Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e2037303239.roa
File:                     3139392e3233312e36382e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          If3H/Vo6yCJVK+2o1G/zrUnHwyr3RWeIqAmFvr7cgiM=
Subject key identifier:   9D:16:DE:84:50:34:D9:C5:A0:1F:A2:F8:D4:E9:FA:90:A1:19:FF:AE
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       164425E7205332C69CC69691CB2B977F70055E42
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e2037303239.roa
Signing time:             Tue 08 Jul 2025 14:47:22 +0000
ROA not before:           Tue 08 Jul 2025 14:42:22 +0000
ROA not after:            Tue 07 Jul 2026 14:47:22 +0000
asID:                     7029
IP address blocks:        199.231.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 15:09:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:44:25:e7:20:53:32:c6:9c:c6:96:91:cb:2b:97:7f:70:05:5e:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jul  8 14:42:22 2025 GMT
            Not After : Jul  7 14:47:22 2026 GMT
        Subject: CN=9D16DE845034D9C5A01FA2F8D4E9FA90A119FFAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:d3:b5:15:76:ce:71:38:7a:64:7c:f3:0e:
                    4b:0e:3e:5e:79:ff:63:26:41:7b:48:cc:b2:64:11:
                    80:9c:cb:3c:3a:61:7e:bc:bd:02:df:2b:a9:94:0d:
                    98:a1:f2:59:80:43:08:36:5b:43:ed:02:95:51:32:
                    a2:5e:d8:c8:bc:6c:3c:4a:d9:29:48:de:86:58:d0:
                    5b:a5:24:0f:29:4d:ae:ad:55:0c:c9:97:eb:1f:74:
                    c8:88:ee:34:90:9e:30:8b:6e:ae:56:62:88:cb:70:
                    dc:18:b8:c4:73:1f:4e:1a:55:ea:3a:26:45:75:35:
                    cf:27:93:55:33:a0:f1:99:5f:03:a6:c0:ec:e7:f0:
                    4b:c3:1d:66:a4:d3:75:1f:92:00:94:cc:df:68:a6:
                    ed:13:02:d5:1b:b9:13:aa:3e:5f:db:c0:d7:b4:40:
                    95:6f:a4:1f:39:88:f6:aa:67:92:69:45:a6:a9:8a:
                    3c:b7:ad:9b:1f:da:3a:3b:0b:48:5b:5d:68:b6:00:
                    1a:33:41:d4:fd:9c:d5:98:2e:e4:a1:b8:99:26:fc:
                    35:3a:2b:5e:7b:df:2d:32:95:15:9d:7d:b7:0e:43:
                    e2:b4:9a:22:fa:83:bc:a5:68:d8:72:c9:6a:7c:19:
                    60:21:a5:94:14:49:55:a0:ff:17:f5:7c:7d:a9:f0:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:16:DE:84:50:34:D9:C5:A0:1F:A2:F8:D4:E9:FA:90:A1:19:FF:AE
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:82:3e:fe:d7:a7:ef:d0:80:76:46:7d:e8:81:7d:42:89:c0:
         32:ac:9e:a9:fa:e2:4c:da:95:be:e2:25:5f:ff:fe:8a:4f:6e:
         59:86:7f:31:60:f8:ba:d0:70:bd:ba:31:7d:e3:0c:3d:57:01:
         46:2e:c8:50:5e:10:bc:16:3e:74:c8:63:fe:32:7f:e2:95:07:
         eb:53:b3:1f:1e:4a:13:7f:79:fe:58:d9:43:c8:ae:18:d1:d6:
         a8:46:4b:f3:db:83:d3:6d:d4:f6:1b:7c:c3:c5:cf:31:f1:ac:
         b5:48:1e:26:9e:e8:19:c1:7b:ca:fa:01:7e:76:e0:ed:59:9b:
         8a:03:9b:2b:b5:d8:65:78:55:c8:de:23:aa:fa:b8:d5:e5:43:
         e5:af:b1:5f:49:60:ed:b0:4f:bb:0f:81:c4:23:98:70:d3:8b:
         6a:f8:38:5e:e6:45:8f:b6:3d:1d:70:b0:05:9d:2c:cd:04:a0:
         bc:80:75:15:60:67:db:a8:78:e1:23:c5:2a:4e:75:e2:87:97:
         25:fa:cb:e9:6d:96:cd:12:e3:2c:ee:d4:ef:dc:5a:61:89:b5:
         df:5b:35:f9:76:13:6f:43:6a:d1:05:c6:8f:93:b8:b6:5c:71:
         50:c5:79:61:d1:dc:c7:1d:64:70:3f:08:e2:0e:d7:75:58:28:
         71:00:1e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:04:36 2025 by rpki-client