Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32332d3234203d3e20383334.roa
File:                     3139322e302e32302e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          LcSVA6vnio4GoBR1LZ+UVefs+Ph3DAlSgKKQDTngFV8=
Subject key identifier:   E8:2D:C7:4B:E8:4F:96:F6:4E:95:FD:D7:72:06:19:7E:CE:7F:76:94
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       6AA6B1010C030069FB55BBB78E4B7C5AFD6605EC
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32332d3234203d3e20383334.roa
Signing time:             Thu 12 Jun 2025 10:43:31 +0000
ROA not before:           Thu 12 Jun 2025 10:38:31 +0000
ROA not after:            Thu 11 Jun 2026 10:43:31 +0000
asID:                     834
IP address blocks:        192.0.20.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a6:b1:01:0c:03:00:69:fb:55:bb:b7:8e:4b:7c:5a:fd:66:05:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun 12 10:38:31 2025 GMT
            Not After : Jun 11 10:43:31 2026 GMT
        Subject: CN=E82DC74BE84F96F64E95FDD77206197ECE7F7694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:38:fc:db:f9:a6:b5:e6:2b:bb:10:44:8f:
                    05:46:2f:5d:a5:32:36:60:14:97:d6:9e:86:98:11:
                    a9:f3:75:c3:a9:e8:df:3f:76:8b:83:2b:c5:ea:78:
                    a4:8b:0e:97:9b:f2:63:a8:fa:5e:45:04:a3:d6:f3:
                    2f:55:af:da:b3:7b:8b:d3:15:32:2f:c2:ad:75:ac:
                    ab:10:a2:07:1d:28:bd:56:cd:23:d8:63:ca:45:00:
                    fe:ca:2b:b6:28:05:61:fb:4c:84:1c:de:17:d4:6e:
                    a5:30:2a:52:16:89:72:9f:95:25:22:68:5d:c9:39:
                    3e:c6:b2:92:f2:9d:c5:87:81:e5:e8:6f:0d:92:41:
                    d1:62:06:7e:26:d8:37:bc:47:66:83:d3:fa:02:74:
                    a8:f9:f6:fa:99:7c:5a:20:fc:19:a0:67:a4:8c:59:
                    64:2e:95:4a:3e:19:be:9c:be:3f:4a:78:21:b0:4c:
                    6a:78:88:96:fb:81:03:8c:c3:83:83:f1:48:dd:2f:
                    2f:01:f4:73:22:bb:44:ba:4d:d8:9d:4b:c3:c4:9d:
                    30:32:bb:de:24:4f:2c:ef:5d:d1:ae:21:ae:4b:2b:
                    6e:25:74:5b:34:1b:c4:79:4a:43:8b:bc:c7:dd:4f:
                    d6:c5:a9:b4:01:58:42:21:b0:ad:c3:82:96:4e:ca:
                    6d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2D:C7:4B:E8:4F:96:F6:4E:95:FD:D7:72:06:19:7E:CE:7F:76:94
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32302e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8b:3e:fb:29:fd:60:bc:ec:c1:91:b6:2e:d4:d3:cb:04:29:e6:
         3b:a2:d4:e5:7f:9f:ba:8b:f5:29:06:d4:1d:4e:a2:0f:8d:b3:
         60:20:ac:7b:d9:12:a5:51:13:e3:8a:e6:ff:bc:eb:98:02:0a:
         54:f9:0e:e8:07:10:e4:df:49:6b:9e:cb:3b:01:58:f9:be:b3:
         6c:7d:2c:3d:27:f1:8f:e0:1c:74:84:15:e3:9f:dd:02:1a:e2:
         f2:6d:c6:c0:b8:07:27:fe:db:c4:59:b7:99:f0:cd:f8:73:2b:
         ee:96:30:fa:02:52:21:f7:15:71:49:8b:40:97:47:70:31:f5:
         65:a2:36:1a:b9:99:16:d4:6b:d7:fa:8b:58:9c:93:22:80:0b:
         16:e8:9a:78:d1:43:46:ae:15:51:64:df:37:20:d4:fb:1c:55:
         7f:66:d5:08:c4:27:05:81:16:f0:88:52:11:bd:35:97:9e:01:
         e8:95:32:46:8b:a3:20:11:0d:ea:95:b8:f1:17:84:d9:92:93:
         fc:60:b5:7a:c3:a0:dd:5d:3c:66:92:6c:61:ac:58:f0:0a:72:
         95:33:1c:dd:ab:cf:3a:8b:5b:9b:59:e7:37:b9:2b:22:8a:86:
         23:ec:43:ff:ff:b3:5f:b7:38:5c:d2:2e:e6:8b:81:dd:4e:27:
         36:9c:4e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:09:54 2025 by rpki-client