Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          GpEKa/GNHRu3+pbpB4wPUri06xjyMDCa7+eXHRXl7YY=
Subject key identifier:   86:1C:B5:19:E9:F1:BC:32:E4:81:89:77:5E:C0:59:27:A8:64:AD:B2
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       0E750A2BAF78F6A8E75E4A257D0FC06A0971CF7D
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa
Signing time:             Wed 16 Jul 2025 11:29:44 +0000
ROA not before:           Wed 16 Jul 2025 11:24:44 +0000
ROA not after:            Wed 15 Jul 2026 11:29:44 +0000
asID:                     397373
IP address blocks:        198.37.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 18:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:75:0a:2b:af:78:f6:a8:e7:5e:4a:25:7d:0f:c0:6a:09:71:cf:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jul 16 11:24:44 2025 GMT
            Not After : Jul 15 11:29:44 2026 GMT
        Subject: CN=861CB519E9F1BC32E48189775EC05927A864ADB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:bb:c1:46:2c:95:13:b0:7d:ac:ed:83:15:24:
                    3d:3c:f8:77:6f:9c:58:f9:5f:4f:99:7d:18:da:b7:
                    cd:ba:59:5f:83:29:f6:14:a7:bd:cf:75:5e:13:15:
                    48:5c:a1:3e:65:89:d0:7d:f6:b2:18:12:9c:0c:69:
                    d7:c0:c4:09:31:5d:05:58:2a:ad:82:ef:30:6f:1d:
                    3b:39:64:7f:cb:f1:eb:04:e2:78:80:bf:e4:e0:b7:
                    3c:c8:ff:2a:2d:66:ec:1c:8a:d6:33:63:37:c1:a1:
                    8f:bf:26:da:68:38:6a:60:23:0a:47:b0:b4:94:65:
                    2d:18:ec:66:c0:eb:88:5d:51:ca:85:d1:e6:85:3a:
                    08:3c:ae:73:51:78:44:f6:7c:72:e4:52:77:f1:ce:
                    97:40:95:0b:71:82:e5:d3:2b:79:44:07:88:8e:3e:
                    dd:ff:c3:49:bd:05:b3:4f:20:bd:4d:19:23:1d:a0:
                    b2:1e:85:4c:97:b8:1f:dc:dd:ad:74:86:f6:12:d4:
                    b8:e7:58:e3:ad:fb:ac:2b:5c:27:dd:e2:41:75:6e:
                    49:74:32:a1:c8:cb:d1:bb:5b:8f:40:6d:77:4d:e1:
                    eb:5e:49:48:be:9b:a6:6b:d9:28:d0:08:aa:e8:6a:
                    f9:1b:02:07:4a:90:b7:52:87:cd:15:b6:19:f3:31:
                    a6:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1C:B5:19:E9:F1:BC:32:E4:81:89:77:5E:C0:59:27:A8:64:AD:B2
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:72:c6:d4:ff:b2:b4:50:f1:67:36:d4:46:81:a9:c4:f2:97:
         b7:2d:c1:74:51:cb:78:b5:0f:8b:07:b8:a4:f7:48:a6:13:6c:
         b4:4b:d1:2e:e0:be:78:e7:ed:98:1d:97:6a:b7:84:8f:0c:f8:
         3e:11:84:00:04:34:0c:0f:7e:be:11:b6:b3:e2:e1:c3:8d:fc:
         93:99:65:8d:6c:94:b4:7d:ed:d0:80:0b:04:32:13:c7:67:74:
         7c:6b:49:28:0c:21:32:ee:09:69:88:48:8e:5e:ff:32:61:cf:
         a3:82:77:80:e4:1a:7b:5e:b0:43:a0:c0:43:13:f5:cb:90:12:
         b8:6d:dd:dc:12:6f:61:6f:dc:90:c5:b1:c5:e6:6c:db:63:db:
         a1:ba:da:fb:27:8e:1c:30:ee:1d:c6:62:2b:68:9c:fc:57:1a:
         43:1d:15:99:c9:8d:7c:07:4b:12:a9:7a:e4:bc:e4:dd:46:17:
         af:64:c5:fb:d4:d4:01:a9:a8:a8:05:2a:19:1d:b5:fa:c9:4c:
         66:33:90:24:ba:0d:05:82:94:5b:f5:cf:96:c0:3b:e6:26:f6:
         a1:0f:1c:ef:25:62:72:36:99:23:69:b5:71:cd:56:45:7a:a6:
         ad:50:eb:15:a1:57:a3:31:a6:a0:96:ab:54:de:4a:c3:93:5b:
         34:5c:18:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 01:54:21 2025 by rpki-client