Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e203633303233.roa
File:                     3139392e39312e39362e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          ry8rBrscy2s4m2l3gVo+rZSVVgKh+mZz4Taj9UQcUI8=
Subject key identifier:   75:E9:EF:81:2A:55:B3:56:E8:F3:ED:11:97:60:D2:6C:80:D8:00:5F
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       2A1C2759C917C49B26F1609639A6FF30AF2A0FE5
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e203633303233.roa
Signing time:             Mon 14 Jul 2025 16:29:44 +0000
ROA not before:           Mon 14 Jul 2025 16:24:44 +0000
ROA not after:            Mon 13 Jul 2026 16:29:44 +0000
asID:                     63023
IP address blocks:        199.91.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 01:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1c:27:59:c9:17:c4:9b:26:f1:60:96:39:a6:ff:30:af:2a:0f:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jul 14 16:24:44 2025 GMT
            Not After : Jul 13 16:29:44 2026 GMT
        Subject: CN=75E9EF812A55B356E8F3ED119760D26C80D8005F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:93:37:d9:1f:fd:a4:94:d6:c8:6f:dc:6a:db:
                    38:e5:ec:8f:e4:76:4a:29:55:39:37:bb:bb:25:41:
                    09:b8:d8:a4:f0:d4:b1:35:f2:26:a9:4a:f7:96:e4:
                    b1:1b:63:5b:cd:bd:c8:f4:96:33:30:f5:85:a8:eb:
                    ad:bc:eb:fb:0c:a5:fe:e6:3d:61:e6:54:12:0d:1e:
                    93:8c:a4:82:4a:fb:e0:e6:e9:dd:fb:57:4b:e6:fc:
                    19:c2:57:ac:5b:c6:ef:c8:d3:96:41:cd:91:f7:b8:
                    93:75:67:be:a6:10:ad:c7:04:dc:b6:26:37:98:3f:
                    4e:90:f7:d0:9c:e3:52:67:ec:69:33:42:2a:8a:34:
                    56:e1:39:3a:01:69:42:98:bc:0b:08:c3:2e:5d:15:
                    e8:8a:d8:73:34:5a:55:1e:20:8e:7f:00:96:a6:d7:
                    89:aa:6c:5d:29:87:8a:e1:00:70:5e:07:0c:31:88:
                    e5:31:90:ce:64:cd:87:f0:54:1f:6e:cd:5e:45:bb:
                    a3:a4:43:be:07:8b:8b:6c:20:f0:37:39:6e:d5:f3:
                    ce:91:1d:61:fa:cd:fe:41:60:f2:3b:15:01:3d:b5:
                    1a:6d:6a:99:e2:62:f4:91:3f:fb:c9:9f:ff:a1:62:
                    2c:ec:eb:ee:d4:90:2d:cc:c4:04:46:c6:67:45:03:
                    34:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E9:EF:81:2A:55:B3:56:E8:F3:ED:11:97:60:D2:6C:80:D8:00:5F
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39362e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:1b:b7:e1:23:08:42:9e:58:56:4a:d1:3f:e1:c6:4f:47:6a:
         16:74:5d:23:4d:44:94:2d:c2:bc:f0:e8:2b:ec:f2:cd:54:ce:
         71:54:1c:89:38:1f:08:01:e3:e5:9c:f5:6e:e5:30:a9:0c:79:
         2d:2b:71:26:8b:ec:19:f2:ec:a5:05:ad:c1:6f:b5:97:23:fc:
         d3:cc:7c:40:60:79:1b:04:33:83:b2:ce:25:1c:f8:a9:88:03:
         1d:9c:95:09:49:80:a6:ec:e9:6b:d2:e4:e7:58:ad:37:e8:96:
         90:3a:89:71:1f:78:9d:85:55:e7:85:e3:69:85:c7:4f:29:58:
         46:19:de:d0:9d:00:1f:b7:fa:3d:49:41:bf:e0:3d:d6:fb:a6:
         32:39:f2:ed:2a:3c:18:81:d5:8b:e9:21:43:88:ee:ae:be:7f:
         12:00:41:26:92:5b:5a:7c:05:2b:f4:df:08:cc:f5:15:0a:a0:
         f8:7f:88:96:42:9b:a5:22:2d:51:77:aa:b2:a0:22:cc:07:dc:
         fe:fe:51:2b:d0:87:e0:e4:ba:28:d3:a1:82:70:ca:67:11:97:
         b0:a8:1c:8c:88:ae:3c:95:8e:22:23:60:a4:81:ef:e0:0d:97:
         a6:f4:cd:41:3c:99:49:a4:ed:8f:46:95:de:fb:7d:bd:19:a8:
         8f:06:5d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:12:56 2025 by rpki-client