Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137302e302f32342d3234203d3e2039333034.roa
File:                     3139392e3130312e3137302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          QK1ZL0/X0Erow8Xy2HiXLyui0DUHqw4TYeJg1/NxkxM=
Subject key identifier:   E2:B0:7C:87:36:70:CA:BB:E8:9A:0F:4D:17:70:FC:35:0D:63:B6:67
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       3C60A70ADAB4F16A7C68C33B5A454D922553C390
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137302e302f32342d3234203d3e2039333034.roa
Signing time:             Tue 05 May 2026 02:36:00 +0000
ROA not before:           Tue 05 May 2026 02:31:00 +0000
ROA not after:            Tue 04 May 2027 02:36:00 +0000
asID:                     9304
IP address blocks:        199.101.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 13 May 2026 22:57:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:60:a7:0a:da:b4:f1:6a:7c:68:c3:3b:5a:45:4d:92:25:53:c3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: May  5 02:31:00 2026 GMT
            Not After : May  4 02:36:00 2027 GMT
        Subject: CN=E2B07C873670CABBE89A0F4D1770FC350D63B667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6d:ee:d7:b8:08:6e:f4:51:ad:c3:11:5a:be:
                    f1:b9:70:6e:16:9c:6b:48:2c:c5:ac:36:e2:90:e1:
                    41:28:3f:e9:14:ab:6c:a2:4b:25:5d:d0:06:3a:2b:
                    b4:39:9b:f2:d2:c7:f6:ad:c0:36:a7:31:62:c3:7e:
                    f2:a1:b8:6c:6b:37:d1:a3:3c:0f:20:93:9d:5e:61:
                    bb:cc:04:3d:dc:61:ab:04:47:76:ca:9e:c6:33:fe:
                    9d:a9:d5:cc:1a:9d:51:db:3b:66:2a:31:47:f2:e0:
                    cb:c0:21:5c:64:19:d6:10:fc:8a:29:1b:b2:d8:45:
                    77:91:5f:2e:4c:46:dd:c2:7b:ca:4b:8e:aa:f3:db:
                    09:13:3a:82:7b:64:01:ce:22:cf:c5:f6:94:c2:34:
                    08:0e:8f:3b:53:c5:7e:79:aa:c6:b8:43:cf:45:8c:
                    94:25:5e:23:8f:5f:f5:a4:43:45:02:88:2e:52:b8:
                    86:9d:0d:2a:00:1a:16:82:22:21:7a:2e:52:c1:71:
                    ac:20:d6:c4:6e:a9:bf:e2:27:a0:96:1e:91:f6:f9:
                    1b:46:4a:83:c0:17:0f:31:03:53:c3:05:c5:a6:ab:
                    1b:0c:1f:10:10:f4:a5:fd:6d:77:b2:7b:31:e5:8b:
                    cd:76:d2:73:8b:96:e2:f5:a4:44:bb:1f:a7:83:d3:
                    a1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B0:7C:87:36:70:CA:BB:E8:9A:0F:4D:17:70:FC:35:0D:63:B6:67
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e3130312e3137302e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:fb:fb:ae:88:b7:9d:7b:d8:5e:88:a6:56:8a:54:e8:f3:f0:
         36:f9:de:82:04:d8:15:a5:03:22:17:06:00:c5:4f:47:68:cb:
         e2:4b:d2:63:bc:5f:0f:73:21:7d:e6:a2:67:dd:13:eb:65:71:
         bd:32:f5:34:ac:50:70:bd:bf:12:1f:7a:03:39:e4:88:9b:72:
         d9:e2:8f:71:77:55:d2:b3:f7:4e:10:0d:6f:0d:3d:44:c5:54:
         80:13:5b:db:57:fe:c5:ee:32:d2:95:86:93:9f:54:ce:dc:97:
         c6:e6:6f:58:ec:b0:92:24:ff:95:54:66:76:44:fa:49:c9:49:
         a0:7c:89:b0:ae:1b:a7:15:52:cd:56:1b:15:41:18:0f:a3:a5:
         5d:66:ed:c6:e0:89:61:6c:8e:9c:4a:c6:47:ee:2e:87:70:60:
         6d:88:92:6d:b2:3a:05:3f:c9:f6:0a:16:8e:fb:e4:05:31:97:
         20:29:b4:48:cc:22:26:6f:f6:e4:48:e9:79:7c:5c:bc:41:4d:
         9d:ed:23:fe:94:06:eb:ce:3f:80:63:04:69:29:e0:ca:46:b5:
         e4:5e:4c:7c:28:3b:66:7c:9c:9c:15:b6:fc:4c:02:77:fd:46:
         06:cd:5f:b7:ac:92:c3:9a:63:4a:53:4f:c0:0c:4c:70:5a:13:
         49:4a:27:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:35 2026 by rpki-client