Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139392e3234352e3233342e302f32342d3234203d3e20333938393931.roa
File:                     3139392e3234352e3233342e302f32342d3234203d3e20333938393931.roa (raw, json)
Hash identifier:          vyYRbxtAo3l8RmM47AkN42aXRLvmdD1Ig5ahKRLi4b0=
Subject key identifier:   34:72:05:CA:B5:AA:E4:AA:D5:0E:A2:C6:2C:6C:72:13:8F:A2:95:6B
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       46A671A262A843616611D6549BE7E1CA331C9D11
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139392e3234352e3233342e302f32342d3234203d3e20333938393931.roa
Signing time:             Thu 14 Aug 2025 15:43:30 +0000
ROA not before:           Thu 14 Aug 2025 15:38:30 +0000
ROA not after:            Thu 13 Aug 2026 15:43:30 +0000
asID:                     398991
IP address blocks:        199.245.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 12:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a6:71:a2:62:a8:43:61:66:11:d6:54:9b:e7:e1:ca:33:1c:9d:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Aug 14 15:38:30 2025 GMT
            Not After : Aug 13 15:43:30 2026 GMT
        Subject: CN=347205CAB5AAE4AAD50EA2C62C6C72138FA2956B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d2:82:7c:b1:6f:dd:e4:e4:ef:ee:ed:46:05:
                    32:54:25:ba:0f:d2:11:a1:53:53:a8:02:c1:9e:bb:
                    14:71:f1:01:73:19:9a:7b:47:14:92:a1:01:82:08:
                    9a:06:7e:c8:ef:06:a8:c7:95:10:03:dc:8e:17:ca:
                    5d:be:4b:f1:04:5b:14:9e:fc:02:e6:df:0c:20:62:
                    2a:de:71:d5:be:db:23:14:b7:26:9a:05:2e:eb:c6:
                    a9:c5:37:d0:49:2d:de:08:5e:0d:88:48:ba:4e:bd:
                    9b:6b:b8:ee:d5:b7:15:d9:f2:9f:f6:ab:e2:0e:ac:
                    3e:86:c0:ba:e5:ca:77:f3:1c:ac:36:7b:bd:06:75:
                    b3:2e:55:c4:79:ad:d5:24:36:66:eb:c1:91:28:96:
                    ed:48:b2:1c:ec:75:d9:19:f2:70:df:67:1a:82:ec:
                    2d:9a:de:8c:e0:e4:15:d7:2a:75:c6:91:b4:09:9c:
                    b4:f3:66:22:19:47:74:70:f7:d9:bf:23:90:40:ed:
                    81:d4:3f:43:95:2a:4e:d2:43:b9:c7:81:6d:cd:51:
                    a1:97:7b:55:9f:7d:31:d0:db:44:c7:89:92:f6:c2:
                    0e:b1:e6:53:e4:b9:b9:24:a6:fd:09:08:75:ce:03:
                    33:89:0d:9c:60:59:5e:59:75:b6:ce:a0:a0:13:a8:
                    13:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:72:05:CA:B5:AA:E4:AA:D5:0E:A2:C6:2C:6C:72:13:8F:A2:95:6B
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3139392e3234352e3233342e302f32342d3234203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.245.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:77:8f:38:dd:39:cd:70:49:37:c1:af:00:61:a1:45:f7:24:
         78:f3:67:be:eb:4d:59:0a:53:f0:4c:02:08:44:6d:bd:2d:8f:
         16:8d:bb:b7:29:a7:b2:41:d7:f7:03:28:ca:87:f8:c1:98:e8:
         8e:f2:ef:46:2b:bb:ba:a1:37:b8:75:e1:6d:ae:bf:6d:67:24:
         7c:c8:a2:e0:51:73:b4:b7:69:cb:fb:6f:35:31:19:05:df:fa:
         44:e2:22:84:d1:2d:c7:6a:80:c9:c1:dc:08:3f:e5:bd:6a:0c:
         c7:69:7b:de:8a:e1:d2:1a:72:d6:1b:3e:8e:d8:c0:44:1c:36:
         47:ef:75:03:bc:85:16:bf:e5:2d:c0:ff:b1:70:41:6e:41:1d:
         60:ae:e2:97:72:6a:20:b0:e0:5a:6c:8d:bd:ed:ea:0f:bf:c5:
         50:f5:a5:6f:5a:40:eb:a4:1b:b9:1d:09:ac:be:31:1a:7f:77:
         0c:8a:b8:3f:69:6b:04:d9:29:70:eb:28:80:b8:4f:fe:15:9d:
         1d:4b:9e:3b:5e:7c:94:c7:b8:1d:9e:08:d2:a6:42:62:07:3e:
         e8:1c:94:d8:3d:92:38:d4:57:72:87:dd:d0:a5:8d:8f:60:3d:
         96:b4:73:5c:6a:9a:61:c6:29:dc:8a:9c:7d:ad:f2:ec:04:04:
         6d:66:34:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:20:07 2025 by rpki-client