Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32322d3234203d3e20383334.roa
File:                     3139322e302e31362e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          cV6J682zYMobOCOOyNaO+DtO7PjAAirgs7LcyTBUkPI=
Subject key identifier:   8A:1F:CE:DB:83:E3:E9:23:A4:98:DE:A5:C0:20:F2:9A:0B:DE:51:95
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       052DEFFF9FFC9FFE88966FAE1D30D0708087F3C7
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32322d3234203d3e20383334.roa
Signing time:             Thu 12 Jun 2025 10:43:31 +0000
ROA not before:           Thu 12 Jun 2025 10:38:31 +0000
ROA not after:            Thu 11 Jun 2026 10:43:31 +0000
asID:                     834
IP address blocks:        192.0.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:2d:ef:ff:9f:fc:9f:fe:88:96:6f:ae:1d:30:d0:70:80:87:f3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun 12 10:38:31 2025 GMT
            Not After : Jun 11 10:43:31 2026 GMT
        Subject: CN=8A1FCEDB83E3E923A498DEA5C020F29A0BDE5195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bc:1d:81:cd:a2:ce:a6:3e:ea:c9:9c:fd:59:
                    b4:73:0a:47:7a:2d:00:4e:4d:62:43:d3:24:37:8d:
                    db:f2:f1:10:cb:6a:1d:51:b0:67:e2:1b:7c:43:9c:
                    d6:28:42:ac:ba:0f:87:43:11:db:f1:f7:f0:ed:a9:
                    a1:b0:6f:4a:67:ae:61:26:e1:2e:49:fe:19:c7:9e:
                    62:a9:2d:42:0b:5d:08:a4:d5:95:90:b1:8a:72:d3:
                    03:54:e7:e4:29:18:ef:80:20:b1:5b:0c:b4:fa:33:
                    fc:7c:fd:c1:f0:e0:d1:7e:25:f1:c8:c7:b5:78:2e:
                    84:db:f0:3a:fe:42:c7:43:55:d3:ba:50:f0:7d:ae:
                    55:bf:ab:ad:57:7a:ee:6a:ee:51:1c:ec:09:c6:23:
                    c6:e5:02:3b:29:2f:4a:fe:61:ff:b3:29:81:ae:4b:
                    fe:5b:ed:22:69:3f:27:2d:42:cd:73:e2:3f:43:cc:
                    ef:d0:28:8d:f0:b3:66:2c:fe:e2:6e:92:e3:7f:01:
                    0e:c9:a3:86:38:8c:bc:fd:86:0a:01:02:90:68:91:
                    3d:7f:3b:6f:50:d3:d9:3c:27:06:75:e1:65:b4:c6:
                    50:69:bc:ab:ad:f2:14:dd:47:f6:1e:6d:9a:d0:f1:
                    93:25:81:da:3e:08:ac:ab:bf:2c:15:0f:b9:4d:ed:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:1F:CE:DB:83:E3:E9:23:A4:98:DE:A5:C0:20:F2:9A:0B:DE:51:95
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:7c:16:f9:29:9a:78:08:e4:63:8c:f7:ac:79:f5:84:9a:05:
         11:d3:66:c3:ad:3e:29:62:81:2f:a7:b0:2e:8b:c6:e5:39:b5:
         5c:ef:bb:dd:1b:f8:e4:4d:06:c5:a7:76:d1:16:5a:d8:27:af:
         be:93:74:df:48:bf:ba:1e:0f:fc:a1:b7:36:51:af:77:4c:ff:
         48:c9:ae:7f:34:bb:22:2f:94:6e:2d:57:46:07:68:55:11:fb:
         50:64:ed:09:a8:b6:29:96:21:5b:a4:5f:00:e0:b7:10:f5:5b:
         44:59:7d:93:50:27:56:66:98:d6:b9:5a:e9:2a:87:dd:e3:43:
         e2:a2:47:d3:7a:b7:fa:14:47:61:1a:3d:b5:b5:f0:65:67:ec:
         59:64:db:2c:16:c6:09:58:e1:db:e9:3b:7f:3a:d7:2c:89:44:
         f5:62:ff:90:db:07:5e:4a:b9:8e:54:c2:4b:54:f1:d8:ad:6c:
         d5:f6:10:19:d2:1e:89:ec:ff:e1:ca:76:42:9f:f7:3f:bc:d2:
         b3:7b:d4:d6:3f:78:0a:77:13:df:bf:7e:d2:09:9e:8f:7d:8a:
         59:e2:ee:af:94:af:51:e6:bc:04:04:ac:9e:25:a9:8b:8a:65:
         b4:41:30:d4:50:67:e0:1f:86:53:5d:2c:12:f1:fb:d7:25:97:
         82:c4:9d:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:04:20 2025 by rpki-client