Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e34322e302f32342d3234203d3e2039303039.roa
File:                     3139332e32392e34322e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          DjUpU2GL8qFkO3c2LqaqdhI835GcazpSL5dmoJIi2y4=
Subject key identifier:   0E:0D:F5:6E:28:36:58:73:A0:1F:A9:63:BE:7F:5B:D7:B5:FC:7A:48
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       7D6BB68FCC2D1400FD093C4CAFA4257C4E238886
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e34322e302f32342d3234203d3e2039303039.roa
Signing time:             Tue 22 Apr 2025 08:28:30 +0000
ROA not before:           Tue 22 Apr 2025 08:23:30 +0000
ROA not after:            Tue 21 Apr 2026 08:28:30 +0000
asID:                     9009
IP address blocks:        193.29.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 08:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6b:b6:8f:cc:2d:14:00:fd:09:3c:4c:af:a4:25:7c:4e:23:88:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 22 08:23:30 2025 GMT
            Not After : Apr 21 08:28:30 2026 GMT
        Subject: CN=0E0DF56E28365873A01FA963BE7F5BD7B5FC7A48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5a:5d:38:e9:3a:c2:c9:52:19:d4:cd:fb:a3:
                    8b:ee:16:f8:93:a2:5d:26:fb:0c:c9:e0:5d:94:38:
                    dd:e5:b2:2f:0b:82:3d:92:57:22:1a:64:3f:74:25:
                    48:cb:d9:d6:8b:a7:a1:ca:d8:08:d5:c5:0f:fe:ea:
                    2b:cd:c1:f7:3d:82:ff:bc:36:47:9f:c1:47:5a:31:
                    a3:59:9e:1f:9b:9d:f1:2b:b0:95:b2:d4:67:ac:77:
                    de:99:00:2e:f9:b6:be:85:74:bc:97:74:7d:6e:19:
                    81:26:3d:e4:e5:cc:7f:de:c0:26:91:3d:62:82:af:
                    59:75:3e:17:fa:b6:ed:e7:0c:cc:e5:6b:95:3c:f3:
                    98:2b:4c:ab:f4:c5:ad:90:47:42:40:5f:ad:50:e4:
                    f3:d9:3a:29:eb:64:a9:de:8c:7c:5f:0f:68:d2:cd:
                    a2:4d:0f:3c:a1:09:80:fa:19:6a:8f:29:ad:79:39:
                    80:c3:8c:bc:9e:4c:81:62:16:ac:42:1b:33:ed:b5:
                    1d:a9:09:c7:af:76:0b:21:e7:85:bb:f4:de:7e:c0:
                    63:ae:e2:4f:3f:54:26:5c:21:77:a5:54:8f:94:5a:
                    1a:51:53:3f:17:41:04:f0:e8:f0:ad:36:93:38:12:
                    b8:4a:00:3f:f1:55:5b:fc:b0:96:b6:89:7d:44:2a:
                    bc:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:0D:F5:6E:28:36:58:73:A0:1F:A9:63:BE:7F:5B:D7:B5:FC:7A:48
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e32392e34322e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.29.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:54:14:bb:d7:ea:44:7b:f9:3f:4c:3d:64:ac:f3:f7:39:3b:
         17:59:93:6f:20:c0:0a:e8:07:01:3c:e7:63:80:11:e9:0d:1c:
         15:c8:21:a7:82:a0:85:ca:97:38:12:29:bb:bb:fa:a5:ef:96:
         84:c8:d5:4e:29:da:68:3e:28:b9:3c:f4:de:c6:94:c9:a7:8f:
         e8:de:2f:10:55:9d:f6:2e:2c:d6:b9:49:e8:65:07:3c:90:e8:
         75:de:79:68:e3:eb:5b:aa:a9:99:1e:fe:af:de:98:d1:91:d2:
         ed:41:56:a7:14:08:cf:ef:45:f5:c2:7b:d2:6d:c9:09:44:6b:
         d9:11:8f:ba:0c:a1:80:c4:22:62:fa:f6:c1:b7:dc:d0:a9:b4:
         4c:ef:98:2a:36:88:22:fa:71:35:75:8c:16:c0:46:d4:c9:4e:
         14:0d:d8:0b:cc:ee:80:39:36:29:e5:9a:f5:99:0e:15:2e:57:
         98:e0:13:21:a8:fc:23:82:4b:07:8a:63:a9:7a:43:f0:dc:48:
         98:b9:43:9f:ef:78:fb:05:27:01:63:bf:cc:1c:a3:86:b9:88:
         3d:86:e8:fc:e3:a2:1b:26:5b:92:13:51:91:e8:b0:d5:4f:20:
         d6:4b:9e:23:49:0d:90:68:d6:f7:45:a5:8b:7d:ac:e0:ab:c2:
         e8:88:5b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:06:33 2025 by rpki-client