05:43:bc:7b:87:f6:5f:8f:2f:0b:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:A4:77:B7:ED:98:61:A9:BD:CC:70:1F:55:92:BF:48:80:C2:59:20
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136382e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:63:ab:2a:a1:23:6b:68:0a:00:c8:93:f5:4f:ad:8b:e6:cb:
         00:ef:9c:b7:f3:33:bc:32:29:0c:fb:a3:d5:bf:19:6b:d8:85:
         9a:8b:ad:d7:80:da:8a:c4:85:d2:e0:37:e9:96:d6:ca:8a:8b:
         0c:12:7c:65:82:a0:23:45:3d:9d:d2:69:98:ae:a5:91:a2:c1:
         dc:ed:5e:a8:4e:39:33:99:7f:6a:8e:42:87:5b:3a:e7:f9:f7:
         cb:39:05:b1:2b:cd:ec:3a:46:1e:01:6c:99:23:00:40:8a:e9:
         8b:6f:9a:2c:8d:6e:f7:a3:d1:34:7b:52:0f:26:9b:93:2b:03:
         71:e3:1f:25:49:92:4a:27:93:86:c0:36:33:b0:2c:1c:83:d8:
         5f:5f:af:5a:dd:e1:d4:39:f8:3b:88:fa:34:c8:4b:e7:b9:49:
         c6:b5:f5:e3:75:39:4f:c2:2b:63:a1:d1:ca:ff:12:e5:32:59:
         ec:c0:66:da:5f:6b:4d:85:cf:d2:a2:fa:bb:d5:0d:c7:a5:28:
         a1:7f:36:f8:3b:d2:2a:09:85:20:8f:1d:53:28:42:89:61:ca:
         fc:12:3d:a1:57:3f:b4:7a:d4:ed:4f:d0:cf:31:cd:2d:d2:17:
         db:0e:cb:58:90:00:c6:e0:d3:6f:26:8e:ea:bf:3c:d3:19:d9:
         17:f2:50:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:25:12 2025 by rpki-client