Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3137372e302f32342d3234203d3e2039303039.roa
File:                     3139332e32392e3137372e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          z1eOMGCoKjhBk9mhRIBSa3T0eqNDR+rW/GGYZMwVLUQ=
Subject key identifier:   A1:B4:E1:10:5D:72:C8:21:2C:14:60:E4:39:9B:69:D1:E1:B8:A7:B2
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       707DCB4683DA779F557348C6FE0BD1D4837521A8
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3137372e302f32342d3234203d3e2039303039.roa
Signing time:             Tue 22 Apr 2025 08:28:30 +0000
ROA not before:           Tue 22 Apr 2025 08:23:30 +0000
ROA not after:            Tue 21 Apr 2026 08:28:30 +0000
asID:                     9009
IP address blocks:        193.29.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 08:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:7d:cb:46:83:da:77:9f:55:73:48:c6:fe:0b:d1:d4:83:75:21:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 22 08:23:30 2025 GMT
            Not After : Apr 21 08:28:30 2026 GMT
        Subject: CN=A1B4E1105D72C8212C1460E4399B69D1E1B8A7B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:16:d8:4b:94:49:53:eb:2e:0e:f1:29:fb:e6:
                    89:48:fe:2d:82:fc:62:3d:2b:be:60:66:3a:14:b0:
                    07:3c:1b:88:5d:72:a9:32:b7:86:99:6f:81:ac:88:
                    96:dc:3b:ef:31:b9:e4:01:83:29:5d:7e:bd:6a:fd:
                    15:64:d9:88:d8:1e:04:34:3d:bb:8f:9f:04:d8:df:
                    f7:3a:45:a2:48:0c:77:0c:07:50:c2:ae:bd:dd:10:
                    7f:25:31:b7:2d:b5:4c:ca:f9:f2:5f:b6:19:29:99:
                    e3:fc:4d:b9:fb:42:83:ce:eb:b3:15:26:9d:0c:89:
                    8f:e2:70:62:cb:95:d4:7b:9d:e1:0f:bc:60:aa:3a:
                    60:36:12:92:8b:33:10:4c:af:8e:a9:47:fe:f9:88:
                    1e:96:39:76:c3:b5:d1:48:d3:48:7b:b9:32:65:13:
                    19:9d:cf:9f:1e:27:b2:e0:96:9f:38:09:88:c2:fc:
                    42:30:ef:2e:e1:1a:c9:ec:c8:ea:d2:16:7b:73:45:
                    ce:78:c1:fa:93:97:db:68:37:f0:a3:4f:88:72:b0:
                    e6:1a:ab:0c:ee:6b:1c:5f:df:1e:34:9b:cb:e6:a7:
                    17:e5:e3:6b:a9:ad:a6:f5:f7:3e:21:27:f1:26:b6:
                    3c:93:cf:1b:f6:7c:bf:f5:82:b7:96:c8:d3:cb:01:
                    95:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B4:E1:10:5D:72:C8:21:2C:14:60:E4:39:9B:69:D1:E1:B8:A7:B2
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e3137372e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.177.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:34:cc:cb:0d:ea:77:de:b1:33:60:d8:c1:9b:8a:fe:f7:1d:
         47:03:d9:48:ec:49:2b:2a:46:6b:57:91:1c:9f:b1:5e:f5:a9:
         9d:34:be:19:22:fd:93:a3:e2:49:f3:94:74:0b:62:70:c9:62:
         b1:86:38:8f:47:8f:86:67:9c:25:03:90:c2:dc:ad:30:41:87:
         80:6c:23:40:0f:05:74:b3:9d:fd:f3:c6:0c:6e:aa:41:e0:c5:
         3d:9f:80:c4:c5:b8:9c:2c:11:f4:e8:bf:70:dc:92:ea:01:a4:
         09:12:e5:53:9c:53:17:33:24:46:52:06:84:2d:05:06:fd:12:
         27:93:b3:5a:72:e6:37:24:25:52:20:2e:44:92:fa:54:9d:18:
         b3:ba:68:17:f3:f5:b6:8c:6e:c6:71:a4:ea:fb:7b:d1:20:c5:
         7d:ee:64:fb:d5:82:7f:e8:84:a7:86:4d:0e:06:9a:c9:71:9e:
         b5:b2:01:e5:d8:b9:7a:a0:96:96:4f:c0:93:b7:03:43:f6:51:
         52:0e:23:bd:83:bb:1a:91:d4:78:e0:4b:5f:35:46:e6:0e:64:
         31:c9:1f:c3:24:d6:92:d8:53:1f:59:14:dc:77:f3:af:48:3d:
         14:7e:f9:41:36:79:85:36:6a:3e:35:fd:76:35:dc:55:5f:28:
         b0:b9:29:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:05:42 2025 by rpki-client