Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313533343937.roa
File:                     3139322e3230382e322e302f32342d3234203d3e20313533343937.roa (raw, json)
Hash identifier:          Wj4HIAI2lV8/NTSgpmyjjH8niQAT+iMYgLGxwuqOOn0=
Subject key identifier:   33:7C:CB:26:83:2D:83:04:5B:79:60:F7:E9:52:66:AD:15:CF:E7:B0
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       065B79B1C67D734407D0C76F68E4A420BEFBF8E8
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313533343937.roa
Signing time:             Tue 20 May 2025 02:50:50 +0000
ROA not before:           Tue 20 May 2025 02:45:50 +0000
ROA not after:            Tue 19 May 2026 02:50:50 +0000
asID:                     153497
IP address blocks:        192.208.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 18:49:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5b:79:b1:c6:7d:73:44:07:d0:c7:6f:68:e4:a4:20:be:fb:f8:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: May 20 02:45:50 2025 GMT
            Not After : May 19 02:50:50 2026 GMT
        Subject: CN=337CCB26832D83045B7960F7E95266AD15CFE7B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:61:b5:78:12:01:9c:18:d4:56:fc:55:07:2d:
                    91:4e:9f:72:5f:e5:4d:ea:ba:94:84:8b:4e:4c:90:
                    68:bc:b6:bf:b0:6c:21:25:5e:57:6a:b3:a4:e9:be:
                    d3:e7:92:71:9c:b2:dc:70:6b:e6:a9:1d:a6:ae:3c:
                    f4:45:d3:8d:71:4a:88:d6:27:83:8d:1c:5f:31:99:
                    b6:89:5c:3d:dc:44:9b:9c:08:ba:21:d6:cb:97:56:
                    4d:e9:29:21:3e:e4:bc:76:a2:cc:c1:f4:48:68:e7:
                    c2:8e:39:d0:9b:ba:77:8f:98:9e:aa:16:17:6a:64:
                    47:b8:6e:6c:c9:03:4b:85:db:57:20:0a:a1:cb:dc:
                    a4:21:c5:6b:39:1f:87:7e:f5:74:3d:71:9c:72:ae:
                    10:56:20:d6:33:51:50:53:3e:1c:1a:7c:48:b1:3d:
                    db:2a:41:33:f2:99:25:b0:3c:3a:a5:26:80:78:77:
                    11:6d:6a:0d:62:cb:18:68:f6:1a:36:df:9f:bc:7b:
                    74:02:e9:35:33:ca:e9:19:b5:33:5f:4a:85:ba:95:
                    2f:49:82:86:a4:92:13:f5:15:97:a9:e9:a1:97:02:
                    66:53:fa:3c:fe:62:6a:92:82:eb:98:06:53:99:ca:
                    1b:99:f4:0f:4e:bd:ed:a9:89:60:26:fe:6a:3d:f9:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7C:CB:26:83:2D:83:04:5B:79:60:F7:E9:52:66:AD:15:CF:E7:B0
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e322e302f32342d3234203d3e20313533343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:37:68:c2:20:30:1a:c9:2e:ec:9e:0e:05:01:5c:c1:87:3e:
         0d:04:ed:4a:d7:2c:0b:71:18:5d:b6:c8:c6:47:fb:31:71:fd:
         66:7f:74:5d:4b:9b:66:5c:6c:71:c7:1e:eb:66:80:95:6d:d0:
         d2:55:c7:05:c2:d7:95:a0:c0:ba:82:7d:e7:80:64:d5:73:7d:
         94:19:15:55:21:b1:35:45:1a:7f:91:26:ac:e6:37:d0:25:84:
         d5:14:59:2e:56:c9:75:9a:1b:37:49:b8:b8:dd:3e:0d:6a:22:
         96:3e:67:bd:68:cf:ae:5c:ac:ef:a1:97:86:c8:17:26:fe:75:
         27:fa:2c:67:c1:5e:c8:e4:af:e9:b5:a2:72:59:36:72:ab:29:
         1d:82:22:2e:8d:99:5d:6a:ff:8b:88:7c:e0:1f:5f:0a:95:82:
         a3:02:76:7d:4e:7c:5b:42:82:82:ed:f7:fb:30:4f:4f:3c:4b:
         1e:1c:d8:1e:b4:bd:93:f5:5a:5d:73:07:47:b0:ed:9b:0a:44:
         8e:ad:26:9a:1f:f2:db:33:53:3f:26:74:c9:8b:05:50:d7:75:
         b2:d7:c6:1f:b6:ad:c6:40:36:1d:ae:d9:a0:08:2d:18:d3:94:
         29:0b:b5:4d:02:36:a0:83:8c:4d:da:78:76:d6:49:73:79:4d:
         d3:52:ec:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 01:29:24 2025 by rpki-client