Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e203235313938.roa
File:                     3139322e302e31372e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          lt9A9oAvRucseXEQYoV358XxdxGw46wF/dx2rL/z370=
Subject key identifier:   B3:00:D4:CC:09:B4:9A:AB:B2:C2:81:FC:4A:D3:D8:DF:44:DC:DA:49
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       24E2A8CA72052731E53A802E1F8E498097C6A731
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e203235313938.roa
Signing time:             Mon 28 Jul 2025 11:24:42 +0000
ROA not before:           Mon 28 Jul 2025 11:19:42 +0000
ROA not after:            Mon 27 Jul 2026 11:24:42 +0000
asID:                     25198
IP address blocks:        192.0.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 06:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e2:a8:ca:72:05:27:31:e5:3a:80:2e:1f:8e:49:80:97:c6:a7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jul 28 11:19:42 2025 GMT
            Not After : Jul 27 11:24:42 2026 GMT
        Subject: CN=B300D4CC09B49AABB2C281FC4AD3D8DF44DCDA49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e3:b3:10:36:45:ca:a8:9f:7b:d5:da:fd:ed:
                    a9:4e:4d:12:94:96:85:d9:10:bb:5d:6a:ee:d9:a0:
                    1b:aa:4a:ce:de:16:0b:60:1e:c6:13:94:4a:86:0f:
                    a4:a7:32:3d:d2:3d:f6:4f:a8:03:5d:b1:d5:6c:3b:
                    8f:b2:71:0e:17:d2:74:bb:17:16:3b:fe:59:d6:4c:
                    d1:d6:8f:41:3a:1a:2a:0c:3d:d3:35:6d:d3:b0:0c:
                    06:65:b6:36:af:fe:bd:d8:b6:8d:88:eb:02:6b:ff:
                    df:8c:be:78:5c:61:30:14:de:4c:9d:06:e1:04:dc:
                    83:69:18:77:98:a6:f6:5a:70:e0:97:10:dc:3d:be:
                    b8:76:32:54:e3:6b:43:72:7f:2c:3a:92:62:65:6f:
                    6e:db:62:7d:8d:46:b2:66:65:73:86:e6:85:5e:99:
                    28:65:ac:a6:a3:ee:61:d5:5e:e5:45:9e:0c:7e:cf:
                    56:fb:44:45:67:dd:0e:be:fa:4a:0f:68:45:26:21:
                    c0:17:dd:3b:a1:ad:4a:72:29:3f:3b:66:ba:f1:4a:
                    0c:f0:06:4f:40:75:ef:c1:f8:67:5b:b6:c7:39:91:
                    9d:15:21:b6:0f:94:ad:89:52:4d:9d:0a:b4:1a:d1:
                    d1:88:37:e2:62:b6:02:e4:48:f0:34:86:a3:6b:eb:
                    50:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:00:D4:CC:09:B4:9A:AB:B2:C2:81:FC:4A:D3:D8:DF:44:DC:DA:49
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31372e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:d2:6a:06:3a:62:9c:d1:57:71:3e:ea:04:5d:89:d2:8e:18:
         cd:12:0e:ec:5e:6c:84:c2:7d:0e:d7:81:1e:50:c3:da:32:df:
         4d:2c:51:53:7d:4c:c1:f0:43:80:8c:d0:80:be:35:67:ee:42:
         81:ee:34:2f:a0:19:5c:29:56:55:60:b4:77:d8:d0:72:7f:b1:
         9a:15:a9:b1:dc:60:97:9a:3b:72:90:fc:bf:cb:0a:e0:a7:82:
         1e:83:45:06:ba:b1:34:60:d4:0f:c2:f0:61:a7:27:74:0f:3e:
         2d:e7:a6:b3:82:4d:82:a3:51:1e:f3:57:48:8e:37:d0:0a:55:
         55:93:27:8e:9d:71:5d:d4:74:01:fa:c7:9a:43:45:c9:b0:df:
         f6:80:ab:93:45:fd:02:d0:a7:7a:58:e9:dc:69:63:7b:62:db:
         36:fc:34:b2:c4:16:53:24:85:40:87:95:ea:d5:fd:d2:b6:41:
         2e:21:cf:22:db:84:3b:62:45:21:ec:2b:b6:b3:cb:82:a8:07:
         66:27:5a:ce:8e:c1:60:2e:d4:fa:7e:5d:04:61:6c:a1:8f:76:
         6e:34:e7:63:84:9e:ec:4d:76:ad:e9:4d:65:f9:1d:b5:a7:e4:
         f0:91:dd:0e:51:13:4a:5a:a7:8a:28:b6:a6:49:26:a8:b7:98:
         d2:fb:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 08:16:10 2025 by rpki-client