Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139382e31332e31372e302f32342d3234203d3e20333938393931.roa
File:                     3139382e31332e31372e302f32342d3234203d3e20333938393931.roa (raw, json)
Hash identifier:          M1IvDB8Cwp+B44dxDOcQ/Zu1QWEF7Y5FIfzfSAnPZC8=
Subject key identifier:   C5:09:8B:9E:FA:FA:20:C1:A5:81:F3:A3:A0:9E:B3:E0:BD:45:75:A7
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       01164A2446DD7FE9BFC4A26720046E648A2F7262
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139382e31332e31372e302f32342d3234203d3e20333938393931.roa
Signing time:             Thu 14 Aug 2025 15:43:31 +0000
ROA not before:           Thu 14 Aug 2025 15:38:31 +0000
ROA not after:            Thu 13 Aug 2026 15:43:31 +0000
asID:                     398991
IP address blocks:        198.13.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 12:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:16:4a:24:46:dd:7f:e9:bf:c4:a2:67:20:04:6e:64:8a:2f:72:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Aug 14 15:38:31 2025 GMT
            Not After : Aug 13 15:43:31 2026 GMT
        Subject: CN=C5098B9EFAFA20C1A581F3A3A09EB3E0BD4575A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e1:1e:0d:17:32:49:60:13:0a:c3:eb:4a:58:
                    23:10:4b:83:86:fb:4d:24:f9:f3:1f:5b:21:b9:ac:
                    a5:3c:08:12:20:15:0d:64:a4:28:5d:02:21:a7:fb:
                    19:9c:95:53:c7:85:e7:b9:8a:ca:c4:3c:d4:d6:df:
                    12:7e:e1:54:c9:c6:fe:54:91:57:59:e8:04:ca:ba:
                    ab:e0:cf:d2:51:d0:14:85:97:32:91:07:f0:63:cf:
                    d1:f3:d4:7f:23:51:9f:7f:52:8a:02:cd:63:65:b3:
                    cf:05:5e:0c:40:50:aa:1a:bf:cb:2c:82:f8:16:ef:
                    29:d8:29:82:dc:ae:2b:91:ee:93:f5:6a:14:f5:6e:
                    51:b8:cd:de:d4:10:19:a4:ac:be:ec:0c:9f:c1:b1:
                    24:46:f1:7a:95:85:ee:bd:f6:9c:c4:2f:18:ed:5e:
                    c5:7c:68:84:e7:56:a0:76:5a:e8:ed:f3:71:1c:b3:
                    85:0b:47:d8:4d:ed:21:17:f7:f0:4a:50:c1:64:44:
                    d8:25:bf:49:c8:7f:bc:bd:cc:92:f0:06:44:e8:94:
                    cc:e9:81:df:f5:b3:38:39:38:94:25:7e:e8:45:c0:
                    9a:d9:b4:13:4d:5e:87:5b:ac:fa:52:2f:0d:a1:b8:
                    43:9c:66:4f:fd:a1:32:1d:7d:89:e6:a9:5a:4b:04:
                    df:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:09:8B:9E:FA:FA:20:C1:A5:81:F3:A3:A0:9E:B3:E0:BD:45:75:A7
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139382e31332e31372e302f32342d3234203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.13.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:12:36:a2:10:e6:dd:ef:bb:70:82:c6:28:96:bc:38:0a:ad:
         df:03:81:58:4c:4c:84:b3:f6:99:5a:09:5f:c9:b9:d0:1e:db:
         6d:f8:53:8f:6b:2c:90:12:29:1c:ba:da:e2:33:50:07:c7:7b:
         f6:62:89:88:be:0d:98:e9:88:e3:30:fc:ef:ad:0e:4c:64:c0:
         3e:ff:7d:ff:8c:ae:22:27:c4:7c:f3:fe:86:34:f2:09:78:9e:
         74:b8:49:bb:08:14:eb:77:35:d5:76:1f:1c:7a:4f:b6:94:1a:
         a3:e9:a2:22:ba:6b:d8:72:40:12:0f:bb:c8:66:06:05:80:7c:
         1b:4a:27:4d:3b:8b:22:44:df:2d:47:b4:9e:c9:f7:d6:a0:66:
         09:a7:1d:2b:7b:81:0f:90:9c:dc:d0:f8:2e:f5:6a:f6:40:62:
         1b:61:52:08:cb:02:b6:4d:75:be:dd:ae:60:4c:fc:69:cf:ef:
         96:b7:54:11:fb:36:ef:4d:c9:75:05:4b:5e:f1:d1:76:e3:bb:
         d9:55:97:7a:25:24:b1:11:d8:83:0d:9d:52:f5:b0:3d:b6:57:
         d4:41:49:db:58:bf:14:27:09:32:4c:f3:86:ff:69:07:b8:a6:
         f1:26:45:c5:09:6a:f6:a4:a9:6d:cf:a2:ef:33:33:70:69:da:
         58:0d:be:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:29 2025 by rpki-client