Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e203239383032.roa
File:                     3139322e302e32332e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          Bq595Ep6o2nuu6tJ4s+8oBqhwChY9IQfcb7eyfE4HVw=
Subject key identifier:   1F:6A:D2:4C:A1:10:04:00:BC:CF:13:B9:0E:C7:B9:19:E4:C7:EE:C6
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       7646915C46F735F5ED25661C57A1F7EB8FE533B5
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e203239383032.roa
Signing time:             Thu 12 Jun 2025 10:40:35 +0000
ROA not before:           Thu 12 Jun 2025 10:35:35 +0000
ROA not after:            Thu 11 Jun 2026 10:40:35 +0000
asID:                     29802
IP address blocks:        192.0.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:08:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:46:91:5c:46:f7:35:f5:ed:25:66:1c:57:a1:f7:eb:8f:e5:33:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun 12 10:35:35 2025 GMT
            Not After : Jun 11 10:40:35 2026 GMT
        Subject: CN=1F6AD24CA1100400BCCF13B90EC7B919E4C7EEC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:79:5e:0a:f0:8a:90:6c:45:5a:cc:8f:3e:74:
                    91:1b:35:52:ce:d1:53:25:b9:1a:fb:46:ec:39:a8:
                    ff:bd:ee:2b:cc:c9:c2:d4:aa:84:8c:16:83:20:c7:
                    c6:97:05:26:25:a8:21:a4:2e:78:bf:7a:65:e2:09:
                    62:18:4f:17:e0:c9:0e:be:f4:74:db:ef:ba:2c:7d:
                    52:b3:1f:4c:8a:ec:d7:7c:4f:97:71:aa:0d:eb:64:
                    86:ba:a1:ba:09:f4:73:d5:2e:66:14:0d:18:bb:bc:
                    c2:a4:e3:ad:e5:0f:13:57:98:fd:46:3a:3c:1e:d0:
                    7d:e5:b0:de:89:8e:fa:c2:80:14:87:ac:01:6e:99:
                    43:c7:05:fa:1b:c5:c0:68:59:a1:8a:d5:7d:dc:05:
                    ab:62:52:d3:62:9f:ea:b0:2c:c5:43:fc:be:7a:18:
                    24:91:93:2d:79:b4:7b:47:8e:b6:c5:6d:3f:f8:cc:
                    02:6b:49:74:da:1e:97:db:07:ee:9c:b7:35:94:13:
                    27:b9:37:7c:e5:0a:89:2a:c9:74:1a:43:58:04:a7:
                    bf:0b:bd:18:3c:88:75:58:11:9e:25:14:90:58:68:
                    49:5f:21:6f:9f:07:8c:15:f4:d4:35:c9:ac:ae:ab:
                    42:43:12:85:91:50:ba:b3:74:c7:94:8c:85:79:b4:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6A:D2:4C:A1:10:04:00:BC:CF:13:B9:0E:C7:B9:19:E4:C7:EE:C6
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e32332e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:a8:54:1d:cd:e7:1a:c1:1a:a3:7d:4d:d8:59:ba:f8:c8:85:
         7c:e5:29:1a:23:cd:39:e4:97:52:62:c9:6b:cb:02:0f:7f:fb:
         48:9a:bd:5b:87:67:4b:4e:7d:75:ec:db:7d:89:22:e2:29:4c:
         27:92:35:03:78:13:a6:1a:6f:07:2f:7e:95:ea:b1:c9:9e:39:
         21:92:7e:b7:d1:1b:f7:32:9f:f6:21:86:d4:90:73:b5:a1:9e:
         28:69:8f:af:b8:5a:26:fc:bc:98:aa:82:da:b1:a2:8d:89:d0:
         4f:9d:4b:af:d8:8b:35:7d:b7:93:fe:01:10:69:aa:ec:9a:97:
         5b:3a:3e:ec:fe:37:9d:72:e2:31:11:2e:3b:b8:57:d0:d3:24:
         c6:3c:84:ba:44:85:13:68:6a:53:31:e7:51:0f:c0:16:c3:e1:
         13:ee:ba:95:4f:67:03:3a:cd:2d:40:98:10:e8:32:76:99:a4:
         82:13:5a:7c:47:f6:f9:67:25:ec:fe:a2:a0:3b:49:9a:18:79:
         02:b3:67:be:0c:31:97:86:94:b2:05:03:a9:04:a4:34:a2:24:
         45:9a:6a:5c:80:8c:92:59:6c:6f:52:74:93:e3:d3:0b:06:6f:
         86:d5:ea:8a:84:59:32:a5:e8:66:26:4d:f5:cc:0b:89:99:7c:
         6b:7b:77:c3
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUdkaRXEb3NfXtJWYcV6H364/lM7UwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUwNjEyMTAzNTM1WhcNMjYwNjExMTA0MDM1
WjAzMTEwLwYDVQQDEygxRjZBRDI0Q0ExMTAwNDAwQkNDRjEzQjkwRUM3QjkxOUU0
QzdFRUM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83leCvCKkGxF
WsyPPnSRGzVSztFTJbka+0bsOaj/ve4rzMnC1KqEjBaDIMfGlwUmJaghpC54v3pl
4gliGE8X4MkOvvR02++6LH1Ssx9MiuzXfE+XcaoN62SGuqG6CfRz1S5mFA0Yu7zC
pOOt5Q8TV5j9Rjo8HtB95bDeiY76woAUh6wBbplDxwX6G8XAaFmhitV93AWrYlLT
Yp/qsCzFQ/y+ehgkkZMtebR7R462xW0/+MwCa0l02h6X2wfunLc1lBMnuTd85QqJ
Ksl0GkNYBKe/C70YPIh1WBGeJRSQWGhJXyFvnweMFfTUNcmsrqtCQxKFkVC6s3TH
lIyFebRwlQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFB9q0kyhEAQAvM8TuQ7HuRnk
x+7GMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQy
OGVhOWI3MjY3LzAvMzEzOTMyMmUzMDJlMzIzMzJlMzAyZjMyMzQyZDMyMzQyMDNk
M2UyMDMyMzkzODMwMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADAABcwDQYJKoZIhvcNAQELBQADggEB
AEaoVB3N5xrBGqN9TdhZuvjIhXzlKRojzTnkl1JiyWvLAg9/+0iavVuHZ0tOfXXs
232JIuIpTCeSNQN4E6YabwcvfpXqscmeOSGSfrfRG/cyn/YhhtSQc7Whnihpj6+4
Wib8vJiqgtqxoo2J0E+dS6/YizV9t5P+ARBpquyal1s6Puz+N51y4jERLju4V9DT
JMY8hLpEhRNoalMx51EPwBbD4RPuupVPZwM6zS1AmBDoMnaZpIITWnxH9vlnJez+
oqA7SZoYeQKzZ74MMZeGlLIFA6kEpDSiJEWaalyAjJJZbG9SdJPj0wsGb4bV6oqE
WTKl6GYmTfXMC4mZfGt7d8M=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:17:37 2025 by rpki-client