Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32332d3234203d3e203133333335.roa
File:                     3139382e3137372e35362e302f32332d3234203d3e203133333335.roa (raw, json)
Hash identifier:          mRe3qSRv8VfRcyx6Vet8A0JF6DXCf9iSM9Xyo/Fc3Ig=
Subject key identifier:   FB:32:8C:F7:16:DB:98:83:74:20:B5:20:0F:4F:81:93:59:9E:2B:8C
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       380BEA3750BE51400685C5783FEF2FFD4114AF3C
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32332d3234203d3e203133333335.roa
Signing time:             Tue 22 Apr 2025 20:19:15 +0000
ROA not before:           Tue 22 Apr 2025 20:14:15 +0000
ROA not after:            Tue 21 Apr 2026 20:19:15 +0000
asID:                     13335
IP address blocks:        198.177.56.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0b:ea:37:50:be:51:40:06:85:c5:78:3f:ef:2f:fd:41:14:af:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 22 20:14:15 2025 GMT
            Not After : Apr 21 20:19:15 2026 GMT
        Subject: CN=FB328CF716DB98837420B5200F4F8193599E2B8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:df:44:c7:ab:00:8f:45:9f:65:1c:f8:7c:31:
                    68:ee:94:52:cb:e5:9e:36:fd:d2:78:cc:49:ba:08:
                    36:09:ab:c7:5f:a5:8b:9d:00:1b:09:6f:af:fb:c3:
                    e8:2e:56:fd:9e:5c:f5:9a:c1:e1:2c:cc:f1:d8:46:
                    00:8d:ba:b3:57:27:30:21:9c:eb:74:c9:2f:26:ac:
                    f4:aa:87:c5:4a:5b:ab:6a:cc:dc:6d:05:77:a5:0e:
                    2b:81:16:d1:66:21:db:78:3f:22:06:1d:fc:8e:47:
                    93:63:cd:61:e2:c5:00:72:52:78:06:0e:7e:5a:63:
                    1e:0e:12:b0:27:05:38:5c:6f:01:55:f8:fd:ba:a2:
                    e4:4f:fa:db:88:a3:8c:1e:af:a3:03:0b:a6:f6:ba:
                    2b:a3:66:fe:24:d1:38:d8:63:83:c7:ca:6d:ce:ac:
                    13:31:05:61:39:df:de:6d:a5:fa:21:18:ee:c7:0b:
                    05:45:c3:a4:cb:82:17:d9:c7:04:68:98:18:05:5e:
                    2f:6e:4c:8b:46:a1:4e:87:b5:07:88:e0:77:40:f4:
                    bf:34:1f:29:56:3e:a0:14:9c:1c:05:62:64:42:c4:
                    eb:23:de:61:8f:84:7c:fb:c4:c9:07:24:a3:1b:b5:
                    29:1f:91:8c:7c:d0:2a:35:ce:e9:5e:58:b5:ae:fb:
                    72:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:32:8C:F7:16:DB:98:83:74:20:B5:20:0F:4F:81:93:59:9E:2B:8C
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35362e302f32332d3234203d3e203133333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:89:d5:4d:63:7a:b1:07:ea:82:ea:9d:23:f7:e2:06:21:ee:
         bd:0f:99:a4:db:10:d5:1d:33:63:ff:89:9a:e7:27:98:85:c9:
         14:6c:28:72:56:a0:56:38:30:20:bd:4d:a6:0a:2f:be:e4:6b:
         7e:21:2f:0a:d6:46:2b:00:02:9f:60:99:27:0c:09:05:88:0a:
         6e:66:d4:f3:6d:87:f4:bb:f0:ce:86:88:cf:d1:95:25:6d:66:
         8f:b6:e5:e7:b1:5c:9b:84:55:80:96:4c:21:e1:a0:ce:46:99:
         c4:15:db:f3:fc:58:1c:7f:63:e1:30:8a:83:73:83:80:3b:d4:
         04:b1:d4:85:9c:62:93:63:94:d2:3a:10:42:66:79:3d:9b:c4:
         94:d2:9d:87:5b:ab:d0:08:cb:4b:6d:4e:0b:e5:be:74:1a:11:
         19:c0:68:79:3c:91:99:f2:3e:4b:b2:2f:bb:b7:7d:8e:41:37:
         32:75:7b:a2:9c:ac:1c:92:07:04:8e:3d:5a:36:4d:ce:5f:1a:
         b9:18:96:33:6a:ec:f4:4e:e7:b9:21:db:1f:a0:3d:fd:3a:db:
         17:62:39:05:10:0f:b9:c2:d3:d6:ce:0e:c9:29:d3:de:bf:ff:
         1f:51:94:a6:52:b0:06:67:b2:a2:d1:76:a0:8f:24:77:cc:ba:
         f7:05:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:27:12 2025 by rpki-client