Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e362e302f32342d3234203d3e2037303138.roa
File:                     3139322e3230382e362e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          MeYqqDAtvLiP3SugBI4z47pq/rw8mCfU89YP7133tpQ=
Subject key identifier:   5D:4C:CE:2B:D4:E4:18:28:5E:A0:32:06:F2:00:0E:8A:68:DB:C4:93
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       11B789DEE8BA80817563AEE387F2994E04972A67
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e362e302f32342d3234203d3e2037303138.roa
Signing time:             Sat 19 Jul 2025 10:29:44 +0000
ROA not before:           Sat 19 Jul 2025 10:24:44 +0000
ROA not after:            Sat 18 Jul 2026 10:29:44 +0000
asID:                     7018
IP address blocks:        192.208.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 06:42:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:b7:89:de:e8:ba:80:81:75:63:ae:e3:87:f2:99:4e:04:97:2a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jul 19 10:24:44 2025 GMT
            Not After : Jul 18 10:29:44 2026 GMT
        Subject: CN=5D4CCE2BD4E418285EA03206F2000E8A68DBC493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:1d:fe:b7:f2:69:7d:e3:1d:bf:15:ba:97:b1:
                    cb:2e:38:26:27:58:ad:80:1a:4b:16:f9:df:bb:c2:
                    e8:27:99:9e:5e:ea:63:4c:61:c7:02:16:17:5b:fb:
                    bf:57:4e:8a:ed:7e:c0:e2:65:8f:d3:2a:04:a2:4c:
                    42:04:d6:29:10:b6:56:3c:94:6c:4d:51:88:9f:14:
                    45:a1:f1:b0:a6:00:b1:d8:bc:a4:45:c5:95:84:2a:
                    3f:3c:41:28:b2:bd:81:2f:ee:af:f7:c3:91:42:e0:
                    3f:2e:14:b6:40:75:b9:4a:f7:3f:33:3a:72:62:3d:
                    85:64:d8:ba:d8:ef:60:45:b7:d2:d5:8f:01:55:9e:
                    1d:58:37:3d:e4:ee:40:04:c6:04:81:95:67:a9:ec:
                    98:93:e5:3b:ff:88:a9:ad:e9:c8:89:91:6e:18:76:
                    84:40:99:e1:eb:81:20:cf:52:d2:46:25:40:22:95:
                    84:56:29:76:bf:5e:3c:d1:66:f1:9f:39:f7:15:9c:
                    48:bc:3c:fd:ed:99:c2:91:90:33:a3:cd:8f:99:8a:
                    06:80:8e:35:78:11:fc:03:d9:00:3e:00:7d:9a:06:
                    0d:e6:9e:1b:79:3b:61:fa:e3:2d:35:79:39:3d:fa:
                    11:dd:87:16:00:ec:5e:3d:94:8a:d8:7b:40:b1:6f:
                    55:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:4C:CE:2B:D4:E4:18:28:5E:A0:32:06:F2:00:0E:8A:68:DB:C4:93
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e362e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:35:fb:f2:8b:2b:4e:47:42:58:e6:92:52:d2:87:cf:82:29:
         d1:02:f3:44:0b:e1:2c:e1:e0:6d:64:48:c3:f3:00:14:a9:7f:
         30:10:e0:6d:54:84:54:c4:16:92:f4:48:b8:06:f2:5c:e7:84:
         11:72:90:dd:ef:6b:6c:9b:66:18:e8:a8:20:16:25:b6:f8:b6:
         d6:01:17:81:36:6a:ee:29:93:72:34:98:32:1f:3e:61:e8:13:
         b5:9b:dd:56:a0:23:bf:c0:60:26:86:a2:80:34:95:5d:04:fe:
         2a:f7:9e:eb:f1:04:31:d8:d7:95:4d:ce:50:5a:1b:12:5d:9a:
         86:f7:e5:77:39:81:1e:29:e0:65:b3:b1:1f:37:00:eb:cb:7d:
         b8:f8:3d:f9:3b:56:b9:94:96:e7:5e:46:a7:32:b8:5a:19:e4:
         d5:9c:18:7d:b3:53:df:da:4f:3a:88:ec:fd:7a:5e:40:e9:9c:
         8c:f6:72:1f:5c:d4:04:c9:f5:d0:25:c0:a0:72:09:58:aa:83:
         ac:79:56:ca:43:72:05:4d:87:f5:f3:c1:50:41:ed:20:3a:27:
         3f:87:b5:4d:cc:42:a7:f9:8b:f8:95:ce:16:24:48:4f:07:cd:
         e4:62:c9:e2:3e:fa:7f:e4:6e:de:d2:df:33:f0:f7:a9:9b:ca:
         7f:1c:cd:f8
-----BEGIN CERTIFICATE-----
MIIFrTCCBJWgAwIBAgIUEbeJ3ui6gIF1Y67jh/KZTgSXKmcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjUwNzE5MTAyNDQ0WhcNMjYwNzE4MTAyOTQ0
WjAzMTEwLwYDVQQDEyg1RDRDQ0UyQkQ0RTQxODI4NUVBMDMyMDZGMjAwMEU4QTY4
REJDNDkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R3+t/JpfeMd
vxW6l7HLLjgmJ1itgBpLFvnfu8LoJ5meXupjTGHHAhYXW/u/V06K7X7A4mWP0yoE
okxCBNYpELZWPJRsTVGInxRFofGwpgCx2LykRcWVhCo/PEEosr2BL+6v98ORQuA/
LhS2QHW5Svc/MzpyYj2FZNi62O9gRbfS1Y8BVZ4dWDc95O5ABMYEgZVnqeyYk+U7
/4iprenIiZFuGHaEQJnh64Egz1LSRiVAIpWEVil2v1480Wbxnzn3FZxIvDz97ZnC
kZAzo82PmYoGgI41eBH8A9kAPgB9mgYN5p4beTth+uMtNXk5PfoR3YcWAOxePZSK
2HtAsW9VTwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFF1MzivU5BgoXqAyBvIADopo
28STMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4
MzYxMTczOGZmLzAvMzEzOTMyMmUzMjMwMzgyZTM2MmUzMDJmMzIzNDJkMzIzNDIw
M2QzZTIwMzczMDMxMzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYI
KwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADA0AYwDQYJKoZIhvcNAQELBQADggEB
AKs1+/KLK05HQljmklLSh8+CKdEC80QL4Szh4G1kSMPzABSpfzAQ4G1UhFTEFpL0
SLgG8lznhBFykN3va2ybZhjoqCAWJbb4ttYBF4E2au4pk3I0mDIfPmHoE7Wb3Vag
I7/AYCaGooA0lV0E/ir3nuvxBDHY15VNzlBaGxJdmob35Xc5gR4p4GWzsR83AOvL
fbj4Pfk7VrmUludeRqcyuFoZ5NWcGH2zU9/aTzqI7P16XkDpnIz2ch9c1ATJ9dAl
wKByCViqg6x5VspDcgVNh/XzwVBB7SA6Jz+HtU3MQqf5i/iVzhYkSE8HzeRiyeI+
+n/kbt7S3zPw96mbyn8czfg=
-----END CERTIFICATE-----
Generated at Wed Jul 23 12:15:32 2025 by rpki-client