Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e20383334.roa
File:                     3139382e3137372e36332e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          NKGwQUazx9L7x746yrPObjDF17K+0Mb1WYaTT+qr5j4=
Subject key identifier:   76:5E:48:13:CA:DE:76:54:CA:64:CB:D0:8A:E0:2D:A2:72:D5:68:F6
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       1FF0A553E2C48E6716F752847236B3B110452422
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e20383334.roa
Signing time:             Thu 31 Jul 2025 11:37:03 +0000
ROA not before:           Thu 31 Jul 2025 11:32:03 +0000
ROA not after:            Thu 30 Jul 2026 11:37:03 +0000
asID:                     834
IP address blocks:        198.177.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 06:16:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:f0:a5:53:e2:c4:8e:67:16:f7:52:84:72:36:b3:b1:10:45:24:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jul 31 11:32:03 2025 GMT
            Not After : Jul 30 11:37:03 2026 GMT
        Subject: CN=765E4813CADE7654CA64CBD08AE02DA272D568F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:93:c6:e5:f0:67:25:a6:53:26:69:97:c0:f7:
                    42:c7:51:7f:01:5e:3f:89:00:8f:ea:43:c5:ca:a9:
                    c0:44:0c:92:d0:9d:eb:ff:34:7b:64:c7:b4:71:6a:
                    f5:2c:19:6d:aa:04:dd:34:2b:ff:1a:f0:17:3c:45:
                    15:63:6d:04:1f:b2:5f:b6:33:7b:6d:da:44:c1:71:
                    7a:d4:41:86:a2:64:0c:7b:26:bf:e7:0e:ac:67:e7:
                    cf:9d:d3:5e:87:58:3a:70:49:55:88:f0:62:e3:0a:
                    a8:74:af:68:77:c1:2c:e1:2a:d3:4c:73:22:33:2c:
                    d6:2a:e4:4a:58:57:e0:71:f1:98:e0:eb:bc:26:54:
                    eb:a5:b6:37:bf:bb:8b:45:8b:10:3f:66:43:1d:b1:
                    0f:d2:0d:50:9f:50:f8:51:c4:8e:32:31:96:e3:33:
                    80:aa:2c:04:13:3c:29:6c:a3:8c:f4:ca:84:8f:67:
                    bd:68:95:8d:e2:f4:3f:b5:34:b7:37:38:fc:8a:7b:
                    b6:35:1f:82:a4:92:7c:d0:f3:8e:e5:8e:bb:0f:c9:
                    0a:0f:da:95:b6:65:7f:ff:74:78:76:2b:cc:e0:6b:
                    9a:19:20:fb:89:29:ca:7c:0a:c2:02:0a:d9:14:3c:
                    cd:2d:cd:7d:1f:9e:a0:d6:e5:21:f9:42:a0:57:98:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:5E:48:13:CA:DE:76:54:CA:64:CB:D0:8A:E0:2D:A2:72:D5:68:F6
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:94:0d:51:1c:d4:38:8a:cf:f6:9b:d5:4d:db:b9:b9:0e:9e:
         24:0e:fc:13:af:e3:7c:1c:9b:51:ff:05:d5:7f:28:f7:02:eb:
         7e:8a:e6:6e:3f:9b:f9:a3:66:6c:74:c2:4e:69:2b:d1:d1:ec:
         d3:a8:08:9d:55:5c:85:fe:63:ab:fe:a4:2f:ec:cc:2b:d6:f3:
         f5:e3:8f:b1:0a:89:72:bf:9c:47:78:d4:69:da:2b:cf:ef:61:
         b9:21:cb:9d:f4:7a:1d:06:3d:fa:9e:66:9c:89:04:f0:d0:df:
         a5:75:5a:59:03:cc:60:65:a7:30:2a:8d:0c:a9:b2:5c:a1:a8:
         14:12:4a:19:cf:92:d3:8f:84:15:f6:12:76:5e:67:29:72:34:
         cc:1e:19:67:66:e6:ea:92:a3:39:b6:d1:c6:e2:a6:7c:0e:41:
         42:f4:b1:50:a0:20:52:f8:56:47:68:06:ce:1c:48:4a:67:76:
         d7:d5:33:5a:e4:ec:bd:c1:17:f7:2e:06:2b:1c:18:7f:41:de:
         15:93:7c:e2:02:a8:31:d9:dc:cd:de:f1:15:73:b0:1f:7a:a2:
         c7:1d:3e:fb:a3:52:0e:40:75:7b:fe:ff:e8:e8:8a:7e:85:1c:
         37:42:2a:be:f4:92:94:1c:87:72:f7:47:f7:8c:3a:30:97:25:
         f3:fa:39:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 07:51:11 2025 by rpki-client