Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36312e302f32342d3234203d3e203632363130.roa
File:                     3139382e3137372e36312e302f32342d3234203d3e203632363130.roa (raw, json)
Hash identifier:          LRzxPducVGW1CCDou2mPifR9OcmjbbVcrJSWepn4lz4=
Subject key identifier:   C0:44:0D:0D:46:77:77:42:DE:99:E4:2F:0C:9B:C5:36:98:A6:25:63
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       5DBE9C9944C4111CFE949016490C11CA19A5AF07
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36312e302f32342d3234203d3e203632363130.roa
Signing time:             Thu 17 Apr 2025 04:38:56 +0000
ROA not before:           Thu 17 Apr 2025 04:33:56 +0000
ROA not after:            Thu 16 Apr 2026 04:38:56 +0000
asID:                     62610
IP address blocks:        198.177.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:be:9c:99:44:c4:11:1c:fe:94:90:16:49:0c:11:ca:19:a5:af:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 17 04:33:56 2025 GMT
            Not After : Apr 16 04:38:56 2026 GMT
        Subject: CN=C0440D0D46777742DE99E42F0C9BC53698A62563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bd:aa:d7:6c:d1:ed:4d:a3:18:f5:0a:f6:21:
                    85:fd:7e:a6:94:e5:d0:f2:19:7e:a7:d7:2a:3a:8e:
                    c2:b6:88:21:f2:4a:b8:7a:cb:56:ed:93:3f:c0:bc:
                    4c:21:ef:4f:7f:74:0f:85:21:de:ea:5d:81:40:ca:
                    66:9a:37:be:44:aa:5e:5e:77:76:14:bc:9f:24:f3:
                    54:03:96:08:93:b4:da:e8:bb:10:46:e3:de:02:60:
                    83:c5:da:f6:34:6f:c2:e3:f6:cc:eb:6a:1d:d8:57:
                    b1:aa:6b:4a:b9:2e:d3:61:29:02:16:b6:d6:f6:54:
                    c0:b5:71:97:7c:5c:17:c3:e1:98:7a:c8:c9:94:13:
                    84:34:d2:43:9a:96:90:bb:30:20:0f:78:38:65:77:
                    55:78:a6:c7:62:0b:19:ef:44:6b:8c:72:0a:d4:2d:
                    11:91:30:6a:bf:18:82:81:73:65:0e:06:6e:2a:57:
                    04:4f:6c:b4:5c:d4:3e:26:3a:6d:6b:9d:10:8d:63:
                    42:a6:ee:69:0f:17:e6:dc:9d:0c:36:74:a6:49:c4:
                    3b:47:09:df:94:dc:a5:ea:38:17:e8:a3:e9:f4:c7:
                    31:3e:cb:a9:5e:b8:d4:74:e5:9c:d6:1d:51:4a:23:
                    16:a3:6b:e3:2b:e3:31:32:d5:a4:bf:8e:30:46:4d:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:44:0D:0D:46:77:77:42:DE:99:E4:2F:0C:9B:C5:36:98:A6:25:63
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36312e302f32342d3234203d3e203632363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c0:4b:c3:2d:52:e0:52:4e:4d:f3:9a:40:62:21:3d:b2:a1:
         d4:d2:9f:ed:87:63:7f:ae:60:24:d7:5f:9b:56:9f:f0:f1:16:
         29:fe:b0:e3:7b:9e:6f:29:70:53:dd:8c:d3:56:49:ed:e1:9e:
         f0:b8:af:6b:7f:18:a0:e6:a0:02:98:09:0b:bc:c5:aa:14:4b:
         87:01:52:8e:7e:83:2d:a7:b7:c8:46:7c:cd:77:2a:ba:33:ca:
         2f:28:42:a0:ef:c8:4a:35:44:6f:bc:66:0c:3a:be:b5:21:ce:
         6a:5d:05:42:02:98:e7:37:d8:6f:80:a3:7e:77:1e:0f:ed:c2:
         b7:f2:f3:0b:38:01:84:25:3c:d9:37:bd:6e:11:38:a4:b3:d8:
         4f:95:28:e7:86:7f:d5:0a:7d:83:c7:c7:5a:1c:14:58:48:aa:
         3a:6f:c9:c3:55:36:49:0a:00:6a:1b:d1:d7:66:17:17:9f:42:
         b5:3c:5e:36:35:0f:fc:c7:bb:37:4e:58:55:1a:fc:f3:a4:19:
         8f:b1:e9:e6:2f:25:53:46:d4:c8:d5:dc:78:43:b7:67:7a:c3:
         84:f7:13:cd:7b:20:01:bf:5e:a2:5d:5a:c3:a8:dc:cb:5b:0c:
         81:18:f3:2c:69:2d:2e:4c:76:1e:1f:bb:40:b2:e0:90:57:8c:
         f7:29:ec:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:08:39 2025 by rpki-client