Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203134393335.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e203134393335.roa (raw, json)
Hash identifier:          9kR2j0vDcGAmIthd4cbTsoggt3EcSRWZlxvzmfGXzyg=
Subject key identifier:   91:28:2F:70:E4:51:62:D9:C2:E5:80:C7:4D:FF:31:3E:5B:E3:70:73
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       210FC7292E3FD3B0A6F50CA61E16ECACD48EF404
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203134393335.roa
Signing time:             Wed 16 Jul 2025 14:29:44 +0000
ROA not before:           Wed 16 Jul 2025 14:24:44 +0000
ROA not after:            Wed 15 Jul 2026 14:29:44 +0000
asID:                     14935
IP address blocks:        198.37.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 18:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:0f:c7:29:2e:3f:d3:b0:a6:f5:0c:a6:1e:16:ec:ac:d4:8e:f4:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jul 16 14:24:44 2025 GMT
            Not After : Jul 15 14:29:44 2026 GMT
        Subject: CN=91282F70E45162D9C2E580C74DFF313E5BE37073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:8f:62:53:f5:1a:30:12:ab:91:50:9f:2f:32:
                    22:a3:a0:52:59:83:1f:98:3f:79:58:0e:37:13:a3:
                    67:0a:cf:89:63:bb:ae:39:53:19:ac:7f:1e:3d:46:
                    53:d5:0f:3d:ff:7d:90:10:e0:60:61:e8:b9:70:84:
                    21:6d:6c:00:df:fb:6b:11:2e:e0:52:7f:ee:d6:3a:
                    11:82:f8:24:0f:05:64:e3:c8:14:c1:60:6e:35:c3:
                    af:b9:00:09:92:c4:35:a7:77:60:64:17:3e:4f:bb:
                    e3:41:36:de:63:ac:bd:16:bf:e8:18:43:5a:e3:bc:
                    c0:d0:f6:b5:8a:35:5e:16:34:24:a4:76:f8:29:b8:
                    6f:ff:5a:47:5a:67:77:8d:f6:4a:70:8b:f4:2e:d7:
                    19:b7:b7:d7:a9:15:70:8a:6b:d9:29:25:ab:90:84:
                    ef:23:6d:90:8d:b1:11:4a:da:f0:c6:9a:28:a2:9e:
                    32:73:0f:37:42:8e:ca:d6:88:cf:8d:99:3b:ad:38:
                    7c:46:7b:4d:cd:71:82:b4:22:68:86:5b:ca:46:12:
                    46:81:e3:63:99:ff:cc:35:ae:a3:94:ec:f8:b5:1b:
                    44:23:b1:db:aa:68:63:0d:e2:96:08:b5:d6:34:a4:
                    12:dc:b7:84:bf:02:40:3d:60:cb:43:8c:42:16:f4:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:28:2F:70:E4:51:62:D9:C2:E5:80:C7:4D:FF:31:3E:5B:E3:70:73
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203134393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         93:2d:f9:39:46:99:68:c6:66:76:35:6e:96:e3:51:fd:64:b8:
         38:f4:9b:51:cd:e1:a6:e5:88:28:bf:cc:b8:b4:23:07:90:4b:
         5c:02:29:d3:23:c1:27:58:91:68:db:47:2a:72:5c:8f:ba:1c:
         6d:28:f7:e6:2b:07:61:a8:44:e8:79:b7:7f:81:50:c2:eb:13:
         c0:c9:a9:0a:01:ff:98:36:eb:10:3e:2c:22:5d:a7:53:ed:d6:
         f1:ee:4a:aa:f0:77:6e:8e:45:3b:00:50:af:71:bb:cf:59:00:
         d8:76:53:75:15:5d:7a:f6:e7:6b:e6:98:44:ee:78:8e:fa:b7:
         e7:b2:cd:2b:33:4b:e2:a8:e1:b3:15:c0:01:a1:5b:01:f9:21:
         0b:de:fc:e7:d5:da:54:c0:cf:a4:a7:2f:a1:72:4c:28:c3:cf:
         e2:aa:d1:c0:35:77:a8:34:5f:b7:0a:9c:5c:5a:a6:10:1a:0e:
         4d:83:42:d4:fe:fc:e7:24:de:56:b4:76:31:ec:5d:19:b1:53:
         73:59:52:28:53:0b:6c:5c:fd:1f:9f:1b:dc:a2:9f:fb:19:8e:
         e0:f1:88:a0:cd:79:b0:af:58:69:5e:37:eb:e9:01:62:de:80:
         ff:89:ca:3d:15:73:80:41:e3:f8:c7:a2:d0:9e:5c:d4:e0:df:
         da:8b:b6:ea
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUIQ/HKS4/07Cm9QymHhbsrNSO9AQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwNzE2MTQyNDQ0WhcNMjYwNzE1MTQyOTQ0
WjAzMTEwLwYDVQQDEyg5MTI4MkY3MEU0NTE2MkQ5QzJFNTgwQzc0REZGMzEzRTVC
RTM3MDczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA849iU/UaMBKr
kVCfLzIio6BSWYMfmD95WA43E6NnCs+JY7uuOVMZrH8ePUZT1Q89/32QEOBgYei5
cIQhbWwA3/trES7gUn/u1joRgvgkDwVk48gUwWBuNcOvuQAJksQ1p3dgZBc+T7vj
QTbeY6y9Fr/oGENa47zA0Pa1ijVeFjQkpHb4Kbhv/1pHWmd3jfZKcIv0LtcZt7fX
qRVwimvZKSWrkITvI22QjbERStrwxpooop4ycw83Qo7K1ojPjZk7rTh8RntNzXGC
tCJohlvKRhJGgeNjmf/MNa6jlOz4tRtEI7HbqmhjDeKWCLXWNKQS3LeEvwJAPWDL
Q4xCFvQPrQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFJEoL3DkUWLZwuWAx03/MT5b
43BzMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzEzMTMyMmUzMDJmMzIzMDJkMzIz
NDIwM2QzZTIwMzEzNDM5MzMzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMYlcDANBgkqhkiG9w0BAQsF
AAOCAQEAky35OUaZaMZmdjVuluNR/WS4OPSbUc3hpuWIKL/MuLQjB5BLXAIp0yPB
J1iRaNtHKnJcj7ocbSj35isHYahE6Hm3f4FQwusTwMmpCgH/mDbrED4sIl2nU+3W
8e5KqvB3bo5FOwBQr3G7z1kA2HZTdRVdevbna+aYRO54jvq357LNKzNL4qjhsxXA
AaFbAfkhC97859XaVMDPpKcvoXJMKMPP4qrRwDV3qDRftwqcXFqmEBoOTYNC1P78
5yTeVrR2MexdGbFTc1lSKFMLbFz9H58b3KKf+xmO4PGIoM15sK9YaV436+kBYt6A
/4nKPRVzgEHj+Mei0J5c1ODf2ou26g==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:01:37 2025 by rpki-client