Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234342e302f32342d3234203d3e2039333034.roa
File:                     3139392e34382e3234342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          tPtc8ZuUoZm4viF9XWJ02FK1BTLyel8RpSZm59ACB+g=
Subject key identifier:   39:32:A9:67:88:97:CA:94:7B:B4:21:CD:5F:BC:09:4C:89:25:24:99
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       1D540F8FBE40A57C83EB80883ECD044ACE67991A
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234342e302f32342d3234203d3e2039333034.roa
Signing time:             Mon 04 Aug 2025 13:49:43 +0000
ROA not before:           Mon 04 Aug 2025 13:44:43 +0000
ROA not after:            Mon 03 Aug 2026 13:49:43 +0000
asID:                     9304
IP address blocks:        199.48.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 22:58:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:54:0f:8f:be:40:a5:7c:83:eb:80:88:3e:cd:04:4a:ce:67:99:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: Aug  4 13:44:43 2025 GMT
            Not After : Aug  3 13:49:43 2026 GMT
        Subject: CN=3932A9678897CA947BB421CD5FBC094C89252499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:49:47:e4:2a:35:c3:69:18:97:d3:46:dd:78:
                    48:d3:9f:e3:99:0b:2c:1f:88:4e:2b:56:88:71:5c:
                    d3:a6:dc:2e:7b:dd:f4:5c:41:a4:d6:b6:d5:60:f9:
                    c6:cc:95:91:55:c4:c2:1e:99:33:f2:f1:c5:38:70:
                    f2:db:2e:15:88:ec:99:38:88:5e:bc:2a:ee:d8:7f:
                    03:e0:71:f1:29:15:eb:a5:4c:54:4e:b1:43:b9:1b:
                    13:75:30:8b:4b:e9:58:dc:5a:62:13:ba:12:4d:d2:
                    14:ef:49:3f:91:71:f0:08:90:e1:bc:31:ba:9e:7d:
                    bb:20:86:f4:57:84:88:31:52:dd:d0:ab:60:3d:a8:
                    d9:cf:9e:c5:d8:d6:98:e7:0b:be:d9:a1:55:78:d7:
                    d9:40:a1:2a:5f:91:8d:e5:3a:85:b6:87:d7:81:f4:
                    16:c3:97:5d:83:5e:65:8b:16:dd:d3:70:a8:d9:ae:
                    37:f8:fa:d1:96:00:ee:2d:3b:10:94:99:2a:40:a9:
                    67:de:2b:1b:df:04:40:4f:b4:09:71:e0:b3:16:70:
                    0a:97:a0:9a:93:ea:78:e8:71:a0:12:db:e6:b6:3a:
                    e4:13:b8:6d:ca:77:ff:98:bc:1b:f4:4b:d9:6a:c8:
                    64:28:c0:fc:15:98:7e:89:20:4a:c6:41:08:46:f6:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:32:A9:67:88:97:CA:94:7B:B4:21:CD:5F:BC:09:4C:89:25:24:99
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234342e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:f0:34:59:61:16:21:5f:57:87:be:25:de:8f:b3:f0:c7:df:
         9b:4b:0c:72:34:a8:15:78:3c:e7:69:9e:15:98:68:b1:c1:5b:
         5c:fa:e1:92:49:36:50:c9:df:bd:e2:dd:e8:a9:42:e0:39:51:
         c6:e3:41:e4:76:b2:33:ee:0f:db:7e:cb:3c:e6:f7:93:81:91:
         f9:9b:1e:0b:4f:31:8b:e8:ca:62:43:cc:f7:f7:81:e4:31:48:
         10:7f:91:19:fa:0a:78:b4:69:62:3a:84:0e:8a:a2:da:f6:19:
         48:99:60:3a:37:0b:7d:4c:ea:10:21:90:77:db:a8:1c:f2:1b:
         57:6a:69:f2:5a:c6:38:02:ff:25:b2:ab:7e:7d:bb:ff:85:de:
         6a:17:2d:95:12:bc:ec:32:f0:55:7f:eb:d2:a4:03:20:a8:e4:
         73:15:0e:ea:b3:17:d2:ca:2e:51:97:32:34:8a:43:91:33:c3:
         08:c2:71:41:a9:6c:98:37:0d:79:02:e1:c9:b7:67:60:b3:aa:
         b6:af:c4:23:41:73:9d:c1:d6:56:ad:77:1c:99:b0:19:36:35:
         fb:b7:db:43:d6:37:4e:fb:bf:0f:61:7d:aa:03:3f:18:c0:4b:
         01:2c:c3:1b:ea:42:8b:c9:2c:35:0e:43:75:dc:4b:d9:ea:da:
         22:e1:b8:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 04:02:18 2025 by rpki-client