Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa
File:                     3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          uGLs0mY79Cqp0VKzs/VzwKijNu273zHmmoP8PQwtaeA=
Subject key identifier:   3F:4F:E7:EA:E6:12:A1:37:45:55:93:5A:BD:CB:31:58:68:73:27:35
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       4222211731A233F57A90380E0F30D485063BCCAF
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 11 Sep 2025 07:29:45 +0000
ROA not before:           Thu 11 Sep 2025 07:24:45 +0000
ROA not after:            Thu 10 Sep 2026 07:29:45 +0000
asID:                     7029
IP address blocks:        199.101.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:22:21:17:31:a2:33:f5:7a:90:38:0e:0f:30:d4:85:06:3b:cc:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Sep 11 07:24:45 2025 GMT
            Not After : Sep 10 07:29:45 2026 GMT
        Subject: CN=3F4FE7EAE612A1374555935ABDCB315868732735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b5:97:f2:87:67:cd:1a:66:30:12:d7:75:37:
                    9b:80:64:07:9f:b0:36:c1:73:a0:a6:01:0d:69:b6:
                    b3:04:72:4c:5c:9f:9c:85:29:4b:dd:89:63:30:56:
                    49:f3:3c:1d:45:6f:ba:37:ec:5f:a0:23:7a:a8:b1:
                    4d:09:79:08:dc:11:bd:02:42:1f:20:39:25:5c:87:
                    9c:8c:99:ac:1a:c8:49:c3:44:ca:9d:71:0f:2c:93:
                    5a:01:69:50:29:f1:b0:19:86:7a:3c:34:b6:0f:eb:
                    15:5f:3e:30:d6:ab:ec:b0:18:21:20:bf:01:94:c3:
                    ef:f6:cf:d5:94:08:52:2b:03:c3:0b:d7:b2:01:e4:
                    f6:57:9b:46:3f:31:53:96:e1:64:86:af:b0:bc:ed:
                    09:a6:33:27:b1:45:7e:a0:c5:73:c7:e3:8a:22:ab:
                    7e:5b:ea:b6:9d:05:4a:39:1d:25:99:48:49:16:7f:
                    e7:a2:f5:e7:54:7e:ea:86:81:9f:b1:55:8a:b8:c8:
                    df:13:34:f4:96:f7:d2:9f:67:07:2f:c7:07:ca:09:
                    ad:9e:64:bb:8a:85:7a:39:13:91:91:3b:16:13:56:
                    42:dc:80:89:16:5c:c2:27:1c:48:f5:33:06:1a:b3:
                    da:4a:8b:96:3c:72:cf:d0:b1:2e:8f:12:bd:fb:be:
                    09:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:4F:E7:EA:E6:12:A1:37:45:55:93:5A:BD:CB:31:58:68:73:27:35
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3136392e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:bf:f8:b7:85:e7:e4:0c:e0:80:d7:ac:4f:ae:47:66:14:27:
         33:9d:6e:ca:34:fa:6d:fa:c6:f7:c6:c3:72:99:d9:07:74:e9:
         3b:89:1b:b9:66:65:57:28:4e:2c:ff:f8:cd:7b:c8:ef:96:af:
         2a:8e:09:b9:d0:de:39:a7:67:4d:52:55:e0:71:a6:19:29:bb:
         55:21:5c:ed:27:7a:97:9e:99:9b:b3:6a:01:c7:05:f5:8b:f5:
         4e:98:eb:3e:ec:9d:e2:2f:33:80:06:16:66:37:b0:c5:74:0f:
         64:5c:5a:b9:5f:03:c1:55:fd:d1:dd:b6:81:a1:58:c0:44:0d:
         50:ff:2c:65:89:53:70:ff:43:37:13:d5:27:8c:c9:5a:39:9a:
         08:22:b8:45:ab:54:e4:8c:ae:6e:e6:19:e7:ac:6f:4b:bf:cf:
         6f:56:63:db:94:9f:b9:c2:a4:5b:c7:1b:eb:17:04:c4:d9:58:
         81:38:49:7f:d8:fd:c4:e5:2c:51:08:28:98:79:08:26:5d:b5:
         d6:53:49:f0:45:8a:2f:2a:3d:cb:e4:07:61:b3:29:d4:62:b9:
         0c:c2:aa:1c:fc:9d:e0:a1:3f:60:b8:97:8f:b1:3d:26:85:30:
         8f:f2:5c:d0:a8:34:5e:be:19:15:24:c1:75:59:ca:69:9a:23:
         d4:27:2e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:24:39 2025 by rpki-client