Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e203231383539.roa
File:                     39312e3233332e3139382e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          Hq/omaxOVjR12PIhRKygVICjjah4D4EwlR8jYGp6jP4=
Subject key identifier:   B4:A0:35:A8:EE:11:38:3D:EA:37:0A:F9:17:5F:8D:E3:3A:BD:CE:41
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       4CAFC3E79B95DA052E5D373B104E8A4ED216C0D1
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e203231383539.roa
Signing time:             Mon 21 Apr 2025 02:19:24 +0000
ROA not before:           Mon 21 Apr 2025 02:14:24 +0000
ROA not after:            Mon 20 Apr 2026 02:19:24 +0000
asID:                     21859
IP address blocks:        91.233.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 08:48:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:af:c3:e7:9b:95:da:05:2e:5d:37:3b:10:4e:8a:4e:d2:16:c0:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Apr 21 02:14:24 2025 GMT
            Not After : Apr 20 02:19:24 2026 GMT
        Subject: CN=B4A035A8EE11383DEA370AF9175F8DE33ABDCE41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:23:a4:e1:18:a5:b6:03:d7:83:d1:58:1f:19:
                    b6:3c:f9:96:6c:fa:fa:d5:5e:7a:5f:ee:82:71:f2:
                    0d:9a:01:81:ea:05:4e:23:68:31:89:c7:3b:b1:92:
                    05:eb:7b:25:43:79:8b:0b:fb:7f:2c:c8:5f:9b:e7:
                    0c:f5:d0:46:80:f1:46:3b:a5:8b:a5:90:98:3c:c8:
                    f5:6d:8c:c6:ab:ac:ad:6f:0e:34:f5:79:f1:5b:cf:
                    81:46:57:31:1a:47:30:78:07:e7:6e:e2:fd:67:30:
                    89:a7:c2:78:d2:19:79:e6:ae:05:5c:43:21:af:4b:
                    fc:21:b6:0f:d6:1f:df:d7:cd:59:e2:3e:3e:a4:b0:
                    8c:c5:78:ce:e6:a8:e2:35:47:d8:f2:cd:a9:4a:59:
                    d2:85:95:1a:17:d4:c9:7e:89:88:01:46:8a:a7:8e:
                    f7:34:59:bf:84:e8:5b:49:4c:c6:fc:93:bb:93:4e:
                    86:86:3d:06:7c:40:6a:79:0e:54:71:14:d7:8c:88:
                    3b:16:72:3d:f6:ce:f3:06:ee:4c:6b:8a:92:af:bd:
                    81:65:b8:46:87:dc:a4:df:2e:a3:86:26:0c:25:20:
                    23:86:b1:35:88:d3:b9:47:5f:f9:fd:ec:6d:d7:9a:
                    33:f6:e8:4e:7e:0e:bb:c2:56:94:61:cb:a2:d4:96:
                    ff:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A0:35:A8:EE:11:38:3D:EA:37:0A:F9:17:5F:8D:E3:3A:BD:CE:41
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/39312e3233332e3139382e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.233.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:c3:2f:4f:8f:ed:d7:c8:f6:95:96:09:48:51:c7:88:82:ec:
         b5:d7:2f:fb:60:1f:b2:a8:26:97:09:61:e9:a5:9e:f7:a1:d4:
         de:94:b3:34:00:07:51:34:ed:42:80:f6:34:a7:17:4c:8b:82:
         de:0e:ff:eb:f7:df:d5:29:a0:c5:c9:d5:50:62:24:8d:9c:ff:
         ef:ac:6c:fb:61:38:ff:56:a7:5c:dc:22:ff:af:65:96:e2:da:
         3c:f6:23:0a:ad:8c:67:7a:c0:36:59:bc:b3:9f:ed:eb:ad:0c:
         91:28:c6:aa:a1:42:3d:12:e7:c5:c3:96:72:b0:a0:4c:ef:e1:
         d9:4d:35:2b:f0:68:fb:c3:aa:4a:aa:ec:95:c0:30:59:0d:ff:
         32:3c:b9:f0:f6:33:d2:c2:05:bf:33:ec:0a:27:92:39:ee:88:
         e0:7f:ad:dd:21:18:e2:2d:94:70:fe:62:75:3d:c0:84:e5:9e:
         18:45:90:5f:94:e8:b1:c7:9f:b4:af:01:43:68:46:b9:a3:44:
         c9:df:cf:f6:91:7f:ac:c3:89:37:a2:24:ff:29:98:a8:7b:e2:
         16:21:3d:ff:7b:ee:a2:f0:90:63:ff:23:7e:e8:b0:30:60:5e:
         c3:8c:cc:19:81:5f:8d:31:f8:16:16:93:96:d6:86:16:1d:4b:
         ef:e2:5b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:21:51 2025 by rpki-client