Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3132302e302f32342d3234203d3e203133323133.roa
File:                     3139332e3135302e3132302e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          CE0zVUkmfLc7Z39UOe2E/ggYrktWVxsFYTlBdDgJevU=
Subject key identifier:   0C:D2:2A:51:5B:30:57:5A:64:A2:9E:4B:E3:35:41:20:C4:A0:ED:34
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       4AD97936CA9334412A9343B11449124F1FB2B7CB
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3132302e302f32342d3234203d3e203133323133.roa
Signing time:             Fri 25 Apr 2025 14:28:31 +0000
ROA not before:           Fri 25 Apr 2025 14:23:31 +0000
ROA not after:            Fri 24 Apr 2026 14:28:31 +0000
asID:                     13213
IP address blocks:        193.150.120.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d9:79:36:ca:93:34:41:2a:93:43:b1:14:49:12:4f:1f:b2:b7:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 25 14:23:31 2025 GMT
            Not After : Apr 24 14:28:31 2026 GMT
        Subject: CN=0CD22A515B30575A64A29E4BE3354120C4A0ED34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c6:33:d2:41:16:35:44:dd:ba:99:0d:41:19:
                    f6:5c:41:c1:a8:b5:b6:e9:d1:fd:0d:a4:bd:86:7d:
                    b8:b2:4a:fc:58:a1:e3:ef:62:39:a4:85:3e:29:d4:
                    08:dc:fc:14:fd:38:bb:8e:33:31:a7:04:8e:7b:b7:
                    61:e3:d0:b8:43:bc:b0:5a:d5:45:51:41:83:49:26:
                    22:6d:da:6e:26:e7:46:95:8d:90:91:2b:97:67:03:
                    4e:f0:37:fb:13:df:e7:0d:06:f6:ec:f1:bc:a4:9d:
                    1d:7e:79:f0:da:2c:83:bc:dd:28:09:01:f3:7b:f8:
                    c8:b4:2a:19:3d:a6:81:f6:c2:03:cf:be:59:47:be:
                    49:f8:0d:80:ef:45:2e:0b:49:f9:47:93:f7:b4:f3:
                    9b:c4:8d:32:35:e5:56:f3:fe:47:2d:55:d8:82:00:
                    bf:2e:3c:9c:05:da:35:f8:c6:26:ea:f6:a9:9b:34:
                    6d:09:55:85:30:10:dc:28:57:ad:4d:5d:0a:96:fa:
                    0c:60:1e:72:2f:a6:0b:cf:5e:94:95:da:4e:3b:56:
                    11:5e:d5:dc:c5:6b:ed:a0:29:3c:5d:ba:56:ee:a4:
                    20:83:13:6e:0b:27:46:28:5b:2f:9f:15:7a:53:e2:
                    76:97:72:4c:00:14:34:34:e0:80:b2:16:fa:f4:b0:
                    0d:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D2:2A:51:5B:30:57:5A:64:A2:9E:4B:E3:35:41:20:C4:A0:ED:34
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3135302e3132302e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.150.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:35:30:a8:64:c7:b1:2a:ce:7c:61:e9:89:f6:dd:ec:04:6c:
         b0:8c:fe:54:bc:73:82:90:08:1e:aa:c1:b2:5e:c7:36:ca:3e:
         b7:f9:f4:61:d4:06:98:16:30:58:b6:84:6e:e9:09:b7:59:ab:
         ac:22:e0:10:2a:fb:e0:d2:47:96:22:0d:80:e0:cd:26:48:fd:
         73:3a:fe:5c:ca:9d:2a:60:8c:68:cf:18:e3:a6:cc:cb:a2:b5:
         0b:0f:6f:3e:cb:b7:da:71:dc:3c:7f:fb:da:09:4e:3a:cc:12:
         79:5d:c0:01:93:f5:0a:9f:8e:0a:fd:31:12:44:31:ca:a5:9f:
         18:e2:23:22:f9:52:be:c0:05:71:d8:7d:bb:05:3b:02:fe:0f:
         63:b5:71:1a:ed:b1:4d:c3:75:e4:56:9a:4f:14:05:d7:6e:d9:
         d3:c3:4f:ab:06:fc:5b:cc:e5:a8:b3:74:b3:e6:15:b2:4a:24:
         d2:2c:64:3a:bc:af:7c:66:66:6e:65:96:76:c1:a7:11:a4:2f:
         22:32:73:fc:ac:16:ce:28:91:27:c2:f4:1a:cb:a2:1e:21:95:
         42:c9:d2:b1:2d:95:c5:1c:4f:a4:04:2e:6f:fb:ba:65:5f:c3:
         3f:be:f4:b7:f9:67:0d:8c:c3:71:22:d5:b2:bb:02:fa:ce:fd:
         6f:95:58:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 03:49:55 2025 by rpki-client