Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa
File:                     3139392e39312e3130302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          4nbrNWk07NZbbah5Lz6tJX0FA4eT+rzu/2hjyZXVdZo=
Subject key identifier:   41:C3:DF:B0:86:D8:E7:9D:F3:C1:74:3F:EF:E7:35:F5:D3:F8:6A:04
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       4E23963C083BC64763D75C7932F351E8AB55EC03
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa
Signing time:             Wed 28 May 2025 11:23:13 +0000
ROA not before:           Wed 28 May 2025 11:18:13 +0000
ROA not after:            Wed 27 May 2026 11:23:13 +0000
asID:                     834
IP address blocks:        199.91.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 16:18:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:23:96:3c:08:3b:c6:47:63:d7:5c:79:32:f3:51:e8:ab:55:ec:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: May 28 11:18:13 2025 GMT
            Not After : May 27 11:23:13 2026 GMT
        Subject: CN=41C3DFB086D8E79DF3C1743FEFE735F5D3F86A04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e6:32:37:74:21:11:b7:33:94:57:42:fe:cb:
                    4e:44:ae:5b:7f:d7:32:c3:50:7d:0a:c4:5c:ec:8f:
                    d9:e3:a1:d7:3b:34:93:36:2f:b4:c8:7e:c9:04:39:
                    2a:c3:7e:f9:b1:7d:49:cc:e3:5d:b2:27:75:13:dc:
                    b4:db:25:e6:90:01:bf:b6:37:1b:dd:54:46:c8:7a:
                    56:92:3c:fc:c0:a2:00:96:99:df:de:be:bc:86:d9:
                    8b:45:69:e9:34:2a:c0:cc:85:fe:02:59:ea:b9:98:
                    c8:1f:de:fe:b2:ac:a4:68:9a:6e:0e:95:b1:83:2d:
                    5e:35:21:38:43:14:82:47:ca:b9:37:f0:7f:55:ed:
                    57:3e:fa:dc:25:b2:29:8a:2e:dc:67:74:31:ec:fe:
                    a7:d5:7a:bd:3e:b3:10:5e:82:d6:a3:2c:4f:7e:28:
                    3d:91:83:a6:ce:cb:4d:b3:2a:c0:07:8f:e5:ce:3b:
                    97:d8:80:19:69:f6:f5:6c:f8:d4:3f:5b:f5:75:82:
                    5f:54:5a:28:80:45:f9:6f:14:7b:63:8e:44:0a:98:
                    f0:e7:d5:45:ed:ad:01:3d:5f:6d:a1:72:af:15:a7:
                    90:08:66:7c:58:8b:13:81:0c:67:02:14:c8:6e:14:
                    4c:e6:fc:9f:fa:95:46:db:95:d0:81:98:2e:7d:e0:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C3:DF:B0:86:D8:E7:9D:F3:C1:74:3F:EF:E7:35:F5:D3:F8:6A:04
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:5b:2c:76:5b:bb:93:01:f1:83:1a:c9:bc:5d:e2:7c:a2:ba:
         45:d2:a1:86:fa:16:33:e3:2d:2e:75:eb:3e:33:ec:4e:05:42:
         ef:b0:7b:6d:4e:bf:6a:64:fb:9d:c0:65:dd:08:56:21:ae:6a:
         40:41:20:dc:3f:24:17:e7:b2:d7:d8:11:40:e0:92:24:48:57:
         81:26:a0:27:f7:ad:02:73:87:57:32:a0:c5:44:b5:53:f3:9a:
         cc:01:42:1b:cb:b9:47:e9:ed:98:17:26:ed:18:12:49:fc:01:
         b1:c4:49:7b:e7:5f:34:b8:7a:47:dc:b5:36:bc:62:5b:69:75:
         30:73:d7:3c:b4:74:af:33:1c:5e:c1:47:70:be:c0:91:48:43:
         85:3f:1c:66:ec:95:01:da:79:dc:9d:0b:c9:6a:17:cd:92:64:
         9b:30:b3:85:24:ce:1f:9f:3f:38:23:0a:ad:8d:3b:b9:e4:27:
         f9:0a:d1:d6:9e:7f:e3:47:2d:0e:6a:ba:2f:13:af:e7:12:5c:
         d5:f3:c2:6b:af:b2:a9:3f:47:ee:eb:77:71:80:0b:ff:91:bc:
         41:7a:d7:fb:04:f8:f4:5b:92:ee:3e:32:38:1d:f1:e6:fa:2a:
         ff:bd:de:92:5d:b1:26:63:b0:ab:e7:10:8d:ac:d0:f7:e8:9b:
         bf:04:18:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:56:23 2025 by rpki-client