Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3131352e302f32342d3234203d3e20333938393139.roa
File:                     3137322e3130392e3131352e302f32342d3234203d3e20333938393139.roa (raw, json)
Hash identifier:          CuB1Ayn2tZiAApjmTJy6sY7vh/QAkw303/Rvx0okquA=
Subject key identifier:   69:4E:0D:DD:06:B1:63:7A:A5:AC:01:F6:74:E7:CC:D7:5D:98:75:13
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       399478E4A8A8CF9E36BA988551FD6AEDA5CC9032
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3131352e302f32342d3234203d3e20333938393139.roa
Signing time:             Thu 10 Apr 2025 18:03:47 +0000
ROA not before:           Thu 10 Apr 2025 17:58:47 +0000
ROA not after:            Thu 09 Apr 2026 18:03:47 +0000
asID:                     398919
IP address blocks:        172.109.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:27:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:94:78:e4:a8:a8:cf:9e:36:ba:98:85:51:fd:6a:ed:a5:cc:90:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Apr 10 17:58:47 2025 GMT
            Not After : Apr  9 18:03:47 2026 GMT
        Subject: CN=694E0DDD06B1637AA5AC01F674E7CCD75D987513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:52:99:03:68:84:85:34:9f:1f:cd:60:f4:a0:
                    45:3a:6b:0a:9d:8f:58:a6:41:17:20:56:27:59:43:
                    02:17:1f:af:56:f0:64:d8:49:d4:d4:c9:61:cb:9a:
                    2b:56:8f:1e:0d:d4:66:58:77:ff:c6:a7:cb:f3:1b:
                    bc:b1:d0:17:87:53:c0:72:05:01:74:dd:67:e9:9a:
                    be:fb:14:96:12:85:04:0e:91:e6:5a:5e:36:d0:4c:
                    3a:7c:6f:80:b2:24:22:68:a7:b0:9a:61:97:3b:e1:
                    4d:0c:d8:24:12:04:96:83:1a:89:3a:db:95:bf:fe:
                    5b:93:8c:b3:1d:e6:4c:91:fb:d4:7b:73:9e:a5:36:
                    a3:3e:cd:5d:23:d9:85:c8:45:24:73:91:62:d9:7f:
                    7a:f3:a7:da:1c:c1:d5:20:b5:83:42:dc:bc:43:82:
                    33:1c:1c:f0:92:b7:4b:0b:c1:99:06:2e:0b:38:b7:
                    16:82:af:fc:f8:54:77:5b:e4:e9:ae:8c:37:0e:69:
                    8c:99:2c:5a:0f:bb:7b:7e:52:f5:b1:0d:da:a0:ce:
                    2b:ee:e5:cd:d1:50:2a:fb:c0:97:89:39:1c:ed:14:
                    e5:2f:5d:c4:f8:07:37:a5:fb:e4:3d:67:66:40:37:
                    41:86:85:69:69:09:6a:75:a2:07:c4:91:84:a7:97:
                    91:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4E:0D:DD:06:B1:63:7A:A5:AC:01:F6:74:E7:CC:D7:5D:98:75:13
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3131352e302f32342d3234203d3e20333938393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.115.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:13:71:f9:fe:b6:08:2f:66:ad:a1:e6:43:37:e5:0e:60:7a:
         74:59:39:67:db:c7:fd:65:52:10:e6:a8:0d:ad:0d:c9:f7:43:
         0b:27:e3:10:68:57:42:4a:7c:7d:8e:70:63:32:e6:93:62:68:
         e6:f9:d3:e6:1d:e6:43:ec:18:9b:64:ce:ff:5e:89:1c:ce:dc:
         2f:73:7d:37:70:86:5e:c9:48:42:cf:e3:94:53:1a:49:c0:98:
         44:d1:07:f3:ef:75:90:bf:51:cc:16:64:2f:f9:af:23:75:60:
         97:14:d4:2c:d2:85:0d:6e:7c:69:84:27:20:eb:d1:43:73:58:
         e3:c0:a8:55:87:11:03:1d:b1:db:49:e2:a5:80:74:76:f4:73:
         3c:cd:63:19:0e:0a:51:db:2a:fb:bc:3b:9a:a3:b6:26:52:28:
         61:01:be:64:b3:08:0c:51:8d:9b:42:9d:81:1b:7e:bb:ad:16:
         cd:38:c1:e9:9b:8f:96:fa:9e:8a:ba:8e:d1:9e:7e:37:91:86:
         e6:58:f6:7f:b0:36:b7:9a:5d:29:e9:9a:f8:a8:61:47:9b:5f:
         f1:7c:b9:d8:ab:65:da:78:c9:c8:5a:d4:44:8f:6d:c0:87:01:
         51:18:09:51:4a:54:eb:f9:3e:8b:c8:82:c5:5e:75:d0:e0:c6:
         fe:10:3c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:51:14 2025 by rpki-client