Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36322e302f32342d3234203d3e203231383539.roa
File:                     3139382e3137372e36322e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          E6rv4VcKfPO+IOXOF1NpNPiOf4bsX3zOBT9OIjC6TbE=
Subject key identifier:   EC:A3:A2:F1:4E:EE:33:ED:D3:62:A8:9B:E3:3A:AD:8A:BE:AF:11:7C
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       526A28550DEB6721B49542129E909C18025B5825
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36322e302f32342d3234203d3e203231383539.roa
Signing time:             Thu 17 Apr 2025 15:25:31 +0000
ROA not before:           Thu 17 Apr 2025 15:20:31 +0000
ROA not after:            Thu 16 Apr 2026 15:25:31 +0000
asID:                     21859
IP address blocks:        198.177.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Apr 2025 21:35:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:6a:28:55:0d:eb:67:21:b4:95:42:12:9e:90:9c:18:02:5b:58:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 17 15:20:31 2025 GMT
            Not After : Apr 16 15:25:31 2026 GMT
        Subject: CN=ECA3A2F14EEE33EDD362A89BE33AAD8ABEAF117C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9d:0d:0d:2d:ba:03:53:91:79:cc:7a:70:08:
                    72:5d:74:8f:2a:1c:82:f9:c6:2f:9f:03:5b:35:d1:
                    60:2f:7f:31:d5:f8:85:fb:0c:11:cb:5d:68:52:f7:
                    b4:4e:f5:d9:48:1f:2b:a4:40:a6:95:01:3e:40:93:
                    b5:5a:d0:5b:d9:b9:54:05:ab:3b:e1:0b:34:4a:bb:
                    85:65:50:cf:56:36:7b:e9:1e:ab:80:8c:00:68:0d:
                    59:f8:f4:4d:2b:d7:72:00:6f:bb:c5:ec:8c:d1:78:
                    ed:ab:1a:f3:48:eb:9d:4f:3c:42:59:88:6e:37:8a:
                    33:38:ca:6b:46:80:c8:9d:c3:9d:66:20:a3:49:46:
                    ce:10:fa:a1:66:f6:09:12:24:63:30:49:41:cd:78:
                    d6:7d:d3:3c:58:46:bd:37:a7:c3:a1:61:39:1a:69:
                    33:d6:96:3a:98:25:a2:7a:e8:45:ce:8c:36:85:c1:
                    37:13:69:0d:1a:32:e5:75:db:62:77:26:1a:8e:af:
                    13:57:6e:d7:c2:4a:42:d3:f9:67:44:ed:b7:94:dc:
                    c4:5c:84:ca:84:14:1b:bf:74:9a:e6:85:1b:2b:a1:
                    88:d3:eb:6e:4b:88:28:19:4a:09:1e:b4:1f:5c:73:
                    8b:ac:4e:43:f3:d0:11:fb:72:04:a2:cb:84:1d:c7:
                    5a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:A3:A2:F1:4E:EE:33:ED:D3:62:A8:9B:E3:3A:AD:8A:BE:AF:11:7C
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36322e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:46:c3:67:da:ea:5d:08:82:92:b9:d3:1a:ff:a6:0e:2c:bb:
         41:7b:3b:de:ad:de:4f:cf:d3:7a:b2:ff:f9:a3:c7:24:74:65:
         db:2e:4d:98:80:30:62:63:43:ed:40:55:22:a1:a1:dc:d7:91:
         d8:d8:6b:6b:8a:06:b8:50:3e:2b:44:f3:2e:f2:43:cf:78:a4:
         72:01:5f:e9:3a:35:0d:7f:47:de:3f:ba:88:62:0c:26:d1:89:
         f6:75:c3:6c:37:53:f2:da:54:47:0b:ae:f3:b4:b0:f8:c7:b6:
         d6:84:18:97:c4:bf:d9:4c:91:38:28:96:30:d8:3b:b0:3b:9c:
         a7:83:11:f7:1d:4d:3c:2e:5b:7f:7e:88:ce:00:ec:45:f8:3c:
         da:1c:76:96:c3:60:ea:c7:31:ea:6f:13:e8:f5:08:59:cb:a3:
         96:7b:6d:6d:ff:d1:24:f3:cc:26:8a:19:21:f5:91:ca:ea:6c:
         55:b8:02:9a:17:aa:0a:e7:57:13:92:76:b3:99:77:15:2a:14:
         52:5b:a4:5e:63:27:c7:07:a2:f7:4d:19:1f:d7:04:14:00:54:
         c6:df:8a:1f:dc:1a:0b:99:c9:77:ef:f8:3d:b8:33:cb:5a:87:
         b4:8e:44:f5:8e:ba:9b:4d:02:b4:d5:87:2a:76:2b:04:5a:d1:
         08:a9:3a:ee
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUUmooVQ3rZyG0lUISnpCcGAJbWCUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUwNDE3MTUyMDMxWhcNMjYwNDE2MTUyNTMx
WjAzMTEwLwYDVQQDEyhFQ0EzQTJGMTRFRUUzM0VERDM2MkE4OUJFMzNBQUQ4QUJF
QUYxMTdDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ0NDS26A1OR
ecx6cAhyXXSPKhyC+cYvnwNbNdFgL38x1fiF+wwRy11oUve0TvXZSB8rpECmlQE+
QJO1WtBb2blUBas74Qs0SruFZVDPVjZ76R6rgIwAaA1Z+PRNK9dyAG+7xeyM0Xjt
qxrzSOudTzxCWYhuN4ozOMprRoDIncOdZiCjSUbOEPqhZvYJEiRjMElBzXjWfdM8
WEa9N6fDoWE5Gmkz1pY6mCWieuhFzow2hcE3E2kNGjLlddtidyYajq8TV27XwkpC
0/lnRO23lNzEXITKhBQbv3Sa5oUbK6GI0+tuS4goGUoJHrQfXHOLrE5D89AR+3IE
osuEHcdaywIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFOyjovFO7jPt02Kom+M6rYq+
rxF8MB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0
MjhlYTliNzI2Ny8wLzMxMzkzODJlMzEzNzM3MmUzNjMyMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzIzMTM4MzUzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMaxPjANBgkqhkiG9w0BAQsF
AAOCAQEAbEbDZ9rqXQiCkrnTGv+mDiy7QXs73q3eT8/TerL/+aPHJHRl2y5NmIAw
YmND7UBVIqGh3NeR2Nhra4oGuFA+K0TzLvJDz3ikcgFf6To1DX9H3j+6iGIMJtGJ
9nXDbDdT8tpURwuu87Sw+Me21oQYl8S/2UyROCiWMNg7sDucp4MR9x1NPC5bf36I
zgDsRfg82hx2lsNg6scx6m8T6PUIWcujlnttbf/RJPPMJooZIfWRyupsVbgCmheq
CudXE5J2s5l3FSoUUlukXmMnxwei900ZH9cEFABUxt+KH9waC5nJd+/4Pbgzy1qH
tI5E9Y66m00CtNWHKnYrBFrRCKk67g==
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:55:54 2025 by rpki-client