Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35392e302f32342d3234203d3e203231383539.roa
File:                     3139382e3137372e35392e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          aq5uiaJpupK2X6HbwrCUJriKcLS+k2GlyMctX7Jm4lc=
Subject key identifier:   60:DD:90:CE:C3:88:EE:52:34:2C:70:8B:7E:FA:5C:A4:8B:6A:91:ED
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       349D28DB30523E9A2E09407A7A41B7D6628F685B
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35392e302f32342d3234203d3e203231383539.roa
Signing time:             Thu 17 Apr 2025 15:26:49 +0000
ROA not before:           Thu 17 Apr 2025 15:21:49 +0000
ROA not after:            Thu 16 Apr 2026 15:26:49 +0000
asID:                     21859
IP address blocks:        198.177.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 21:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:9d:28:db:30:52:3e:9a:2e:09:40:7a:7a:41:b7:d6:62:8f:68:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 17 15:21:49 2025 GMT
            Not After : Apr 16 15:26:49 2026 GMT
        Subject: CN=60DD90CEC388EE52342C708B7EFA5CA48B6A91ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a8:82:0a:42:11:45:aa:54:4a:75:bc:ff:d2:
                    0f:04:29:d5:3c:93:b3:f5:b7:a6:05:04:9e:b5:de:
                    3f:b2:37:c9:7f:67:9d:8a:06:3d:8c:81:c5:b9:49:
                    81:c2:e1:61:3a:b3:30:95:b5:22:2d:fd:73:3d:6d:
                    38:b9:5b:ee:c4:2c:61:f2:6a:8c:6c:e8:0d:d0:d9:
                    ba:84:bf:97:21:7b:fd:70:a9:1c:b4:f0:fc:81:92:
                    36:ab:a3:ec:59:54:ce:aa:f2:78:57:69:0b:e0:39:
                    c7:dc:7e:f9:6a:8a:fc:5e:bf:12:b2:ab:e7:75:9b:
                    a9:ba:25:fa:8d:e4:dc:ad:f3:01:6c:d0:5b:3b:af:
                    6c:c5:f0:bb:bb:11:53:5f:a1:52:38:2f:30:37:16:
                    5a:97:d0:81:8f:94:04:06:f5:6d:79:20:0b:12:6d:
                    96:aa:89:7e:2c:9c:1a:0c:f3:96:ac:6c:3f:a1:77:
                    55:73:57:5f:cb:d6:bb:cb:fb:13:1e:97:33:84:f7:
                    ca:d1:cf:32:e2:5c:15:f6:be:d8:7c:e8:75:a6:e6:
                    54:b4:0c:0e:0b:a5:68:57:89:c3:ee:59:08:83:8b:
                    7d:e8:0e:b3:70:7f:aa:9f:5f:67:8f:20:97:5e:8f:
                    57:67:5f:c3:70:2c:bc:f5:e1:ec:5a:ab:18:13:7b:
                    d5:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:DD:90:CE:C3:88:EE:52:34:2C:70:8B:7E:FA:5C:A4:8B:6A:91:ED
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35392e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:11:ce:2c:60:07:72:ca:5d:50:ec:28:cc:bc:29:8d:ec:c7:
         bc:80:73:07:ec:74:3d:68:54:65:35:b6:b1:db:67:89:59:fc:
         e1:44:a7:76:72:bb:35:36:80:17:58:c6:3f:d4:45:3c:81:41:
         13:c1:e1:ed:c3:30:1a:03:0d:e5:a3:57:9b:5e:69:a9:70:a8:
         ab:ac:d0:27:03:b1:b0:2b:64:a1:c5:13:67:44:4d:34:6c:3c:
         11:66:0a:f2:77:dc:50:76:3d:a6:32:57:a5:dd:bd:9a:d1:b2:
         6d:25:dd:8a:0e:0a:33:40:35:b0:f4:89:81:94:91:c3:96:95:
         e9:32:a0:a7:c4:ca:38:89:09:20:22:7d:8c:d9:49:8c:b0:35:
         3f:e1:40:f6:eb:5b:90:d5:46:26:e7:de:dd:bf:1b:00:f2:73:
         96:3d:93:14:9d:0e:76:9c:73:c2:8b:e3:8a:58:38:9a:cb:31:
         8b:0d:e8:7b:99:76:6c:f2:41:17:6d:19:fb:3f:02:6b:47:05:
         47:f2:3f:9f:99:21:99:c0:9f:c4:6d:94:9a:fa:2e:60:31:a6:
         81:36:66:a8:8a:b9:52:07:16:bb:7b:75:86:8d:18:7b:e5:09:
         20:af:b9:68:0e:2c:60:b4:cb:39:d6:36:1c:41:81:c5:39:71:
         e3:25:13:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:56:10 2025 by rpki-client