Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3139392e372e3235322e302f32322d3234203d3e203230343733.roa
File:                     3139392e372e3235322e302f32322d3234203d3e203230343733.roa (raw, json)
Hash identifier:          OHLrdUjlYNxRXBfFA4Sg8zFcGtbHgOFvPZc6JkuQiMw=
Subject key identifier:   D0:8B:5F:7C:D3:E1:4B:5F:AB:28:CB:0B:38:7B:BA:37:8C:92:D2:F8
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       0FA6C8F0305D89BEC5B82512DAA428006B6E545B
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3139392e372e3235322e302f32322d3234203d3e203230343733.roa
Signing time:             Tue 08 Apr 2025 13:44:39 +0000
ROA not before:           Tue 08 Apr 2025 13:39:39 +0000
ROA not after:            Tue 07 Apr 2026 13:44:39 +0000
asID:                     20473
IP address blocks:        199.7.252.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 03:16:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a6:c8:f0:30:5d:89:be:c5:b8:25:12:da:a4:28:00:6b:6e:54:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: Apr  8 13:39:39 2025 GMT
            Not After : Apr  7 13:44:39 2026 GMT
        Subject: CN=D08B5F7CD3E14B5FAB28CB0B387BBA378C92D2F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7c:66:be:89:e7:29:e9:67:25:5e:8b:05:05:
                    f9:24:94:c0:ce:09:72:87:dd:8f:04:04:03:f3:0c:
                    aa:08:74:1e:40:81:16:29:3f:29:93:0e:67:ae:94:
                    b1:9a:85:aa:c0:84:8e:6f:84:c7:14:f3:44:fa:36:
                    cb:8a:3e:84:77:e3:a0:6f:d2:15:0a:bb:10:77:e4:
                    b0:3e:62:4b:8f:59:24:68:57:6f:2c:05:95:f8:d4:
                    12:6f:10:cf:95:5f:46:d2:27:e4:09:75:b4:ed:30:
                    64:00:6e:64:ae:05:7f:0e:0a:f2:1d:0d:19:2a:e0:
                    22:10:0a:66:ed:ea:b9:88:da:d1:86:ba:47:2d:c0:
                    2d:e0:a3:ae:b6:34:de:e7:26:ba:3b:da:aa:8a:55:
                    9c:9d:78:e5:89:c1:0c:1f:63:78:e2:dc:57:8b:06:
                    c1:a2:3b:ca:d9:3f:3c:e7:70:7b:d1:1f:9b:38:4e:
                    52:97:b3:01:33:79:6d:84:23:8d:2f:41:50:94:8c:
                    00:fd:e2:52:02:10:7b:81:e5:b4:74:86:6b:b9:ae:
                    a6:30:11:57:36:ad:ee:12:e7:ec:b0:99:30:9e:9d:
                    7b:c0:1a:53:f3:6e:e2:a2:b9:d2:88:20:e3:ca:48:
                    31:f6:99:07:25:18:96:c7:18:9e:74:e4:ce:67:66:
                    f4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:8B:5F:7C:D3:E1:4B:5F:AB:28:CB:0B:38:7B:BA:37:8C:92:D2:F8
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3139392e372e3235322e302f32322d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2e:41:83:c3:17:cc:4c:d1:36:df:78:38:a4:0a:5e:46:d4:88:
         ec:4b:ef:b7:20:66:29:a5:1e:d6:91:01:4b:8a:3b:22:22:ca:
         df:2f:76:3b:57:1c:30:a8:29:0a:e6:44:b0:85:6b:12:c6:4f:
         19:84:66:cd:91:1d:d8:00:7e:35:58:a2:f7:55:a1:80:b4:83:
         f7:e4:1d:0a:3b:a6:56:f5:22:5f:33:7a:fe:3f:49:ad:1d:62:
         50:98:b4:4e:ae:80:41:04:2b:10:b1:e5:98:9a:12:98:6f:ce:
         0e:ce:c9:67:bc:e5:cf:54:d2:23:4b:0b:e9:9a:f0:22:c9:a2:
         a0:9b:97:83:17:6c:af:fb:89:4e:fa:18:ae:51:51:08:94:bb:
         c1:57:55:6d:65:7d:8f:ce:38:5b:39:6f:4a:5b:5c:3f:0a:fa:
         71:58:1f:26:9b:a1:11:84:74:25:48:dd:69:e7:13:14:c2:e4:
         87:c4:42:b2:d7:47:e0:30:f1:be:98:72:da:48:d0:e1:63:e9:
         44:7b:26:9f:46:71:50:e0:d4:20:99:3b:f0:71:f0:4b:f2:88:
         c6:67:c6:c4:55:f8:cf:1c:8a:db:f7:bd:86:0c:9b:e6:69:78:
         6a:75:2a:d0:e9:f1:d5:d8:88:42:e2:e7:f9:5a:26:96:32:17:
         94:0d:b7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:59:42 2025 by rpki-client