Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3232342e302f31392d3234203d3e20383334.roa
File:                     3139382e31352e3232342e302f31392d3234203d3e20383334.roa (raw, json)
Hash identifier:          GMi7tRxBfoD5GCOe0QihLAUqKE17bvOHrK1YemA0KZE=
Subject key identifier:   8B:A3:79:8B:65:99:76:F7:24:52:8B:37:50:64:05:7B:01:DA:DB:B7
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       440B006634CF21FBF6E3ED8E9B32969EF397AFAA
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3232342e302f31392d3234203d3e20383334.roa
Signing time:             Fri 18 Apr 2025 06:30:57 +0000
ROA not before:           Fri 18 Apr 2025 06:25:57 +0000
ROA not after:            Fri 17 Apr 2026 06:30:57 +0000
asID:                     834
IP address blocks:        198.15.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 21:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:0b:00:66:34:cf:21:fb:f6:e3:ed:8e:9b:32:96:9e:f3:97:af:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 18 06:25:57 2025 GMT
            Not After : Apr 17 06:30:57 2026 GMT
        Subject: CN=8BA3798B659976F724528B375064057B01DADBB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:37:06:e4:4f:84:99:21:4b:b3:2b:80:1c:dd:
                    d0:0e:f3:9d:2b:35:e9:73:34:84:a7:ce:32:25:77:
                    9f:c1:97:42:5e:02:9f:a3:cc:11:67:11:71:6e:9b:
                    87:2d:2a:2d:3f:c8:26:40:df:6f:b6:45:ef:52:68:
                    e0:f3:0f:db:88:81:9e:5f:45:98:13:54:4a:a6:a6:
                    b7:98:a6:2b:67:83:1f:05:fe:2a:5a:12:54:bb:29:
                    d9:b0:e6:c4:52:ad:cb:16:6b:22:a4:d5:33:27:45:
                    45:c1:a8:69:05:4f:0a:49:6c:b5:5f:14:76:89:02:
                    c3:8c:92:8f:26:aa:d1:85:0a:f5:6a:04:5d:c2:be:
                    f3:b2:bb:44:a3:b1:b6:94:6c:f0:3b:9b:e2:f2:42:
                    7f:60:ea:06:a3:f7:03:00:07:9f:4f:64:be:4a:86:
                    a8:dc:3a:cf:5d:1e:06:ad:3b:38:8d:61:1b:2d:ab:
                    74:ee:df:e3:ef:f4:56:3a:95:e6:41:51:eb:b0:89:
                    ab:45:27:57:46:4f:94:6b:60:9f:d9:c5:50:00:b2:
                    75:eb:70:8f:a8:d7:73:b0:5c:35:91:13:a3:9c:e6:
                    3c:28:20:93:d2:e5:19:c3:59:a9:48:39:91:1c:7c:
                    15:c2:21:23:4d:f3:9d:70:45:07:c3:85:ae:3c:63:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A3:79:8B:65:99:76:F7:24:52:8B:37:50:64:05:7B:01:DA:DB:B7
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e31352e3232342e302f31392d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.15.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:ec:85:72:f8:10:50:09:76:2f:7b:6f:b3:8f:72:cd:d9:a0:
         19:fa:a6:62:bd:0d:cb:60:f1:09:88:74:7c:96:96:7e:4a:bf:
         95:ae:c4:98:61:de:78:0d:a5:51:1a:0e:96:b0:75:78:d4:b7:
         b8:4f:a0:0c:dc:e8:28:fa:1b:ed:63:34:36:72:ee:03:6d:76:
         d9:97:cc:53:d9:df:54:da:5d:73:3a:38:02:6a:7c:ca:8f:57:
         47:60:83:f1:fc:21:c5:2c:47:9e:0e:95:34:7f:cb:fb:86:50:
         44:31:46:a7:71:a4:18:8b:b5:f6:05:3b:d8:97:e5:53:ac:be:
         ff:e2:82:27:8c:d7:25:c5:6b:a9:56:06:a3:d4:af:21:39:f6:
         0a:4f:34:01:dd:f6:a1:db:bb:85:ae:db:97:d7:bf:34:43:e4:
         53:cf:ca:4b:b4:eb:6c:7b:67:a8:b4:22:9b:10:90:63:cf:50:
         ef:eb:a5:f9:6e:7a:65:7b:c4:08:27:1f:3c:31:6a:c3:91:25:
         75:ba:94:f0:5f:4d:06:bb:2b:72:36:e8:84:d0:97:62:ce:f6:
         c7:5a:1d:f9:f2:bc:86:68:e5:29:05:2c:0e:52:c6:a5:59:c2:
         c1:12:20:ae:c0:5a:56:7d:d3:86:e8:aa:0d:f7:11:12:cf:c2:
         aa:f2:b2:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:50:02 2025 by rpki-client