Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3231362e302f32312d3234203d3e20383334.roa
File:                     3139382e31352e3231362e302f32312d3234203d3e20383334.roa (raw, json)
Hash identifier:          9Bu3TMOIw/d+9pf2ulAnmR1TRIhqisGOIht/FHPONQA=
Subject key identifier:   06:A0:76:F2:53:A5:09:8B:23:F5:CF:45:E6:EC:5E:91:C8:FF:BD:6A
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       36708BA5E4276855E0BBFB0327630081BD5F2790
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3231362e302f32312d3234203d3e20383334.roa
Signing time:             Fri 18 Apr 2025 06:30:57 +0000
ROA not before:           Fri 18 Apr 2025 06:25:57 +0000
ROA not after:            Fri 17 Apr 2026 06:30:57 +0000
asID:                     834
IP address blocks:        198.15.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 21:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:70:8b:a5:e4:27:68:55:e0:bb:fb:03:27:63:00:81:bd:5f:27:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 18 06:25:57 2025 GMT
            Not After : Apr 17 06:30:57 2026 GMT
        Subject: CN=06A076F253A5098B23F5CF45E6EC5E91C8FFBD6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:81:a9:d0:73:67:64:4b:48:48:c3:8d:a4:3d:
                    57:18:6f:b8:b0:b3:ad:90:06:64:cb:fc:8e:a4:b2:
                    0f:36:c5:e9:db:a3:d5:b6:d1:24:61:cd:9b:b1:c6:
                    fd:0a:ad:15:a1:ff:c7:38:89:32:ca:cb:fd:7f:74:
                    98:e7:10:30:f0:a5:73:23:aa:25:af:d3:53:89:b1:
                    43:74:46:d2:bc:9f:1b:c2:89:07:22:03:39:b0:da:
                    c8:14:85:0b:3f:29:3a:00:72:a4:ff:0d:54:3b:ce:
                    e2:8e:dc:31:a5:68:87:57:8c:7a:25:95:b5:12:d4:
                    b6:5f:6d:32:84:d5:94:33:3e:ae:66:59:ce:d9:c2:
                    34:74:f7:1d:ca:0a:29:81:18:f5:e4:0f:e2:f6:5f:
                    d0:66:80:ff:63:72:ce:f7:1a:04:58:54:ed:e6:cb:
                    bb:89:01:4e:79:89:1a:2a:c3:b7:e6:02:d7:e8:d2:
                    82:b6:96:20:c8:f3:07:1e:9f:4c:c8:72:ec:29:2f:
                    fd:12:64:de:ac:6a:17:b2:bc:a7:58:87:a8:8a:a5:
                    a8:90:ca:a1:89:a7:71:5a:3a:04:b6:4f:ce:ee:0d:
                    36:ea:cb:ad:63:de:8e:d9:d7:41:eb:48:73:f9:1e:
                    84:0a:97:89:bc:51:f0:dd:e6:af:90:ef:e8:36:07:
                    91:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A0:76:F2:53:A5:09:8B:23:F5:CF:45:E6:EC:5E:91:C8:FF:BD:6A
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3231362e302f32312d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:97:2b:61:52:4e:70:81:c7:b6:0e:5d:04:bf:a9:bd:86:e6:
         ad:a0:b5:7b:7f:60:d4:5a:69:42:e4:72:0c:3d:b8:dc:bd:d5:
         bc:96:39:1d:8e:fc:ee:c8:82:de:0a:f8:49:0a:5f:46:c4:59:
         ea:29:e1:cb:a0:63:b0:35:59:8e:86:7f:4a:93:99:9d:65:35:
         a1:0a:c6:0d:95:a6:e3:16:ab:67:15:52:d7:e4:be:c8:ef:79:
         ef:3b:bd:ff:3c:e2:d5:c4:d6:20:99:77:ef:f2:90:a0:f8:12:
         05:cd:69:93:b3:01:c9:98:0d:a9:83:7e:f4:f5:cc:0c:05:40:
         db:5a:60:f1:a4:2f:66:46:bf:65:bf:23:17:a3:e0:1b:d6:fc:
         34:f1:86:55:6b:f3:dd:38:5d:16:f7:b0:36:1c:4a:b8:07:c1:
         2b:d8:2e:fe:5d:2c:92:4f:dd:fc:ed:22:88:3f:42:66:68:05:
         e3:b3:e7:5c:a5:8c:06:d6:09:4e:20:07:1b:ec:80:d6:30:4d:
         78:53:81:71:d1:a2:10:e1:82:e1:60:01:e7:ef:15:2d:58:44:
         08:2f:ac:27:b0:4e:7b:a1:0d:1d:2f:ae:d6:c4:19:32:e6:8c:
         e1:1c:b5:ca:ba:11:8e:c8:85:e5:b1:f8:57:1b:9c:c8:71:5f:
         4e:17:8a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:54:59 2025 by rpki-client