Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139382e31332e31362e302f32332d3233203d3e20333938393931.roa
File:                     3139382e31332e31362e302f32332d3233203d3e20333938393931.roa (raw, json)
Hash identifier:          cD6b3FzW8moxHJ30/O1iaIfcrVtlYpgBNkhmsyHZ9MM=
Subject key identifier:   2C:F8:2C:07:C7:3D:B3:28:4A:7B:3C:7E:FD:91:1B:C5:8F:EE:B7:25
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       3F226B9AAB0CD1626B261A02C04B8C1CBB14D364
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139382e31332e31362e302f32332d3233203d3e20333938393931.roa
Signing time:             Thu 14 Aug 2025 15:43:31 +0000
ROA not before:           Thu 14 Aug 2025 15:38:31 +0000
ROA not after:            Thu 13 Aug 2026 15:43:31 +0000
asID:                     398991
IP address blocks:        198.13.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 12:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:22:6b:9a:ab:0c:d1:62:6b:26:1a:02:c0:4b:8c:1c:bb:14:d3:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Aug 14 15:38:31 2025 GMT
            Not After : Aug 13 15:43:31 2026 GMT
        Subject: CN=2CF82C07C73DB3284A7B3C7EFD911BC58FEEB725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:8a:9d:c0:b3:0a:66:47:de:ad:6d:12:5d:
                    cb:4a:23:be:5f:34:ae:ed:b3:cb:f6:a3:b3:d1:59:
                    ba:99:0e:c6:7f:bb:a0:18:63:0c:8b:aa:4e:d2:ed:
                    56:e6:d7:be:2e:49:6c:88:e9:8a:17:c0:16:eb:c1:
                    ec:a2:18:2b:2b:95:13:cf:ca:2f:3d:5a:58:cd:a0:
                    13:5f:eb:30:78:a6:c9:37:d2:7f:68:87:6d:6e:dd:
                    42:e7:dc:c9:32:86:24:cc:53:a8:82:d6:9a:d2:49:
                    db:e0:b5:23:22:36:5d:d9:18:a8:d4:9a:2c:88:e2:
                    c5:12:c3:10:3a:22:31:d6:87:eb:f5:9f:3c:bf:56:
                    69:87:bd:21:63:3e:75:1d:5f:bc:93:50:65:ec:d4:
                    1b:13:06:4c:54:81:ee:7f:c8:98:0e:4f:e0:ad:ca:
                    ca:dd:e1:b0:7c:0d:df:03:39:c1:1c:e0:85:6c:f0:
                    6f:a0:2a:d6:d6:fa:ce:59:d5:f0:9f:b0:91:bb:ce:
                    5a:aa:b1:38:14:18:73:ff:e8:f7:ca:dc:e6:4a:e3:
                    bb:fc:0e:b2:1c:5e:d3:a4:62:c4:ad:9c:42:47:fa:
                    c8:95:6f:c8:8c:5a:a0:7e:66:22:0a:b8:ae:1c:4f:
                    14:10:d2:98:30:2c:eb:4f:e7:b8:e4:7d:2a:17:7c:
                    79:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F8:2C:07:C7:3D:B3:28:4A:7B:3C:7E:FD:91:1B:C5:8F:EE:B7:25
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139382e31332e31362e302f32332d3233203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.13.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:7b:5c:a3:5e:d1:0e:6e:d4:da:86:1b:3c:20:1f:ad:ee:3b:
         20:21:5d:7b:5e:48:7e:6a:9e:06:6e:e2:49:65:b2:b2:e4:03:
         0a:81:48:98:10:e6:7e:b7:2b:5d:3f:35:03:1b:1d:8b:a3:db:
         39:20:5a:fe:be:09:44:24:0c:b3:c7:a0:c3:1c:fc:97:63:6f:
         53:ee:3e:4b:97:dc:bf:15:4a:7b:82:82:24:07:96:60:bb:0a:
         91:df:21:ce:81:75:12:af:00:22:da:59:81:2f:0e:d7:db:d0:
         75:1a:11:60:ee:c1:0d:9e:14:3c:e7:ff:4b:18:81:be:2f:fd:
         dc:be:3a:ee:54:c5:a2:76:68:09:75:20:7b:eb:8a:b1:70:6f:
         2f:84:ed:98:d3:c3:20:97:73:ac:22:1e:80:aa:0d:01:a2:66:
         d2:3e:56:74:c5:3a:a3:94:18:64:0e:4b:e8:03:07:d7:49:99:
         6a:61:c3:d4:cc:0a:c8:b6:30:9c:cc:85:36:df:40:f2:4c:cf:
         2c:c5:c4:b0:50:14:e6:5b:4c:79:1f:e7:70:a8:e1:33:2f:87:
         58:0d:94:1a:41:ec:d1:72:98:89:4f:d5:fd:ad:95:ef:d3:2c:
         86:1e:ec:73:02:a0:59:6a:46:3d:b8:d6:4b:b2:fb:87:a2:df:
         d4:93:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:52 2025 by rpki-client