Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313339333538.roa
File:                     3139322e3230382e322e302f32342d3234203d3e20313339333538.roa (raw, json)
Hash identifier:          0pMVF2Xtu4dqJ75B+e66V2Zj1vDUxVZ1Juk0q++yTRs=
Subject key identifier:   70:53:33:11:8B:EB:DB:58:5A:23:5F:2A:0D:D7:A4:4B:84:7F:F0:34
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       48234AA4BF79AD9DD2D18F326B004CE8DDBE03F5
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313339333538.roa
Signing time:             Mon 19 May 2025 05:45:32 +0000
ROA not before:           Mon 19 May 2025 05:40:32 +0000
ROA not after:            Mon 18 May 2026 05:45:32 +0000
asID:                     139358
IP address blocks:        192.208.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 18:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:23:4a:a4:bf:79:ad:9d:d2:d1:8f:32:6b:00:4c:e8:dd:be:03:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: May 19 05:40:32 2025 GMT
            Not After : May 18 05:45:32 2026 GMT
        Subject: CN=705333118BEBDB585A235F2A0DD7A44B847FF034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:a5:bb:5c:fe:cd:75:5e:7a:9d:44:74:bf:
                    8c:e9:a9:17:da:4a:74:59:dc:53:24:8d:8f:d7:a2:
                    08:05:fe:7a:0e:a5:b0:00:3d:21:3e:71:d4:dc:b1:
                    5e:c2:4f:ff:eb:cc:ea:ba:d9:f4:01:73:3d:21:93:
                    a4:0e:40:01:bb:10:77:0a:a8:99:e2:d4:fe:6c:46:
                    4d:95:d0:0a:2d:bb:20:8d:c9:05:22:4a:24:68:c3:
                    42:5b:b5:0b:85:39:31:9f:35:7e:77:87:e8:9c:cf:
                    5d:88:c1:45:84:91:4c:b3:f1:e1:03:f1:78:81:50:
                    ea:23:84:60:a7:07:ec:3c:98:b0:5e:39:16:dc:e8:
                    bb:06:a6:d3:9b:26:5e:28:f7:a0:25:dd:39:b2:1d:
                    ee:59:ec:9d:99:46:e3:70:44:03:14:32:b9:58:ea:
                    39:40:28:d2:54:88:bf:4f:2e:1d:79:fa:c0:09:22:
                    7b:99:25:b4:fd:99:64:e4:c5:b9:6f:d7:7f:f6:6d:
                    9d:7b:12:8b:c0:18:9e:37:26:c6:ce:21:8e:be:80:
                    1a:43:ed:98:01:17:08:a1:5b:60:2d:8e:97:78:ee:
                    90:33:6d:3d:63:43:e7:83:3c:e6:47:80:7c:15:17:
                    f8:c4:94:ad:15:20:d9:73:b5:ca:e8:b0:b5:4d:c6:
                    e5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:53:33:11:8B:EB:DB:58:5A:23:5F:2A:0D:D7:A4:4B:84:7F:F0:34
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313339333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:6b:bc:0e:61:45:1c:20:d9:1b:fe:5d:18:62:cb:ad:66:82:
         97:b9:2b:ed:98:48:06:8c:aa:1b:55:31:2d:a4:ce:e8:ef:70:
         22:62:76:06:ba:80:c9:f3:c7:00:16:f6:15:b7:c3:d4:8f:c4:
         78:7e:d2:60:11:8d:95:b5:65:0b:7f:79:aa:7e:cb:fd:f3:da:
         3c:35:aa:73:25:c5:f5:ae:c9:14:8f:a2:26:9f:70:f7:68:ac:
         74:3d:8c:f3:1a:ee:05:af:7c:2b:34:19:3b:62:07:4b:8e:c9:
         5a:8c:79:27:2a:a7:3f:b8:b0:3b:77:a7:7b:ef:b3:ad:42:a9:
         ae:61:4f:28:86:fd:b4:3c:a6:8a:e8:e6:0b:ad:ff:f1:dd:a0:
         2c:03:10:88:1c:ff:5c:3e:db:c0:58:38:cd:9f:82:5d:04:fc:
         d8:eb:78:de:e1:86:2a:50:46:ed:87:f0:b1:68:21:66:5a:ef:
         97:a6:5a:00:14:91:16:14:fa:ce:e9:d8:60:45:c1:02:9a:97:
         9c:e3:eb:8f:d3:53:db:50:cb:ca:6a:7e:b9:ab:d0:76:26:d6:
         92:15:06:33:d9:df:47:80:cd:d5:cd:4d:b9:bd:a3:53:ed:12:
         60:c8:61:71:aa:cc:1d:14:7b:5e:68:4e:95:c5:f7:cd:24:5c:
         60:6e:80:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:20:29 2025 by rpki-client