Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/3139392e3138392e3135362e302f32322d3234203d3e20393435.roa
File:                     3139392e3138392e3135362e302f32322d3234203d3e20393435.roa (raw, json)
Hash identifier:          DZ+Ve2HMRtO0ekUGrLovlLRv2pQhd8rsOuqox7cL6Ms=
Subject key identifier:   5F:96:DC:40:B7:94:F7:03:1E:71:A8:96:ED:7E:0D:80:3A:1D:54:68
Certificate issuer:       /CN=7e6381cf35808ffd021b64c945280e6774cd0f142d93757e72
Certificate serial:       4C05CE2447A643F07F3DFBB12C79508CD382E155
Authority key identifier: 53:F7:C4:DA:6B:E2:2F:59:C5:12:27:E1:59:26:EB:85:A5:04:E1:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35808ffd021b64c945280e6774cd0f142d93757e72.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/3139392e3138392e3135362e302f32322d3234203d3e20393435.roa
Signing time:             Fri 25 Apr 2025 18:19:06 +0000
ROA not before:           Fri 25 Apr 2025 18:14:06 +0000
ROA not after:            Fri 24 Apr 2026 18:19:06 +0000
asID:                     945
IP address blocks:        199.189.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/53F7C4DA6BE22F59C51227E15926EB85A504E1FE.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/53F7C4DA6BE22F59C51227E15926EB85A504E1FE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35808ffd021b64c945280e6774cd0f142d93757e72.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 23:25:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:05:ce:24:47:a6:43:f0:7f:3d:fb:b1:2c:79:50:8c:d3:82:e1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf35808ffd021b64c945280e6774cd0f142d93757e72
        Validity
            Not Before: Apr 25 18:14:06 2025 GMT
            Not After : Apr 24 18:19:06 2026 GMT
        Subject: CN=5F96DC40B794F7031E71A896ED7E0D803A1D5468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:88:e3:e5:cb:f6:29:53:61:f7:27:0c:de:a4:
                    0b:46:8e:92:c4:c3:d1:c8:48:66:17:d0:77:40:ac:
                    59:69:c2:8d:d4:cc:1c:4f:f8:69:d1:d2:9d:e1:1c:
                    b7:ea:d7:63:5a:e1:22:dd:9f:9f:73:2e:31:33:7a:
                    38:02:cf:e9:51:3d:0b:56:8a:94:12:ec:eb:f8:4f:
                    75:6b:f6:6f:85:22:20:a1:ee:78:fe:4f:ce:66:aa:
                    1e:52:ee:e9:97:88:ef:c4:51:a2:79:04:27:87:c0:
                    b2:c0:a7:42:34:e9:76:bc:20:82:01:b0:82:58:05:
                    f6:9c:54:38:c0:96:58:9b:a5:37:91:0e:2e:90:8c:
                    2f:cc:d3:47:dc:f1:dd:81:ce:88:c1:90:e9:f7:f7:
                    53:34:36:46:d9:dc:07:4f:de:51:6d:4c:1f:f2:f3:
                    33:c5:9f:74:5f:15:42:38:2c:bd:fa:ee:c0:b9:30:
                    e7:cf:af:31:c2:6e:1a:df:d6:7e:6f:18:b1:5d:d3:
                    c0:8c:98:44:71:76:83:7e:2d:c9:16:c1:70:72:3a:
                    bf:ad:6e:b7:bf:a3:0c:83:ed:d0:33:a4:06:24:61:
                    0f:33:8a:16:69:13:61:b4:c4:04:8d:a9:a6:3e:9f:
                    85:a2:48:f9:e8:1f:af:b6:18:5c:b1:e5:1d:92:62:
                    0f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:96:DC:40:B7:94:F7:03:1E:71:A8:96:ED:7E:0D:80:3A:1D:54:68
            X509v3 Authority Key Identifier:
                keyid:53:F7:C4:DA:6B:E2:2F:59:C5:12:27:E1:59:26:EB:85:A5:04:E1:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/53F7C4DA6BE22F59C51227E15926EB85A504E1FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf35808ffd021b64c945280e6774cd0f142d93757e72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/3/3139392e3138392e3135362e302f32322d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         87:68:9c:62:2d:1f:e6:1a:06:32:a1:97:76:3d:ff:84:23:da:
         ff:a6:6b:8d:d3:50:36:68:d0:37:e9:4c:69:0e:b0:a8:a7:7f:
         be:33:b9:96:f9:be:1a:5c:0e:86:8b:51:01:b7:ba:74:12:9c:
         e6:f1:0c:f3:d8:83:3b:39:03:d1:9e:0e:14:c5:8d:66:5b:8c:
         4c:af:27:1e:2d:f7:9f:ea:0c:e7:77:ec:76:85:77:99:74:eb:
         dc:35:a5:82:24:85:e5:af:a6:ef:f4:b7:df:cc:02:6e:d7:0f:
         2b:78:8b:d7:d9:b9:cb:04:0c:af:82:b8:bb:71:24:8b:87:69:
         3c:79:be:fd:99:e5:b0:34:64:10:00:3e:40:c4:25:7a:e8:c6:
         f3:b0:73:e1:c4:f3:f7:63:c3:61:0c:75:2d:2d:13:7d:d8:21:
         67:d1:f0:df:fc:c1:97:c1:85:fe:c7:1d:c1:e3:b6:7b:22:39:
         95:ff:39:a3:39:9c:56:4b:16:be:98:81:7e:09:ec:3d:45:f1:
         32:34:21:24:59:a9:3c:99:ee:32:5c:c8:9d:a9:c9:0f:9a:38:
         74:2e:0a:9f:2b:10:70:5b:62:1f:fb:e3:3d:f7:c3:a1:f6:2b:
         22:c1:a6:41:2b:c3:5b:1a:d3:93:f1:7b:d8:18:50:61:ac:a5:
         b6:3f:15:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:42:33 2025 by rpki-client