Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3230382e302f32312d3234203d3e203230303031.roa
File:                     3139382e31352e3230382e302f32312d3234203d3e203230303031.roa (raw, json)
Hash identifier:          kmcMuFOG9aP1U2Kgm0z7I+3+660OXccLm3xpZqqMOI0=
Subject key identifier:   89:4A:7A:15:1E:02:2A:45:17:87:67:3D:FD:17:26:E0:C8:A1:F3:BC
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       1EFDBC38F5F28FE0568DB2722B3490701D20EFD6
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3230382e302f32312d3234203d3e203230303031.roa
Signing time:             Fri 18 Apr 2025 06:29:21 +0000
ROA not before:           Fri 18 Apr 2025 06:24:21 +0000
ROA not after:            Fri 17 Apr 2026 06:29:21 +0000
asID:                     20001
IP address blocks:        198.15.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 22:28:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:fd:bc:38:f5:f2:8f:e0:56:8d:b2:72:2b:34:90:70:1d:20:ef:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 18 06:24:21 2025 GMT
            Not After : Apr 17 06:29:21 2026 GMT
        Subject: CN=894A7A151E022A451787673DFD1726E0C8A1F3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9a:ca:d4:39:79:6d:95:b1:f8:74:41:b2:fb:
                    82:4f:d4:10:ec:84:03:5f:95:45:01:9a:53:45:aa:
                    0e:13:ac:de:ef:55:40:83:05:9f:03:14:ae:93:59:
                    10:5b:4b:cb:15:a3:52:f5:86:35:57:e2:a7:c4:f3:
                    2b:a9:ef:dd:a7:2a:f3:66:1a:50:db:1d:7a:ff:31:
                    2f:37:3f:b0:cf:bc:04:37:90:b0:ba:da:c6:9f:24:
                    0d:74:55:c4:5a:bf:e5:e2:8b:4e:1d:f5:ca:b0:3c:
                    6c:b5:83:3f:32:68:b9:59:d3:e4:85:7a:d4:c9:82:
                    87:81:fb:03:25:19:4e:1c:3e:44:4e:00:61:f4:91:
                    e3:17:4d:42:42:f3:d1:26:51:ab:36:31:5b:6e:f0:
                    15:ec:66:f1:0a:8a:d7:58:0d:89:c8:b4:d5:30:b2:
                    a6:7f:44:93:75:8a:51:89:3b:c2:c6:eb:83:22:61:
                    cc:7e:83:93:ac:e0:e1:54:f6:8e:05:ce:cd:ee:32:
                    41:57:3f:25:c0:1d:b9:78:c9:2f:0a:a0:48:bb:f3:
                    65:2f:41:7f:a7:cb:fb:9d:7b:3a:f7:54:08:7a:a4:
                    53:73:33:e8:0b:2c:61:35:c3:c2:fa:3f:02:df:96:
                    fe:b1:6d:9f:ab:04:78:d0:0c:b0:ed:62:70:aa:be:
                    5a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4A:7A:15:1E:02:2A:45:17:87:67:3D:FD:17:26:E0:C8:A1:F3:BC
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3230382e302f32312d3234203d3e203230303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         82:06:c8:75:33:bb:ad:14:b4:4e:50:4d:35:49:c0:b4:5d:6c:
         be:3d:53:23:0d:59:6e:94:43:3b:60:d1:f0:27:75:5e:ea:7a:
         67:6c:c9:8e:bf:4f:25:0d:3e:68:f6:03:73:23:c8:45:2e:18:
         9a:b8:94:12:cc:2c:b6:53:a5:97:3c:53:ad:eb:df:60:d7:b0:
         c1:db:a1:ee:7d:27:fa:9b:48:3f:c6:3d:c7:fb:20:6a:fa:a9:
         07:41:7d:6e:14:75:1d:60:28:9d:8c:0e:40:7e:4c:ab:e4:ea:
         08:36:4e:23:42:94:b2:c2:e4:f6:26:4b:59:c8:59:18:74:a9:
         50:2f:6e:20:83:57:0d:85:75:54:53:b2:9c:7f:ef:df:40:05:
         a0:9c:2f:df:69:f6:2d:9e:3d:4d:c8:10:cc:46:54:ee:76:7f:
         01:49:cb:9c:c2:35:8b:c8:09:9b:26:50:8f:34:a4:f7:48:77:
         d1:3e:e4:22:56:9a:d6:99:c7:5e:f5:32:0e:e2:ac:6d:7b:3c:
         1f:0e:e2:3c:47:1f:c4:dd:7c:f7:01:48:84:1e:ee:32:96:64:
         b0:e2:95:64:a4:28:b9:35:22:d7:00:91:f5:c9:60:f1:0d:49:
         7c:58:b2:d6:74:e7:c3:73:81:7a:47:d3:78:57:70:0a:19:eb:
         c7:ed:f3:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:32:25 2025 by rpki-client