Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa
File:                     3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa (raw, json)
Hash identifier:          RE3Nnx686+kXANo7HWgfJRDtLfCjdNFNKVA63xJ+7mg=
Subject key identifier:   CF:06:FE:5F:BA:D1:A2:93:A0:AB:B3:BF:B3:D3:15:66:04:3E:98:EA
Certificate issuer:       /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial:       3C4EAB40C0BA1FB459C4CD2F8F190A2E3482E085
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa
Signing time:             Fri 03 Jan 2025 01:28:23 +0000
ROA not before:           Fri 03 Jan 2025 01:23:23 +0000
ROA not after:            Fri 02 Jan 2026 01:28:23 +0000
asID:                     393506
IP address blocks:        199.204.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:49:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:4e:ab:40:c0:ba:1f:b4:59:c4:cd:2f:8f:19:0a:2e:34:82:e0:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Validity
            Not Before: Jan  3 01:23:23 2025 GMT
            Not After : Jan  2 01:28:23 2026 GMT
        Subject: CN=CF06FE5FBAD1A293A0ABB3BFB3D31566043E98EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:01:d3:15:af:07:91:ab:86:7f:50:14:d9:b1:
                    32:c2:8e:1f:66:2f:89:36:4a:2d:49:dc:ce:0b:e2:
                    ee:b4:fa:49:68:cb:27:f9:8b:42:7c:79:fb:48:56:
                    79:e0:0d:5f:fd:bd:75:f7:ed:19:c0:c1:61:14:e4:
                    22:52:01:cc:41:62:25:a2:82:6d:69:28:0d:27:dc:
                    f2:3a:1a:17:cc:71:4c:e4:24:0c:7c:ba:cc:ad:aa:
                    8c:5a:07:cd:21:e0:65:ef:f8:23:36:83:c5:c1:9b:
                    ba:10:f3:23:64:d0:f8:70:37:4d:c3:aa:b4:ca:d4:
                    db:3b:47:0c:9e:a8:36:05:59:72:55:2a:fc:eb:c6:
                    47:7f:b4:98:8f:35:f7:76:81:fe:2c:d7:6e:f7:5a:
                    11:45:a4:80:02:c9:22:8b:be:13:a1:79:b5:24:16:
                    36:e0:5d:21:56:b1:e8:95:17:f8:39:96:7b:c2:35:
                    c3:1c:0e:f1:74:32:b8:84:d8:ce:6c:9d:20:1b:5f:
                    62:0c:0a:71:66:52:b5:a3:88:4d:8b:2a:74:a0:84:
                    f2:89:a0:61:38:9b:72:19:6c:f3:aa:f3:14:54:33:
                    95:86:55:c8:76:9a:15:8c:8c:2f:cf:73:0b:01:16:
                    4d:4d:10:54:49:2a:4f:f8:5c:1d:a0:07:38:12:b5:
                    40:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:06:FE:5F:BA:D1:A2:93:A0:AB:B3:BF:B3:D3:15:66:04:3E:98:EA
            X509v3 Authority Key Identifier:
                keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136332e302f32342d3234203d3e20333933353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:7c:10:bd:a7:b2:81:f3:ed:f3:71:e0:5f:fa:74:ba:4a:d4:
         a9:fe:4e:07:ba:75:5e:63:8b:78:ea:b6:e8:b6:47:28:10:0a:
         c6:12:42:b0:3d:ba:2b:e3:9f:ac:c9:1c:a8:51:40:77:e9:d8:
         80:e4:15:01:f0:a6:5d:bb:b4:6a:46:69:1f:51:6d:45:59:cb:
         1b:46:2a:bb:71:ed:b9:44:e6:2f:1a:24:b6:11:b2:19:8d:98:
         af:41:05:37:97:53:db:6d:cf:fb:c6:b0:93:20:30:35:12:67:
         2e:df:83:c8:ac:26:98:00:c9:e0:80:ef:c3:57:96:70:3f:f0:
         2b:41:01:3b:f0:42:1f:02:af:95:61:e2:dc:4d:9a:96:cd:34:
         98:b3:08:6c:d2:72:9a:0e:a8:02:26:d1:e9:60:29:6f:0d:3b:
         ac:b8:8c:6b:34:2b:67:f9:e0:a1:2f:4c:25:62:55:be:55:b2:
         b9:8c:1d:22:c8:66:37:96:4e:d0:36:44:95:71:be:0a:ab:01:
         36:ee:52:17:85:5a:e1:3d:6b:16:d7:39:f5:d7:18:79:59:d7:
         30:a8:3f:b7:99:29:51:f9:4a:d2:bf:01:fb:1f:ca:5a:65:59:
         04:22:cf:05:5e:85:19:53:d3:4c:fe:a2:7a:23:6f:3b:ae:f7:
         d7:98:83:db
-----BEGIN CERTIFICATE-----
MIIFtjCCBJ6gAwIBAgIUPE6rQMC6H7RZxM0vjxkKLjSC4IUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYmU0OWFkYWIxNDA0NDg3ZmE5ZmQ1ZTFmOGU2YzE5YzA5
OTM2MTBjZWFmNTU2MzhiYzcwHhcNMjUwMTAzMDEyMzIzWhcNMjYwMTAyMDEyODIz
WjAzMTEwLwYDVQQDEyhDRjA2RkU1RkJBRDFBMjkzQTBBQkIzQkZCM0QzMTU2NjA0
M0U5OEVBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8AHTFa8HkauG
f1AU2bEywo4fZi+JNkotSdzOC+LutPpJaMsn+YtCfHn7SFZ54A1f/b119+0ZwMFh
FOQiUgHMQWIlooJtaSgNJ9zyOhoXzHFM5CQMfLrMraqMWgfNIeBl7/gjNoPFwZu6
EPMjZND4cDdNw6q0ytTbO0cMnqg2BVlyVSr868ZHf7SYjzX3doH+LNdu91oRRaSA
Askii74ToXm1JBY24F0hVrHolRf4OZZ7wjXDHA7xdDK4hNjObJ0gG19iDApxZlK1
o4hNiyp0oITyiaBhOJtyGWzzqvMUVDOVhlXIdpoVjIwvz3MLARZNTRBUSSpP+Fwd
oAc4ErVAYQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFM8G/l+60aKToKuzv7PTFWYE
PpjqMB8GA1UdIwQYMBaAFJ987m5jYBD5PANG7t5VZXGO72KnMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODUwY2ZlYjcwMTg1NWFjYTRiMTczNDM0LzAv
OUY3Q0VFNkU2MzYwMTBGOTNDMDM0NkVFREU1NTY1NzE4RUVGNjJBNy5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2NmM2E4MTJjLTBmMTAtNDVlYy1hY2EzLTY4YTczZTk5ZDA4Zi9iZTQ5
YWRhYjE0MDQ0ODdmYTlmZDVlMWY4ZTZjMTljMDk5MzYxMGNlYWY1NTYzOGJjNy5j
ZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg1MGNmZWI3MDE4NTVh
Y2E0YjE3MzQzNC8wLzMxMzkzOTJlMzIzMDM0MmUzMTM2MzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMzM5MzMzNTMwMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADHzKMwDQYJKoZIhvcN
AQELBQADggEBAD98EL2nsoHz7fNx4F/6dLpK1Kn+Tge6dV5ji3jqtui2RygQCsYS
QrA9uivjn6zJHKhRQHfp2IDkFQHwpl27tGpGaR9RbUVZyxtGKrtx7blE5i8aJLYR
shmNmK9BBTeXU9ttz/vGsJMgMDUSZy7fg8isJpgAyeCA78NXlnA/8CtBATvwQh8C
r5Vh4txNmpbNNJizCGzScpoOqAIm0elgKW8NO6y4jGs0K2f54KEvTCViVb5VsrmM
HSLIZjeWTtA2RJVxvgqrATbuUheFWuE9axbXOfXXGHlZ1zCoP7eZKVH5StK/Afsf
ylplWQQizwVehRlT00z+onojbzuu99eYg9s=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:32:37 2025 by rpki-client