Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32342d3234203d3e20383334.roa
File:                     3139322e302e32322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          f0DRCyR1KJI5nUxu5vohLfnR+QlCwpiaKLcSMVB6MnY=
Subject key identifier:   8F:05:1F:FB:39:6A:53:05:9D:55:E1:EE:13:D5:C6:41:38:E4:63:F3
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       159B5B8323FEFF08724808690F04548ABBC21506
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 12 Jun 2025 10:43:31 +0000
ROA not before:           Thu 12 Jun 2025 10:38:31 +0000
ROA not after:            Thu 11 Jun 2026 10:43:31 +0000
asID:                     834
IP address blocks:        192.0.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 22:03:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9b:5b:83:23:fe:ff:08:72:48:08:69:0f:04:54:8a:bb:c2:15:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun 12 10:38:31 2025 GMT
            Not After : Jun 11 10:43:31 2026 GMT
        Subject: CN=8F051FFB396A53059D55E1EE13D5C64138E463F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2e:9b:40:87:7e:3e:74:2b:b6:76:1f:e4:19:
                    07:0b:a4:2f:49:c6:b9:8c:d4:0b:e4:ce:13:e2:95:
                    ee:fd:33:23:6d:c6:c3:45:e4:7c:85:d5:17:a2:6e:
                    8c:83:72:cc:e2:06:0b:20:98:91:c5:29:4f:54:50:
                    b1:bd:e0:e9:05:e5:a0:0e:45:43:1c:a1:81:e7:52:
                    a0:58:fe:77:be:73:79:9b:34:a4:48:b5:30:30:89:
                    a4:07:46:4d:11:27:51:2c:8c:5b:bd:83:d1:4f:fa:
                    fc:01:6e:73:8c:9a:a1:50:4e:5b:c3:e4:8a:fe:06:
                    52:bd:51:87:10:ef:02:3f:f8:58:bc:5e:09:fb:0f:
                    ae:7f:76:36:f2:63:e4:12:a9:db:5d:e2:d2:40:6c:
                    e9:b1:e3:f0:58:30:36:39:00:e6:d5:9e:ee:ab:32:
                    e6:a5:d3:e0:f1:58:eb:31:ec:e6:e6:4a:d2:b0:8d:
                    d4:51:76:ba:c9:c1:76:d1:85:99:99:fb:60:59:de:
                    57:03:55:27:60:80:3f:2a:d4:24:64:f4:a6:30:aa:
                    c6:23:1c:c4:d6:33:84:c2:2a:4d:d5:b9:e9:3a:99:
                    ad:d5:80:7b:28:d7:bf:4b:cb:50:c7:99:63:e6:37:
                    85:84:81:09:b0:4c:7b:b2:09:5e:b3:f9:2b:c3:ed:
                    54:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:05:1F:FB:39:6A:53:05:9D:55:E1:EE:13:D5:C6:41:38:E4:63:F3
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:ad:90:78:a1:d0:a9:8d:a1:27:0a:ab:76:a4:40:4d:13:6a:
         e7:c8:2c:e7:70:3d:ab:44:33:cc:84:3c:ef:17:a6:e9:a1:47:
         7d:45:10:4e:cc:8c:15:fc:3e:50:22:4b:b8:1c:bb:04:1d:1a:
         9a:93:a3:24:4c:f9:a7:58:cd:c7:7b:ea:c0:0b:e7:f3:97:b5:
         a8:a2:bf:1f:3b:cd:e7:cc:51:d4:42:c2:3c:b2:0c:e6:66:76:
         71:51:d0:2e:f5:52:f8:b1:14:f0:6c:ee:c0:72:3a:67:c3:78:
         8b:98:be:be:b7:f4:9f:f7:2b:e3:6c:7c:7c:39:9e:d0:5d:b1:
         81:c2:31:d4:1d:b9:de:c4:79:31:43:3a:d5:ef:33:cc:68:fd:
         ce:bd:05:32:cd:68:9c:d8:eb:75:85:e6:0f:d7:83:99:4a:2c:
         d2:f1:eb:3c:df:eb:b2:f4:3f:0f:10:3a:63:ed:e1:9b:48:f8:
         30:63:24:7a:0c:c9:8c:a0:4f:8f:91:fc:a5:06:a3:80:98:37:
         f5:ef:a0:12:2f:af:53:78:45:06:5b:7f:0e:d2:05:35:58:fc:
         33:29:3a:ad:f0:22:c9:e4:bb:a9:8e:ca:0f:06:39:2f:df:f5:
         d9:cb:15:82:8a:f0:bb:5e:91:fd:d3:a0:3e:7e:b2:61:da:eb:
         59:fd:b3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:04:21 2025 by rpki-client