Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e203133323133.roa
File:                     3139342e33342e3133392e302f32342d3234203d3e203133323133.roa (raw, json)
Hash identifier:          nxK3RAUwfopm4TYU89VOzQ/w0UM1uY8tc67rtxmIQgM=
Subject key identifier:   AD:2F:5A:C7:6A:DF:15:E3:27:AC:42:C6:F5:ED:41:F1:AC:18:63:AC
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       2227378EC5D4BC17BF9C5E8719B03742F176C364
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e203133323133.roa
Signing time:             Fri 25 Apr 2025 14:28:31 +0000
ROA not before:           Fri 25 Apr 2025 14:23:31 +0000
ROA not after:            Fri 24 Apr 2026 14:28:31 +0000
asID:                     13213
IP address blocks:        194.34.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:27:37:8e:c5:d4:bc:17:bf:9c:5e:87:19:b0:37:42:f1:76:c3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 25 14:23:31 2025 GMT
            Not After : Apr 24 14:28:31 2026 GMT
        Subject: CN=AD2F5AC76ADF15E327AC42C6F5ED41F1AC1863AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e0:17:f4:55:51:d8:05:1d:0b:59:75:91:e9:
                    30:7d:cb:f0:ff:73:42:46:f1:26:a7:51:20:bb:a6:
                    6b:ab:92:b8:52:9f:3d:a8:fd:6d:fa:c8:42:d5:60:
                    2b:27:e1:b6:94:b3:3c:2c:f0:78:6d:c9:40:17:e0:
                    05:07:46:46:41:e2:71:94:54:7e:5a:0c:0c:64:49:
                    60:34:6d:44:90:a6:1c:26:8d:38:3e:e3:c7:c3:a4:
                    20:ef:e8:ba:cf:c9:01:8f:8d:36:4b:a8:bc:3d:0d:
                    b2:14:9d:09:a9:02:c2:b4:bd:9d:ae:f1:3f:66:cb:
                    d1:48:0c:88:7a:7e:6f:52:18:ff:a6:06:c1:17:4e:
                    f0:b1:85:85:0f:d1:b9:a7:2b:35:1c:35:7a:6e:a2:
                    47:dd:93:6e:40:37:e7:d4:30:51:65:7a:3f:de:14:
                    26:4f:71:2a:14:9c:9b:8f:11:4d:1a:a3:f0:81:a8:
                    f6:96:b5:ea:d6:62:d0:34:03:7d:9d:07:b9:f3:16:
                    1e:b0:55:e6:76:3a:c4:a3:29:e5:8b:be:3e:e9:4f:
                    2d:ee:6f:41:d1:24:bc:12:10:68:f4:7f:ab:cb:07:
                    9e:a8:88:58:d5:0b:07:3c:16:b9:b8:b0:c0:e5:72:
                    8a:d9:f0:ac:76:22:aa:97:4e:4a:84:78:93:58:49:
                    1f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:2F:5A:C7:6A:DF:15:E3:27:AC:42:C6:F5:ED:41:F1:AC:18:63:AC
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3133392e302f32342d3234203d3e203133323133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:70:cb:2f:b9:66:2e:22:bb:73:a6:40:95:32:90:c5:6e:5b:
         39:f7:86:dc:19:5d:29:14:d4:5f:56:92:0a:4d:e6:9c:2d:1a:
         f6:d8:26:27:19:b4:7a:a9:ec:ea:84:79:40:80:8e:53:ac:a5:
         12:7a:6a:5d:de:5c:ac:02:ae:bb:2c:65:69:9e:6c:6a:e9:50:
         a0:43:76:4a:83:6f:61:98:7b:a6:d4:9d:5b:6a:0e:90:8d:5b:
         61:3d:59:61:be:9e:6e:ed:d9:2b:40:86:26:a3:99:cb:b1:4d:
         73:5f:f7:83:b8:1f:cd:40:d2:6c:0d:ca:bc:d3:0d:18:05:c8:
         a8:63:77:a1:75:41:04:73:7d:93:6f:c0:88:1d:df:f1:9c:bb:
         a6:cb:b9:53:3b:e1:f9:98:a0:f6:10:e5:02:4a:0c:c6:af:b8:
         08:6c:c0:39:e9:7b:03:b1:8a:8a:a1:bb:c0:dc:38:91:57:ae:
         5e:bd:7c:34:59:d0:a9:15:59:d7:da:ee:c7:83:49:bd:e9:79:
         5a:6a:54:f1:ec:d5:df:33:27:6d:dd:2a:8f:c3:ec:9f:9c:fe:
         b2:26:83:53:c7:d3:ce:12:b9:d9:76:c6:29:e2:b4:2f:fc:b7:
         0e:e0:dd:de:fc:5d:93:5a:35:bb:38:58:0f:fe:26:c5:08:62:
         2d:e9:48:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 10:24:00 2025 by rpki-client