Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e203239383032.roa
File:                     3139392e34382e3234322e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          GIdFOoXrsRyv+TufZ/wenDvJ7cIwt2U+yXueTp64N2I=
Subject key identifier:   A2:B1:46:B5:3A:D1:87:AC:8E:89:6F:29:72:2D:56:D4:73:AE:A3:9E
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       617E19770AE8C73D88561699473966820422BE3B
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e203239383032.roa
Signing time:             Wed 02 Jul 2025 15:40:39 +0000
ROA not before:           Wed 02 Jul 2025 15:35:39 +0000
ROA not after:            Wed 01 Jul 2026 15:40:39 +0000
asID:                     29802
IP address blocks:        199.48.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Jul 2025 03:38:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:7e:19:77:0a:e8:c7:3d:88:56:16:99:47:39:66:82:04:22:be:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: Jul  2 15:35:39 2025 GMT
            Not After : Jul  1 15:40:39 2026 GMT
        Subject: CN=A2B146B53AD187AC8E896F29722D56D473AEA39E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:39:a0:bf:8f:c2:d4:dc:77:3d:43:2c:e7:0b:
                    11:8f:76:48:e5:81:d9:ad:7a:1d:20:bb:d0:0d:df:
                    b6:d9:09:0c:14:42:80:30:fe:b7:13:e4:fa:06:b2:
                    4f:67:28:71:2c:9b:65:64:f4:d6:d5:7e:98:fa:81:
                    4f:61:8d:6e:69:03:60:7d:87:c7:41:3b:78:ec:d7:
                    31:63:76:fa:bb:14:85:20:a8:53:fb:2d:6d:57:7b:
                    4d:d2:5a:c4:8d:1c:fb:f6:44:e2:f5:5f:25:79:73:
                    5a:02:a8:bc:00:d9:ba:2e:35:79:53:8e:06:25:2b:
                    1c:f1:7d:b1:b3:7a:50:d6:53:17:b4:d9:89:bd:d9:
                    20:7a:3b:87:de:67:fa:7d:37:bb:32:50:51:46:ab:
                    72:ae:be:76:cb:c6:1a:c1:3d:fe:3f:92:3a:19:32:
                    49:e7:a4:49:8d:d9:a0:e1:40:13:a7:1f:a4:a2:57:
                    15:40:31:67:7e:96:93:65:3a:85:47:3f:1d:96:48:
                    43:07:36:50:f6:91:1b:cb:11:9a:68:0d:7a:ae:68:
                    66:be:c7:f8:56:47:98:62:0b:10:b1:2f:3f:b9:6f:
                    9d:1e:5e:f3:7b:b5:56:ca:e6:c9:f8:a9:d2:1f:32:
                    09:d1:9b:93:86:04:a2:70:ae:b3:5c:f1:0d:cf:10:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:B1:46:B5:3A:D1:87:AC:8E:89:6F:29:72:2D:56:D4:73:AE:A3:9E
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:b6:8b:fc:a8:6c:3d:a4:7b:11:a3:26:32:b9:3e:d4:26:72:
         51:f3:42:bd:bd:27:b6:f7:90:1e:fb:24:6d:a3:24:5c:10:97:
         e7:c7:00:07:8a:cd:ff:ff:86:c7:54:e6:23:a8:e8:2a:6e:1e:
         7a:68:df:0c:38:18:10:5c:42:4d:2a:23:fa:de:c4:f2:ed:4b:
         5d:65:11:59:f4:42:47:47:fa:1f:9e:46:f6:85:09:ac:8d:37:
         ee:58:d8:7a:9b:38:53:5a:59:66:b4:f9:4c:9f:71:f4:8f:5d:
         06:84:d4:9c:4a:ba:f5:eb:ac:ea:ff:b8:14:9a:21:47:c3:db:
         dd:d0:11:a5:08:16:2a:b9:5a:13:c8:6b:f4:bf:a1:a3:b7:3f:
         80:24:44:c3:79:c8:cb:31:56:80:cb:c2:4d:1b:db:62:62:d6:
         8d:86:d5:aa:e9:84:d1:4a:67:ca:43:f2:82:fe:16:09:97:96:
         7d:6e:78:e9:04:05:f8:b9:bf:1f:70:3c:8d:d1:40:db:5a:7e:
         1f:b9:e5:67:3f:56:45:52:4f:0d:d7:c0:90:27:58:71:22:9d:
         fb:cb:11:91:e7:a5:2b:c1:93:58:ec:cd:b4:b9:6d:20:93:30:
         06:a5:f6:42:d6:1d:ad:4b:59:c8:70:b5:50:34:76:d5:e8:97:
         ce:e1:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 7 04:19:29 2025 by rpki-client