Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32342d3234203d3e203231383539.roa
File:                     3139382e3137372e35382e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          hkypxjJ77+TfXO6rSUyRnl5oMPv1F2yWBfxjDJo3KOE=
Subject key identifier:   99:23:9D:D9:05:12:1D:F3:C7:1C:65:DB:C9:F9:5C:02:DC:DB:14:5E
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       49C065907878E6C1D5D9B3F096228A5BBE8BF05B
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32342d3234203d3e203231383539.roa
Signing time:             Thu 17 Apr 2025 15:27:02 +0000
ROA not before:           Thu 17 Apr 2025 15:22:02 +0000
ROA not after:            Thu 16 Apr 2026 15:27:02 +0000
asID:                     21859
IP address blocks:        198.177.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 21:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c0:65:90:78:78:e6:c1:d5:d9:b3:f0:96:22:8a:5b:be:8b:f0:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 17 15:22:02 2025 GMT
            Not After : Apr 16 15:27:02 2026 GMT
        Subject: CN=99239DD905121DF3C71C65DBC9F95C02DCDB145E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c4:03:b5:8e:8a:44:0a:cb:ef:28:d2:37:89:
                    9f:35:8c:58:5d:33:9a:a3:41:94:98:a1:71:76:55:
                    c2:d1:f9:3f:80:dc:69:68:e0:a8:55:4d:8a:8c:70:
                    8e:04:2f:04:c8:93:09:2c:9d:f7:1a:df:54:18:50:
                    7c:69:72:88:7a:ad:24:e1:78:06:31:2e:94:c9:10:
                    07:91:c8:57:b8:e2:1f:aa:8a:e8:c1:17:c4:b3:56:
                    62:50:71:11:ed:a2:9d:15:a7:a0:8c:c5:ae:14:ab:
                    00:cf:d6:60:72:77:d3:d6:74:32:78:50:51:05:7c:
                    7a:37:c0:98:8b:25:c6:fb:b7:38:6c:07:b2:c2:86:
                    c2:45:1c:be:af:d2:c3:34:c1:1d:13:31:c9:d0:58:
                    81:39:ab:1b:e8:fc:d2:c3:0f:1b:4c:66:1a:fb:be:
                    3c:f8:82:5e:4e:19:4b:29:a3:7b:01:b9:f4:67:b9:
                    6b:97:23:f7:35:4e:d6:7f:39:41:f3:41:c8:1d:36:
                    db:c6:94:85:f8:67:c3:cc:10:34:f7:b4:ac:02:13:
                    3e:ab:4b:41:3a:6e:25:13:ef:8d:44:6b:9a:2b:a2:
                    ca:ea:bd:5f:e6:db:f7:9f:88:e7:88:61:e3:54:34:
                    42:86:73:67:47:80:dd:4a:b1:1d:c5:ae:ed:58:71:
                    b3:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:23:9D:D9:05:12:1D:F3:C7:1C:65:DB:C9:F9:5C:02:DC:DB:14:5E
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:74:47:99:b7:e4:aa:ea:8a:af:08:d8:5a:04:6d:56:17:ec:
         7a:a2:a3:e1:9f:1c:6b:66:d0:5f:03:f5:96:23:ab:9f:bd:af:
         10:5d:5b:33:f6:0f:07:2f:76:6d:63:2b:e9:e7:46:c2:48:d4:
         e3:ba:5b:10:05:62:27:87:e4:08:73:af:ba:d2:63:a5:93:31:
         75:b0:12:d3:aa:6f:dc:88:33:4a:bc:ed:b0:e2:1a:2a:e6:bf:
         5f:cb:39:9f:57:49:af:0a:d0:10:b5:15:e3:5d:43:78:e2:e8:
         85:29:10:c8:a7:e1:13:f8:6e:d3:77:aa:0f:64:f7:0d:73:a2:
         73:ba:03:67:14:f0:71:07:4c:58:34:6c:22:a9:52:db:fa:d7:
         a8:32:ae:3a:9a:58:e8:6d:99:27:f3:31:f6:b7:93:88:37:f6:
         ef:06:24:84:2a:95:41:e6:c0:47:0f:d8:94:24:26:a2:22:9f:
         ce:1a:97:42:a0:d7:9f:9b:9e:5b:b3:22:10:06:f4:ba:c5:93:
         39:8e:14:f1:bd:6a:73:d7:de:55:ea:8a:0b:7b:38:af:0f:c1:
         f2:cc:ae:ae:52:9d:b5:b9:a5:b6:1f:f7:95:59:71:cb:f4:fa:
         68:af:32:9e:a9:0b:14:16:5f:a6:35:e9:07:35:7b:ac:d0:dc:
         71:6f:df:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:55:56 2025 by rpki-client