Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa
File:                     3139382e33372e3131322e302f32302d3234203d3e203533333430.roa (raw, json)
Hash identifier:          DLGiDESoF4BvKt+figJYn5eNRLooSHRL5Qls5B+5Ni8=
Subject key identifier:   A0:DC:9B:4A:C1:27:FB:58:7C:A3:00:50:53:FD:E0:26:C5:90:6B:7B
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       59F2C01C087F0DB63767AC0BDBA034919E8E7C7C
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa
Signing time:             Wed 16 Jul 2025 15:29:44 +0000
ROA not before:           Wed 16 Jul 2025 15:24:44 +0000
ROA not after:            Wed 15 Jul 2026 15:29:44 +0000
asID:                     53340
IP address blocks:        198.37.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 18:06:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f2:c0:1c:08:7f:0d:b6:37:67:ac:0b:db:a0:34:91:9e:8e:7c:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jul 16 15:24:44 2025 GMT
            Not After : Jul 15 15:29:44 2026 GMT
        Subject: CN=A0DC9B4AC127FB587CA3005053FDE026C5906B7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:72:a2:03:43:93:51:55:df:25:7d:46:e9:69:
                    4e:46:b8:4e:31:30:ae:25:a2:ad:3e:bf:b2:a3:a3:
                    15:9e:97:09:c8:d9:33:6a:39:4b:13:bf:79:74:42:
                    f2:ee:81:04:5e:1d:8b:d0:4c:d3:8e:26:57:01:84:
                    ec:59:86:ca:44:38:45:27:36:d1:b9:15:2b:ee:d9:
                    bd:74:d6:d5:b5:69:1f:29:3c:75:7e:c7:b1:2c:f7:
                    ed:22:bf:f2:a2:d6:38:a4:30:fd:ac:ec:a4:44:7a:
                    46:49:1a:73:e4:17:9a:05:d4:6f:7f:42:1f:2b:e4:
                    60:46:f4:d1:2f:9d:6f:2d:88:0e:73:3a:bb:e8:ec:
                    10:e2:dd:a1:d7:68:af:ad:01:37:c7:a9:52:74:ef:
                    7f:45:7a:53:91:c5:46:e8:45:df:4a:4d:0f:dd:2b:
                    96:eb:9c:43:56:ed:0d:5b:a7:ff:51:f9:cf:17:b0:
                    dd:9c:56:90:4f:29:a8:11:9d:33:96:8c:8e:e4:d9:
                    85:79:2e:5a:24:39:83:e1:84:05:02:7a:d4:6e:68:
                    da:29:c2:ea:72:f5:62:99:09:51:a0:b2:12:06:b0:
                    ae:b2:45:0e:20:8d:c5:bc:71:53:db:14:e8:c5:97:
                    b4:b5:e4:1d:ad:c3:1a:df:1d:85:46:b5:37:60:6c:
                    ab:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:DC:9B:4A:C1:27:FB:58:7C:A3:00:50:53:FD:E0:26:C5:90:6B:7B
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131322e302f32302d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         56:23:68:de:fb:0d:99:d4:7b:8d:49:70:6a:83:34:45:2b:c8:
         fa:07:f1:e2:37:19:43:42:b7:93:bc:1f:2c:c8:7a:ef:4c:7e:
         5f:37:bd:77:9e:54:a0:00:93:97:a4:92:2a:16:df:d7:a1:bb:
         19:69:87:9f:fa:6c:6a:cc:08:d3:83:32:0d:ef:61:46:52:93:
         10:aa:ad:af:9f:33:e5:38:81:4a:e9:b7:b6:7e:ac:01:72:67:
         d2:2b:19:1f:7b:63:52:4a:a7:4a:90:fe:15:82:e8:95:25:4f:
         69:f3:e2:1e:15:41:2c:03:92:be:61:da:7d:dd:7d:3d:a5:49:
         22:61:bd:12:07:39:ed:60:26:4f:58:aa:aa:57:f3:78:da:ff:
         c0:cf:c1:8c:c9:7f:bd:03:a5:8f:a8:29:ce:f9:f0:a5:cf:e2:
         ee:46:2f:ac:6e:72:d2:fc:f6:54:2f:43:09:99:19:e9:4f:61:
         f7:ad:07:17:98:f1:7d:2f:f3:27:03:fb:16:c6:49:e6:f0:cf:
         0e:ab:14:ef:37:90:51:aa:41:4b:6f:2d:f8:79:a3:90:65:58:
         74:17:94:07:52:5b:7b:14:58:ca:1d:4c:d7:90:59:34:b2:52:
         11:06:9f:13:1d:2b:23:44:b1:26:85:2d:91:e6:90:83:ba:de:
         59:1b:3e:db
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUWfLAHAh/DbY3Z6wL26A0kZ6OfHwwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwNzE2MTUyNDQ0WhcNMjYwNzE1MTUyOTQ0
WjAzMTEwLwYDVQQDEyhBMERDOUI0QUMxMjdGQjU4N0NBMzAwNTA1M0ZERTAyNkM1
OTA2QjdCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHKiA0OTUVXf
JX1G6WlORrhOMTCuJaKtPr+yo6MVnpcJyNkzajlLE795dELy7oEEXh2L0EzTjiZX
AYTsWYbKRDhFJzbRuRUr7tm9dNbVtWkfKTx1fsexLPftIr/yotY4pDD9rOykRHpG
SRpz5BeaBdRvf0IfK+RgRvTRL51vLYgOczq76OwQ4t2h12ivrQE3x6lSdO9/RXpT
kcVG6EXfSk0P3SuW65xDVu0NW6f/UfnPF7DdnFaQTymoEZ0zloyO5NmFeS5aJDmD
4YQFAnrUbmjaKcLqcvVimQlRoLISBrCuskUOII3FvHFT2xToxZe0teQdrcMa3x2F
RrU3YGyrJwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFKDcm0rBJ/tYfKMAUFP94CbF
kGt7MB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzODJlMzMzNzJlMzEzMTMyMmUzMDJmMzIzMDJkMzIz
NDIwM2QzZTIwMzUzMzMzMzQzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBMYlcDANBgkqhkiG9w0BAQsF
AAOCAQEAViNo3vsNmdR7jUlwaoM0RSvI+gfx4jcZQ0K3k7wfLMh670x+Xze9d55U
oACTl6SSKhbf16G7GWmHn/psaswI04MyDe9hRlKTEKqtr58z5TiBSum3tn6sAXJn
0isZH3tjUkqnSpD+FYLolSVPafPiHhVBLAOSvmHafd19PaVJImG9Egc57WAmT1iq
qlfzeNr/wM/BjMl/vQOlj6gpzvnwpc/i7kYvrG5y0vz2VC9DCZkZ6U9h960HF5jx
fS/zJwP7FsZJ5vDPDqsU7zeQUapBS28t+HmjkGVYdBeUB1JbexRYyh1M15BZNLJS
EQafEx0rI0SxJoUtkeaQg7reWRs+2w==
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:16:04 2025 by rpki-client