Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e203134333135.roa
File:                     3139392e3230342e3136312e302f32342d3234203d3e203134333135.roa (raw, json)
Hash identifier:          JBwtAt82pzLnfnqggtAfW2mEJ6XSNWI7CIShmhK2Xy4=
Subject key identifier:   77:46:BD:DF:BC:F6:85:BD:FB:C8:FE:26:BF:24:7D:36:1E:4F:D5:A3
Certificate issuer:       /CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
Certificate serial:       0E481E863C5484AB219FE75EADC6B6969AB1ECFE
Authority key identifier: 9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e203134333135.roa
Signing time:             Wed 04 Jun 2025 22:29:14 +0000
ROA not before:           Wed 04 Jun 2025 22:24:14 +0000
ROA not after:            Wed 03 Jun 2026 22:29:14 +0000
asID:                     14315
IP address blocks:        199.204.161.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/cf3a812c-0f10-45ec-aca3-68a73e99d08f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 02:18:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:48:1e:86:3c:54:84:ab:21:9f:e7:5e:ad:c6:b6:96:9a:b1:ec:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7
        Validity
            Not Before: Jun  4 22:24:14 2025 GMT
            Not After : Jun  3 22:29:14 2026 GMT
        Subject: CN=7746BDDFBCF685BDFBC8FE26BF247D361E4FD5A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b1:69:e1:30:94:ef:f5:10:0a:a0:19:05:84:
                    1a:37:2b:1b:90:8a:05:ef:ed:e3:e0:29:ec:2a:45:
                    3b:d9:ab:15:cc:33:f4:3c:46:c4:77:c1:f2:95:72:
                    d7:df:ee:5f:56:b6:26:58:65:1a:a7:ba:e3:2c:fe:
                    84:23:15:9e:1d:1d:f8:21:a3:52:6e:44:c5:36:ae:
                    cf:c9:be:98:99:73:7b:cd:bd:a3:11:3f:45:5d:3e:
                    7d:c1:10:61:b4:b3:1f:7d:bb:5a:09:d6:ec:ca:89:
                    70:2b:a2:6e:31:9c:1e:b2:22:49:a2:e3:76:c2:1d:
                    66:f8:09:7f:fa:87:64:38:1b:54:c7:e5:b4:46:0a:
                    6d:1b:20:04:ba:42:32:73:fd:53:16:4e:90:7f:ce:
                    1b:39:dd:24:7b:fd:ec:87:1b:35:ae:d4:1b:82:cf:
                    63:07:9e:04:bd:ca:13:76:21:53:17:2b:e2:a2:d4:
                    d2:58:68:6c:80:c5:c5:b2:f6:17:10:ee:be:1b:4d:
                    a2:92:cf:a4:fe:50:8b:8a:2a:7d:53:eb:f7:bf:b0:
                    61:d5:e0:37:39:7b:ea:dd:c4:10:ef:7c:c6:7e:59:
                    97:97:02:5b:b7:cb:80:2f:2c:0f:e7:42:34:4d:68:
                    7a:1b:26:9a:b3:62:3f:15:39:4d:9c:4a:4f:63:28:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:46:BD:DF:BC:F6:85:BD:FB:C8:FE:26:BF:24:7D:36:1E:4F:D5:A3
            X509v3 Authority Key Identifier:
                keyid:9F:7C:EE:6E:63:60:10:F9:3C:03:46:EE:DE:55:65:71:8E:EF:62:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/9F7CEE6E636010F93C0346EEDE5565718EEF62A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cf3a812c-0f10-45ec-aca3-68a73e99d08f/be49adab1404487fa9fd5e1f8e6c19c0993610ceaf55638bc7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade850cfeb701855aca4b173434/0/3139392e3230342e3136312e302f32342d3234203d3e203134333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.204.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:1a:8e:59:8f:6f:b4:24:8a:63:70:a2:b9:14:33:4b:96:89:
         21:43:24:a3:fe:7f:8a:7a:09:d7:4a:2f:dd:f9:02:ef:32:62:
         a3:16:82:ae:24:d3:47:da:01:75:56:d4:76:a6:35:f3:82:28:
         f1:e7:10:ce:72:3a:a6:6d:c4:1f:b7:c3:eb:59:75:89:7e:a8:
         78:c9:ed:8c:62:db:5d:c9:57:74:8b:4b:03:61:52:d2:5c:20:
         11:9f:3d:18:36:63:61:9c:b2:df:29:36:39:98:fe:c5:2a:81:
         51:e0:33:6a:c5:46:87:f9:3d:3d:7b:46:8b:81:99:52:26:96:
         88:80:8a:30:e3:89:23:32:f8:02:c2:92:1b:83:fa:84:72:f4:
         d1:0d:2c:01:9d:24:78:48:7c:8a:84:57:5e:c1:b1:9a:51:69:
         65:e1:e5:28:99:8b:47:53:ef:18:84:06:58:82:75:f9:2f:e7:
         8a:ee:7b:d7:51:42:83:96:72:f1:a9:40:77:68:58:a2:08:23:
         90:7a:b0:ca:3e:e4:48:ec:04:cd:ee:63:fa:52:a7:6c:e6:c8:
         94:60:bf:8f:79:b7:42:d7:86:2c:ed:8b:47:c8:4e:a1:bc:97:
         f3:7b:1a:d3:83:bb:18:7a:dd:7f:b9:cc:6c:0e:94:72:a7:44:
         77:2a:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:13:48 2025 by rpki-client