Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36342e302f32342d3234203d3e203134333135.roa
File:                     3139392e3233312e36342e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          mNwAYRPgPUBjkpu/TkSsKqQISO/dMk47V7DV62ZmEOc=
Subject key identifier:   F2:AB:6C:DF:03:0F:72:E0:5F:63:A4:19:F4:C1:7E:3B:54:58:3D:82
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       18FAADA02C7BF53CD4B3BC693A1CA2F72FA7C970
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36342e302f32342d3234203d3e203134333135.roa
Signing time:             Thu 17 Apr 2025 10:27:10 +0000
ROA not before:           Thu 17 Apr 2025 10:22:10 +0000
ROA not after:            Thu 16 Apr 2026 10:27:10 +0000
asID:                     14315
IP address blocks:        199.231.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:29:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:fa:ad:a0:2c:7b:f5:3c:d4:b3:bc:69:3a:1c:a2:f7:2f:a7:c9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 17 10:22:10 2025 GMT
            Not After : Apr 16 10:27:10 2026 GMT
        Subject: CN=F2AB6CDF030F72E05F63A419F4C17E3B54583D82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:39:13:84:47:8e:fa:f6:01:a4:aa:b7:22:
                    e9:96:8c:de:ba:4b:60:e7:52:b3:74:4a:82:8b:14:
                    b5:65:5d:63:8d:7a:4b:a5:24:fd:2f:58:f2:a3:97:
                    06:89:15:2e:ad:59:bd:0c:b2:cc:73:24:92:dc:6b:
                    d9:07:5e:05:f7:a1:35:90:57:c2:42:d7:ed:0b:e7:
                    fb:b4:bf:84:eb:34:61:98:79:b8:77:ae:0f:d9:ad:
                    92:67:66:1a:74:5d:16:b4:3a:74:22:06:e2:03:ff:
                    27:b4:00:b0:b3:e6:7b:fd:2a:78:8f:45:a7:1f:b3:
                    78:e3:dc:c4:4e:08:cd:70:bb:1f:05:f4:9b:f5:f2:
                    c9:b3:04:b1:c1:ac:73:b0:65:05:bd:ac:b0:ae:11:
                    65:1c:27:9d:fd:cb:1e:82:df:5b:c3:5b:d7:d6:dd:
                    cd:6d:ca:1c:78:72:c7:b1:b9:26:ce:21:17:87:a9:
                    25:49:36:a9:93:94:12:c5:ab:91:bf:5f:e7:f1:d1:
                    cc:2c:92:25:b8:40:07:e0:c7:a6:32:2c:6d:fa:69:
                    d0:05:2d:90:ec:80:d0:c1:e2:2a:36:be:32:bd:cc:
                    00:55:8c:fb:1a:e3:77:a4:23:0f:45:e2:16:c7:65:
                    48:8c:9c:c1:df:04:95:13:0a:84:b6:46:01:1e:b0:
                    fc:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:AB:6C:DF:03:0F:72:E0:5F:63:A4:19:F4:C1:7E:3B:54:58:3D:82
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36342e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:af:d3:83:54:b2:0c:aa:dc:ee:d0:63:43:18:76:62:62:9c:
         c7:15:81:f7:33:ec:60:64:7a:b0:76:da:35:07:1c:4a:cd:83:
         e9:49:95:6b:49:ea:90:2e:fc:10:c0:49:ab:fa:cd:1e:cf:2d:
         04:ed:f8:34:60:76:aa:c4:2a:d0:cd:3a:eb:b7:de:38:36:5e:
         c4:71:fc:f3:28:92:f0:24:05:74:29:13:35:38:7d:61:df:cc:
         cf:0e:02:7e:7a:77:f8:11:0b:9c:9f:bb:c2:9d:eb:4a:31:46:
         8a:b5:3a:6d:05:17:a3:37:fc:13:ea:37:23:fa:61:be:7f:94:
         89:92:32:d3:16:e6:97:7a:95:2d:d5:15:4d:e1:a4:4b:bb:4f:
         8d:61:83:48:f6:f3:ca:c9:d9:92:65:84:04:c1:c4:ac:81:16:
         83:8c:3a:26:24:05:d4:3b:36:42:65:3f:40:a6:ce:70:f9:c4:
         86:13:00:23:56:65:b2:78:9a:3f:d7:cd:a5:c1:e2:12:0e:18:
         a0:1d:57:63:dd:3c:3e:2d:a6:33:ec:4d:de:2c:40:a7:62:ce:
         b0:0e:7f:47:c6:fe:33:b9:4c:a1:62:aa:f8:57:22:6f:7d:42:
         e4:6b:58:0a:e9:4a:a1:0a:af:84:a1:39:3a:60:74:2e:89:1b:
         c1:d2:76:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:13:47 2025 by rpki-client