Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa
File:                     3139392e39312e3130302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          KLmHdWZFIGooxmbndcPjsS4K5shO/n5pXELvbcENMrw=
Subject key identifier:   CC:DF:DA:FA:21:B1:0E:C7:79:A5:4F:11:C7:48:7B:66:25:B5:DE:CB
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       59F6B8F7C8BCB33A7073884557FDE9AD085A0804
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa
Signing time:             Wed 27 Aug 2025 08:07:56 +0000
ROA not before:           Wed 27 Aug 2025 08:02:56 +0000
ROA not after:            Wed 26 Aug 2026 08:07:56 +0000
asID:                     834
IP address blocks:        199.91.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 12:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f6:b8:f7:c8:bc:b3:3a:70:73:88:45:57:fd:e9:ad:08:5a:08:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Aug 27 08:02:56 2025 GMT
            Not After : Aug 26 08:07:56 2026 GMT
        Subject: CN=CCDFDAFA21B10EC779A54F11C7487B6625B5DECB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:eb:6b:7d:6d:df:48:69:d1:75:19:84:f4:f4:
                    3b:b9:b3:8d:30:7e:0e:9a:48:ae:4d:8e:b4:c3:18:
                    cd:54:52:0d:77:5c:6d:ac:af:cd:80:17:d2:48:a9:
                    00:54:90:ee:9c:bb:fc:27:2d:bd:fa:02:15:28:23:
                    01:d5:a5:6e:d4:90:3b:48:2d:a6:95:b2:8a:1e:d3:
                    cd:4d:9e:85:6b:ce:5e:7a:7a:68:e2:4c:69:49:80:
                    2a:77:42:05:55:7f:1b:d3:57:c6:11:4f:2f:9e:52:
                    3b:e0:f4:8e:7e:9d:3d:33:4d:80:df:4c:d5:b5:8b:
                    a8:89:e7:22:7a:ed:be:1e:9c:ee:20:6d:55:4b:1a:
                    00:69:d8:cc:44:91:b8:06:a7:06:a5:71:37:0d:3f:
                    6a:71:00:73:c6:13:de:79:67:ef:30:fd:9f:e2:14:
                    f7:36:bd:0c:46:ef:e4:c5:9d:38:ce:d6:fa:52:45:
                    b8:19:3f:1b:97:93:50:76:90:b4:57:63:5e:72:68:
                    c7:7b:2b:3d:c9:15:e0:cc:3e:75:6d:b9:a3:fd:13:
                    3d:6a:5e:c5:4f:c5:5c:0a:7c:d3:28:a8:35:21:94:
                    8e:a9:4c:33:ed:bb:99:52:f4:28:8e:6a:1f:d1:2a:
                    c8:f7:f5:0e:71:16:af:0a:45:a6:20:93:e2:09:88:
                    da:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:DF:DA:FA:21:B1:0E:C7:79:A5:4F:11:C7:48:7B:66:25:B5:DE:CB
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:97:ed:a9:c6:86:e2:20:40:fb:e0:db:09:a9:15:74:ea:d9:
         9b:ad:ee:d3:9c:7f:a4:d4:79:bc:ab:9d:9e:c6:c6:c9:f5:3b:
         e0:39:2a:38:ff:41:9e:b1:35:c0:6b:d1:43:6a:e2:6f:fb:75:
         9e:de:c8:16:5a:fb:d3:c2:db:15:e3:cf:8d:0d:a1:2f:86:3a:
         f1:60:a0:56:9e:53:31:37:d2:a2:76:5d:9c:f9:b4:91:94:12:
         8c:f4:44:01:b1:d0:b7:dd:3f:3d:00:52:f7:b1:99:10:03:64:
         69:2c:df:8a:40:b4:36:50:9d:d9:a2:b8:1a:3c:a9:cb:7c:72:
         2d:67:32:2d:17:ee:7a:1f:66:d4:19:9b:f6:c1:65:49:12:3b:
         1e:0d:b0:76:96:4a:cd:46:d0:66:0f:37:1d:c4:3f:03:6f:9d:
         bb:53:96:66:67:e4:63:12:62:c1:57:7e:e5:42:52:2b:6e:49:
         a4:8d:5f:8a:2f:06:73:4d:92:a3:1f:42:ac:35:d7:4c:54:1d:
         f9:94:c9:e0:76:10:5b:87:07:88:9f:79:7a:20:b9:2c:38:7d:
         4c:5d:e5:25:47:98:71:3a:de:42:de:66:2e:9d:d8:5d:91:be:
         e9:ea:f0:dc:54:d8:de:bb:6d:38:13:fb:7c:63:01:ea:4b:7b:
         96:6b:b7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 18:00:50 2025 by rpki-client