Route Origin Authorization

$ rpki-client -vvvf rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38312e302f32342d3234203d3e20383334.roa
File:                     3139392e3131352e38312e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          Y73ZxCubDTFvAmmy+mfR1f2Ai9wCs0reMTLF1ZYHjmE=
Subject key identifier:   92:FC:5A:15:C7:C1:B8:B7:A9:ED:75:61:04:F0:E1:6A:00:38:FB:1D
Certificate issuer:       /CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
Certificate serial:       035A99688632AF8869A4D475B477771E2CB10B3B
Authority key identifier: 14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38312e302f32342d3234203d3e20383334.roa
Signing time:             Wed 11 Nov 2026 21:25:08 +0000
ROA not before:           Wed 11 Nov 2026 21:20:08 +0000
ROA not after:            Wed 10 Nov 2027 21:25:08 +0000
asID:                     834
IP address blocks:        199.115.81.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl
                          rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/d74ca664-8ba4-4db9-be85-dbdb20f6af27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Nov 2026 01:20:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5a:99:68:86:32:af:88:69:a4:d4:75:b4:77:77:1e:2c:b1:0b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a074996c2707e66abfcbfceefd470e41cb360aac678fe38272
        Validity
            Not Before: Nov 11 21:20:08 2026 GMT
            Not After : Nov 10 21:25:08 2027 GMT
        Subject: CN=92FC5A15C7C1B8B7A9ED756104F0E16A0038FB1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b5:95:76:58:0a:8f:f2:28:49:2b:b9:dd:bd:
                    7d:cb:e1:19:0c:e5:f7:46:65:cf:ba:13:48:75:d8:
                    d2:f0:fd:3e:df:4c:10:2d:ce:22:88:e2:70:a3:4e:
                    fc:56:db:b0:2b:39:5e:9a:72:22:ee:5b:81:b4:04:
                    13:e4:f7:bd:77:e3:e5:23:28:13:55:9a:95:35:8f:
                    4a:b8:78:7e:1f:f2:cd:80:dd:8f:e6:a3:54:6b:5b:
                    c5:71:48:23:55:72:35:62:f1:c5:87:bd:6d:7d:55:
                    34:be:e9:18:f2:de:07:7b:41:82:10:bf:91:0c:3c:
                    09:db:8a:2a:dd:c7:91:66:f4:fd:4c:59:83:f5:5d:
                    f0:e8:0f:da:8c:7d:ee:41:4f:5e:ad:e2:cc:a5:af:
                    37:b4:33:7d:a6:1c:4d:7c:b4:b4:8c:ab:8f:45:9f:
                    4a:95:df:66:fb:3a:f9:a6:1b:db:0c:a6:2f:13:d0:
                    12:5f:91:ea:b1:51:49:5a:8e:67:38:84:b2:a0:ca:
                    0a:21:8b:5a:dd:25:c5:ac:1c:32:ea:f8:39:49:82:
                    6d:25:f4:c9:79:7f:49:29:e6:93:04:28:bc:c0:af:
                    f4:76:63:f1:52:aa:a8:77:b0:52:12:c8:ef:ad:1c:
                    03:8f:89:38:1f:02:7a:8b:27:41:45:09:c2:a3:b6:
                    91:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:FC:5A:15:C7:C1:B8:B7:A9:ED:75:61:04:F0:E1:6A:00:38:FB:1D
            X509v3 Authority Key Identifier:
                keyid:14:5D:CD:F7:1D:9F:89:12:AD:59:57:44:90:D7:58:0B:C0:0D:3B:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/145DCDF71D9F8912AD59574490D7580BC00D3B16.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/d74ca664-8ba4-4db9-be85-dbdb20f6af27/a074996c2707e66abfcbfceefd470e41cb360aac678fe38272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/afb01f6e01de42a29ebfc39c02dd5368/0/3139392e3131352e38312e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.115.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:bf:a9:23:c7:a6:6f:2e:3d:50:27:bc:38:b4:4e:de:ef:01:
         f1:85:a0:4f:54:49:16:d2:65:b7:ee:f0:4d:4e:77:57:1a:b9:
         6b:e4:7d:97:ee:a2:55:63:a9:66:28:88:fc:d4:50:ef:f9:1a:
         81:aa:a5:7d:8a:36:18:e0:aa:e8:c7:79:5f:45:03:07:1c:bd:
         42:36:c8:b2:8a:85:d6:82:a4:17:40:68:1d:b6:f8:65:9c:4b:
         10:bc:ad:c7:4a:79:49:b3:de:03:9a:f7:d9:05:e8:9e:3a:b8:
         eb:64:ed:e7:53:eb:a8:5b:bf:db:f3:cd:86:1d:cb:42:f5:6d:
         66:53:46:48:54:b6:23:96:2d:e5:60:b4:3d:8b:c2:ed:ef:38:
         2f:2b:f0:d5:92:85:46:54:f1:27:49:8b:56:38:5d:1c:5f:0e:
         93:36:06:5f:14:79:0d:2f:76:d0:54:c3:ca:1d:76:4c:b7:77:
         6b:fe:62:90:ac:dd:b2:a2:30:e2:cf:92:8f:33:d3:2c:d6:85:
         30:34:a9:01:a3:c7:1e:0b:42:65:00:e1:95:a8:6f:09:fc:1d:
         c2:e5:d8:5d:ce:ef:c8:d8:a7:53:6f:ad:e2:6a:7f:e0:f7:b4:
         61:dd:83:1f:b2:8f:42:43:ab:53:89:df:b1:0d:fb:55:dd:59:
         6e:2b:3f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:40:47 2026 by rpki-client