Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa
File:                     3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          EgMMeLOK1kUgnKNfLHzfJ0XBPSaMWPM0k5o3U80T7L0=
Subject key identifier:   6E:DF:76:15:29:34:0C:A9:E1:09:A6:04:18:E6:C8:66:CE:CD:AC:60
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1B8C296DAC139061E7BD9EFA349A67419359088D
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa
Signing time:             Wed 10 Sep 2025 14:29:45 +0000
ROA not before:           Wed 10 Sep 2025 14:24:45 +0000
ROA not after:            Wed 09 Sep 2026 14:29:45 +0000
asID:                     398465
IP address blocks:        193.149.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 16:34:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:8c:29:6d:ac:13:90:61:e7:bd:9e:fa:34:9a:67:41:93:59:08:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep 10 14:24:45 2025 GMT
            Not After : Sep  9 14:29:45 2026 GMT
        Subject: CN=6EDF761529340CA9E109A60418E6C866CECDAC60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9f:64:3e:c9:09:90:e3:85:71:51:50:8f:11:
                    19:84:85:3e:a5:5a:eb:de:32:53:af:1d:a0:6e:df:
                    c4:a0:59:c2:ba:d5:80:e3:29:99:d6:d1:2d:df:bd:
                    78:1f:3e:12:e2:29:7e:9b:64:02:8d:da:d9:99:0b:
                    7f:ec:34:17:63:67:44:f5:00:7f:3c:9e:29:f1:4a:
                    7c:4a:73:62:44:9d:fb:03:de:bd:a3:4b:4b:72:78:
                    9f:39:f2:11:37:7f:56:40:3c:a5:af:90:72:17:bc:
                    f8:e8:bf:70:8c:70:f1:da:be:d2:39:e1:5b:5e:a3:
                    26:68:0d:4d:69:ab:5e:47:82:7c:a9:0a:52:9e:f2:
                    df:f9:0a:54:e9:1a:f8:2e:80:71:e1:0e:63:8d:9f:
                    a2:6e:9c:f1:b8:2d:3e:5e:aa:77:1f:b4:66:ba:1a:
                    0d:6e:6c:a4:40:9c:86:d3:e3:74:f7:5a:3c:15:c7:
                    20:13:02:93:d7:6a:80:f9:0f:00:8f:8a:50:d5:54:
                    07:d3:0c:eb:78:10:21:64:4d:12:17:77:89:be:48:
                    6b:ac:d5:98:73:c2:ac:65:9d:0f:5b:80:7d:be:17:
                    e8:43:02:e7:fb:03:f8:27:25:00:11:52:88:6b:f1:
                    b4:bd:3e:b2:f2:09:3b:1e:8c:41:92:97:cd:25:d5:
                    ea:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:DF:76:15:29:34:0C:A9:E1:09:A6:04:18:E6:C8:66:CE:CD:AC:60
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3134392e3232352e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.149.225.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:83:7a:6e:6d:26:1a:5e:90:e2:d9:6b:92:60:c2:50:58:cc:
         e7:f1:a8:8b:2f:73:ed:a0:21:b0:96:c8:6a:93:55:d1:77:d9:
         5a:73:ca:54:24:1a:f3:35:7b:49:4a:b6:bb:9a:10:77:e1:b5:
         32:48:5f:fc:58:77:fb:a4:14:4f:5d:e4:6d:12:21:c2:ba:2c:
         b3:a9:7c:6b:96:57:aa:00:25:a5:ee:fd:9f:d9:c1:4b:1e:09:
         61:33:fe:af:34:49:58:1e:a3:73:0f:31:a3:79:5d:a8:86:1c:
         68:54:00:5d:e5:28:cd:e9:f7:75:20:c9:20:8b:c4:45:78:cd:
         07:f8:b3:21:55:09:15:2f:ec:09:7c:64:3b:82:eb:50:cc:da:
         4e:f2:e2:cf:78:e7:48:73:0e:b0:45:3b:2b:c8:b2:4d:8a:98:
         00:97:de:f8:5a:62:b0:2c:55:af:b9:94:a7:0c:c8:0e:fa:cf:
         98:fa:01:0b:36:2f:44:ae:9e:75:a0:94:01:ee:c1:2b:b4:3d:
         dc:ca:bf:fc:a2:f7:88:64:34:53:0a:07:c3:5d:3b:cb:50:41:
         f9:3f:7f:c6:ba:09:f7:e4:a7:9b:3f:67:47:f6:e7:d0:0a:51:
         35:d3:27:6d:dc:11:e2:09:ab:24:99:3d:f5:b7:64:ac:15:15:
         15:6f:d4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 03:41:20 2025 by rpki-client