Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/3139382e38342e302e302f32322d3234203d3e20343030393531.roa
File:                     3139382e38342e302e302f32322d3234203d3e20343030393531.roa (raw, json)
Hash identifier:          ML4Un+iGTjZXmzbhS3Asq9Z28z0XbU2m5UuOIKb4gjU=
Subject key identifier:   4F:ED:79:E9:9F:20:5D:A0:19:63:11:11:0A:E6:08:BA:25:50:A5:6D
Certificate issuer:       /CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
Certificate serial:       5D43F678AA0626125F1DC45CCDB14CBA857F4E00
Authority key identifier: FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/3139382e38342e302e302f32322d3234203d3e20343030393531.roa
Signing time:             Tue 03 Nov 2026 09:15:20 +0000
ROA not before:           Tue 03 Nov 2026 09:10:20 +0000
ROA not after:            Tue 02 Nov 2027 09:15:20 +0000
asID:                     400951
IP address blocks:        198.84.0.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Nov 2026 21:48:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:43:f6:78:aa:06:26:12:5f:1d:c4:5c:cd:b1:4c:ba:85:7f:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775
        Validity
            Not Before: Nov  3 09:10:20 2026 GMT
            Not After : Nov  2 09:15:20 2027 GMT
        Subject: CN=4FED79E99F205DA0196311110AE608BA2550A56D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6c:5d:92:c2:92:81:f3:88:82:b6:aa:15:a0:
                    98:a9:89:6a:7c:0c:4d:5b:62:da:47:20:14:3d:cd:
                    b1:1b:db:e0:d6:ca:38:fe:fd:e1:7c:c0:9b:5b:53:
                    d0:1f:fa:33:d0:97:24:2b:b0:0e:75:38:6b:48:47:
                    ed:30:77:69:c9:0f:c4:b0:8d:80:79:ae:e3:ef:93:
                    9d:40:1a:bc:cf:ad:91:bd:df:3f:d7:5b:f3:8f:8a:
                    a7:b5:c2:11:12:7c:e1:3d:f5:9f:98:34:f7:32:77:
                    fa:4d:99:9d:7e:e9:3e:29:cc:57:7a:20:9c:2b:6b:
                    7b:c6:12:e5:32:57:18:4e:ee:97:78:ea:5f:05:19:
                    1d:36:bb:0c:ee:ee:db:80:02:da:c2:74:52:ed:13:
                    92:29:ab:0d:66:33:48:7d:ee:6c:c7:21:f0:a4:89:
                    67:89:3b:ac:e0:5e:c2:b2:57:4f:e3:43:70:c0:a8:
                    5a:82:4b:2b:25:6c:3d:30:1a:84:b6:aa:ab:0f:9c:
                    f9:81:75:49:8d:8c:6c:55:6d:a2:21:89:b5:fd:ee:
                    cd:68:e3:1f:2e:16:9e:83:51:7b:b2:08:35:e9:3c:
                    50:1f:98:78:5a:e1:7e:4c:ba:32:af:13:f0:74:43:
                    6a:f1:df:bb:9d:fa:1a:4d:a1:6c:89:88:b3:61:ee:
                    26:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:ED:79:E9:9F:20:5D:A0:19:63:11:11:0A:E6:08:BA:25:50:A5:6D
            X509v3 Authority Key Identifier:
                keyid:FD:CC:EA:4A:55:0B:41:E8:52:B3:36:E7:17:92:E5:36:57:E4:F2:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/FDCCEA4A550B41E852B336E71792E53657E4F280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/37fe8a4a-3fd3-4ba0-9423-f957bd58bca4/99a8a036db0e8f1d29d003f0fec681f66db1269cde1507e775.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/0/3139382e38342e302e302f32322d3234203d3e20343030393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.84.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         05:ac:7e:cf:88:7f:af:ef:f6:35:15:b4:46:76:8a:cf:c7:7c:
         6f:e6:34:79:3a:1f:b4:ad:05:03:cf:81:da:d6:69:38:65:94:
         37:94:d1:cc:c5:35:90:84:f7:85:bf:a2:7b:e8:bd:98:61:a3:
         45:c9:42:af:b9:63:3c:7d:05:b7:c4:c6:f9:5c:f8:26:75:d8:
         f6:4d:dc:3c:fd:70:c5:f8:a1:18:66:e5:21:82:b5:8c:8f:12:
         42:cf:97:26:b1:c8:00:1d:ea:94:2e:18:c6:ae:1b:8c:f8:81:
         62:d3:16:dc:97:87:79:ae:ac:36:5a:60:14:3c:0b:04:c8:cf:
         79:ec:c6:5e:b4:ab:9c:62:55:69:29:31:9b:9c:41:19:fa:5b:
         f1:c2:86:5b:30:85:bc:4b:d2:7e:cc:05:61:a7:bf:32:d0:9c:
         4c:6a:51:2d:05:2a:ce:36:43:c1:fa:73:f0:e1:5f:5f:a9:f4:
         65:d3:e3:e5:19:0c:ce:e5:d6:97:f2:6e:99:7d:d2:a7:5d:8b:
         80:85:16:85:e4:35:70:32:1b:11:2f:1b:44:29:35:5a:e3:cb:
         87:3b:da:28:5e:66:66:67:ee:cf:6c:1e:e2:74:a3:35:17:30:
         8f:b8:47:4e:ad:8b:62:01:e7:70:5d:22:a1:e5:ba:76:2d:1e:
         be:a9:ec:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:38:14 2026 by rpki-client