Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35392e302f32342d3234203d3e203632363130.roa
File:                     3139382e3137372e35392e302f32342d3234203d3e203632363130.roa (raw, json)
Hash identifier:          YMMgEIPoaosUyyStEIOaDIfCVwBVs0320cASBI4wF9I=
Subject key identifier:   AF:16:F9:84:CC:C4:1F:AD:15:BD:A2:55:17:8D:66:96:D7:41:85:AE
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       76132DCABCF12B7DA421ED92086CAC8B98B6E1FC
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35392e302f32342d3234203d3e203632363130.roa
Signing time:             Thu 17 Apr 2025 04:38:56 +0000
ROA not before:           Thu 17 Apr 2025 04:33:56 +0000
ROA not after:            Thu 16 Apr 2026 04:38:56 +0000
asID:                     62610
IP address blocks:        198.177.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 21:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:13:2d:ca:bc:f1:2b:7d:a4:21:ed:92:08:6c:ac:8b:98:b6:e1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 17 04:33:56 2025 GMT
            Not After : Apr 16 04:38:56 2026 GMT
        Subject: CN=AF16F984CCC41FAD15BDA255178D6696D74185AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1e:f0:ee:e7:92:c1:5e:d6:10:d6:78:a7:4c:
                    a0:32:cd:01:60:8f:e7:01:aa:86:7c:4f:4d:d6:a3:
                    5e:96:7a:6a:5d:c1:09:ca:76:99:6e:26:41:6a:33:
                    71:8e:34:ba:e0:0b:a4:4e:17:9f:21:4e:be:39:99:
                    0e:01:e9:da:74:20:66:3f:24:cf:2c:2b:15:2b:f9:
                    68:ae:11:a8:4e:22:64:23:2a:03:92:dd:f8:00:df:
                    f5:47:b8:c1:2f:69:40:c3:84:bd:14:e7:f6:f0:16:
                    17:83:3f:3e:8e:40:52:b2:97:39:7d:48:cc:62:d5:
                    33:ed:57:20:26:af:fe:69:23:8e:54:6c:19:ca:24:
                    3f:a6:1a:c7:ca:8e:83:73:3b:b6:7e:50:ff:b6:f1:
                    73:a4:03:18:a2:10:59:d1:53:e2:99:30:76:b3:8f:
                    20:0f:0b:aa:f4:fb:6e:59:e1:d0:df:69:43:a1:7f:
                    b3:ac:e1:8f:49:08:ee:6d:13:a0:c3:bb:21:ee:9e:
                    e4:f6:60:df:36:98:29:74:ba:a6:3f:ed:a9:3f:c1:
                    8b:a0:e1:be:ba:23:cc:46:4d:8e:c8:d4:10:60:ba:
                    4a:bd:d6:ab:7b:a3:cb:c9:44:d7:41:77:eb:18:d9:
                    af:0a:fa:bf:d9:40:ca:d5:78:c9:a8:41:1b:35:ea:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:16:F9:84:CC:C4:1F:AD:15:BD:A2:55:17:8D:66:96:D7:41:85:AE
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35392e302f32342d3234203d3e203632363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:36:54:22:f9:de:5b:23:89:52:dc:99:70:ff:83:99:2b:37:
         5e:13:14:66:4e:b5:b0:b4:46:1f:c5:2f:1c:69:da:e0:99:6f:
         20:28:ff:88:4b:b7:ba:22:7d:e6:9d:d6:aa:92:60:18:6d:a1:
         ea:e5:20:8c:16:72:36:96:39:bc:2b:0b:2f:37:e5:7e:70:e5:
         c9:02:dd:75:8e:b3:a4:a6:fc:71:55:a9:0d:be:30:70:1c:08:
         c1:f0:52:49:f2:f1:c0:29:3e:94:76:c7:32:41:b3:82:32:24:
         d6:06:3f:bc:40:a1:f9:0f:cd:ab:41:b0:c2:2a:81:f3:68:26:
         27:23:22:f7:00:1e:af:dc:1f:59:89:a2:e3:02:6d:73:69:8e:
         80:34:44:56:fa:1a:47:8a:e6:a2:e5:a7:a3:97:81:fd:63:41:
         85:33:cf:89:68:3c:c8:8b:12:7c:ea:06:4b:0e:c1:16:f1:86:
         b5:7e:8e:c9:80:5d:3c:f7:3d:a3:3d:8d:b3:eb:79:f4:8d:d3:
         0b:b1:64:16:84:81:4f:be:fa:f0:7f:f5:1b:82:ed:fb:1e:f4:
         bc:fc:10:7a:2e:70:07:dc:26:c5:71:f0:ff:0a:3c:30:6f:b4:
         50:f5:79:52:ca:3e:03:a6:64:61:53:3a:3e:ad:9a:d4:aa:25:
         df:b5:da:92
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUdhMtyrzxK32kIe2SCGysi5i24fwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUwNDE3MDQzMzU2WhcNMjYwNDE2MDQzODU2
WjAzMTEwLwYDVQQDEyhBRjE2Rjk4NENDQzQxRkFEMTVCREEyNTUxNzhENjY5NkQ3
NDE4NUFFMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1h7w7ueSwV7W
ENZ4p0ygMs0BYI/nAaqGfE9N1qNelnpqXcEJynaZbiZBajNxjjS64AukThefIU6+
OZkOAenadCBmPyTPLCsVK/lorhGoTiJkIyoDkt34AN/1R7jBL2lAw4S9FOf28BYX
gz8+jkBSspc5fUjMYtUz7VcgJq/+aSOOVGwZyiQ/phrHyo6Dczu2flD/tvFzpAMY
ohBZ0VPimTB2s48gDwuq9PtuWeHQ32lDoX+zrOGPSQjubROgw7sh7p7k9mDfNpgp
dLqmP+2pP8GLoOG+uiPMRk2OyNQQYLpKvdare6PLyUTXQXfrGNmvCvq/2UDK1XjJ
qEEbNepdbwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFK8W+YTMxB+tFb2iVReNZpbX
QYWuMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0
MjhlYTliNzI2Ny8wLzMxMzkzODJlMzEzNzM3MmUzNTM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMjM2MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMaxOzANBgkqhkiG9w0BAQsF
AAOCAQEArTZUIvneWyOJUtyZcP+DmSs3XhMUZk61sLRGH8UvHGna4JlvICj/iEu3
uiJ95p3WqpJgGG2h6uUgjBZyNpY5vCsLLzflfnDlyQLddY6zpKb8cVWpDb4wcBwI
wfBSSfLxwCk+lHbHMkGzgjIk1gY/vECh+Q/Nq0GwwiqB82gmJyMi9wAer9wfWYmi
4wJtc2mOgDREVvoaR4rmouWno5eB/WNBhTPPiWg8yIsSfOoGSw7BFvGGtX6OyYBd
PPc9oz2Ns+t59I3TC7FkFoSBT7768H/1G4Lt+x70vPwQei5wB9wmxXHw/wo8MG+0
UPV5Uso+A6ZkYVM6Pq2a1Kol37Xakg==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:55:40 2025 by rpki-client