Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa
File:                     3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          6IRJjNuUUsCldvIHpNQuiVmUH1wIhSR+Y+14mWePcEw=
Subject key identifier:   A8:73:68:00:6D:AB:4F:8A:27:B5:29:DD:B1:BD:B0:74:1E:74:F4:C1
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1806B1724600BC99B5E90B4EB38AD696429F1308
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa
Signing time:             Tue 22 Apr 2025 08:28:30 +0000
ROA not before:           Tue 22 Apr 2025 08:23:30 +0000
ROA not after:            Tue 21 Apr 2026 08:28:30 +0000
asID:                     9009
IP address blocks:        192.109.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 08:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:06:b1:72:46:00:bc:99:b5:e9:0b:4e:b3:8a:d6:96:42:9f:13:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 22 08:23:30 2025 GMT
            Not After : Apr 21 08:28:30 2026 GMT
        Subject: CN=A87368006DAB4F8A27B529DDB1BDB0741E74F4C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:ef:b5:21:ac:a1:ca:b0:5f:07:fd:ad:50:
                    58:9e:3a:05:87:6e:d5:de:93:8b:04:51:0f:c1:a4:
                    a9:f1:db:de:a0:10:95:c2:9d:44:b0:9e:e5:cb:bd:
                    cf:5f:80:1d:b0:68:75:de:56:b6:0d:b9:d2:97:76:
                    00:54:9d:d8:cc:17:f3:ed:f1:ab:e7:fe:99:90:49:
                    8d:18:76:e8:a7:38:f0:aa:37:22:60:20:26:b4:71:
                    79:7f:f3:b0:14:77:9e:6e:34:7c:cf:75:9b:b0:92:
                    07:6a:42:cd:aa:88:f2:ab:24:8e:09:e8:46:9f:a7:
                    39:00:b5:fe:6f:52:b6:74:fd:88:45:99:c3:4a:e1:
                    2d:10:9a:7f:9c:fd:1a:4a:9f:1f:04:4f:82:0d:ac:
                    4f:97:cc:91:19:86:63:8c:4c:cb:94:af:20:45:5a:
                    bb:e8:33:7e:a0:00:67:3d:12:59:aa:19:10:2e:dc:
                    6e:de:23:d8:ad:ed:a1:e4:28:74:7c:ce:21:2b:f8:
                    69:d2:f5:b2:95:d7:19:0f:a1:06:09:c4:3c:d4:22:
                    fc:8f:15:1b:9a:ec:a4:bf:fa:11:b6:7c:c0:69:da:
                    2f:b3:7b:d6:b2:7c:57:41:ba:12:03:bc:94:30:6a:
                    40:e2:17:21:21:59:2c:98:14:99:a6:f3:0f:0f:1d:
                    b7:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:73:68:00:6D:AB:4F:8A:27:B5:29:DD:B1:BD:B0:74:1E:74:F4:C1
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3132332e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:7f:05:eb:67:a4:e5:10:27:5c:a0:89:71:18:a4:f2:7a:89:
         9f:00:e4:51:dd:70:f1:0b:85:16:d5:0b:24:95:77:23:99:e9:
         28:4d:8d:f5:82:d5:fe:e6:13:dd:95:f3:aa:f2:47:38:24:59:
         37:30:8a:0b:98:0c:e7:b9:60:ea:24:e5:9c:ff:5e:32:5d:af:
         97:29:54:b0:cd:cd:d1:c1:d4:31:54:38:21:28:99:8e:51:b6:
         35:e5:1e:f9:54:c1:62:1d:4e:1a:67:9b:43:8b:56:04:ba:ba:
         ee:db:0e:08:db:3a:f9:13:a2:dc:d4:ce:05:98:98:51:42:93:
         a1:7e:34:1b:85:3b:a7:b0:4e:05:b8:05:df:62:31:c8:f9:b4:
         f4:39:86:af:5c:f7:9b:1b:10:b9:23:16:47:83:19:0d:ef:7a:
         3a:1e:ed:6d:74:b5:c3:67:b0:1a:20:08:15:35:ee:2a:36:f5:
         b7:c1:69:8c:67:d9:1a:99:a7:03:7f:17:2d:69:36:32:a0:96:
         9b:36:be:15:aa:37:26:e5:42:91:9a:d5:7d:7b:d7:3c:01:ac:
         cb:cf:99:17:9f:9f:3f:0c:f4:4b:62:da:d1:00:e8:cf:51:4d:
         c1:3f:3e:a1:a9:b7:dc:ec:eb:a8:a1:7d:8f:de:2b:97:d5:4b:
         e3:06:d0:77
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUGAaxckYAvJm16QtOs4rWlkKfEwgwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwNDIyMDgyMzMwWhcNMjYwNDIxMDgyODMw
WjAzMTEwLwYDVQQDEyhBODczNjgwMDZEQUI0RjhBMjdCNTI5RERCMUJEQjA3NDFF
NzRGNEMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3rvtSGsocqw
Xwf9rVBYnjoFh27V3pOLBFEPwaSp8dveoBCVwp1EsJ7ly73PX4AdsGh13la2DbnS
l3YAVJ3YzBfz7fGr5/6ZkEmNGHbopzjwqjciYCAmtHF5f/OwFHeebjR8z3WbsJIH
akLNqojyqySOCehGn6c5ALX+b1K2dP2IRZnDSuEtEJp/nP0aSp8fBE+CDaxPl8yR
GYZjjEzLlK8gRVq76DN+oABnPRJZqhkQLtxu3iPYre2h5Ch0fM4hK/hp0vWyldcZ
D6EGCcQ81CL8jxUbmuykv/oRtnzAadovs3vWsnxXQboSA7yUMGpA4hchIVksmBSZ
pvMPDx23KQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFKhzaABtq0+KJ7Up3bG9sHQe
dPTBMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMjJlMzEzMDM5MmUzMTMyMzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBtezANBgkqhkiG9w0BAQsF
AAOCAQEAZH8F62ek5RAnXKCJcRik8nqJnwDkUd1w8QuFFtULJJV3I5npKE2N9YLV
/uYT3ZXzqvJHOCRZNzCKC5gM57lg6iTlnP9eMl2vlylUsM3N0cHUMVQ4ISiZjlG2
NeUe+VTBYh1OGmebQ4tWBLq67tsOCNs6+ROi3NTOBZiYUUKToX40G4U7p7BOBbgF
32IxyPm09DmGr1z3mxsQuSMWR4MZDe96Oh7tbXS1w2ewGiAIFTXuKjb1t8FpjGfZ
GpmnA38XLWk2MqCWmza+Fao3JuVCkZrVfXvXPAGsy8+ZF5+fPwz0S2La0QDoz1FN
wT8+oam33OzrqKF9j94rl9VL4wbQdw==
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:10:20 2025 by rpki-client