Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203235313938.roa
File:                     3139392e39312e3130312e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          Xd6Uz2+cpxVtjNL2CaWhiIubJGs1xXJsDxuRuGJAMPg=
Subject key identifier:   A0:79:43:E8:8C:86:14:D3:E7:F3:2C:36:49:FE:46:4C:B4:6B:73:66
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       1162755CF5B53C88F51C2E7B0B2EB934ABA5BC0B
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203235313938.roa
Signing time:             Wed 27 Aug 2025 08:05:17 +0000
ROA not before:           Wed 27 Aug 2025 08:00:17 +0000
ROA not after:            Wed 26 Aug 2026 08:05:17 +0000
asID:                     25198
IP address blocks:        199.91.101.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 08 Sep 2025 12:08:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:62:75:5c:f5:b5:3c:88:f5:1c:2e:7b:0b:2e:b9:34:ab:a5:bc:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Aug 27 08:00:17 2025 GMT
            Not After : Aug 26 08:05:17 2026 GMT
        Subject: CN=A07943E88C8614D3E7F32C3649FE464CB46B7366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:2d:13:dd:df:a7:8a:fc:8e:c4:3c:7b:61:
                    ff:f4:38:63:35:4d:e0:fc:15:a9:af:4e:86:8f:aa:
                    47:c6:35:54:3b:57:5d:c8:70:ed:8a:5f:eb:19:a6:
                    29:d3:47:cc:3b:8e:36:e6:24:5b:d0:2e:9b:34:1a:
                    48:67:54:b4:42:95:38:5f:f2:65:19:a8:a4:09:fb:
                    4a:37:a7:aa:58:ef:c3:ec:a6:58:53:6f:9b:91:23:
                    8a:c2:7d:d0:04:af:03:69:78:49:e5:64:dc:fd:61:
                    20:b0:ba:22:b1:6b:86:0d:ba:47:77:ab:b4:99:0d:
                    57:45:0f:8c:15:43:9c:4b:93:eb:08:55:8d:6c:35:
                    f0:94:63:8c:e4:9e:7b:0a:c5:c8:60:4a:61:1b:26:
                    05:6c:8a:c0:9e:c8:48:4f:74:42:c2:02:b0:3f:ea:
                    66:3e:a3:1c:7d:7f:1b:5f:5d:61:03:1a:d2:f2:ed:
                    be:9a:b6:88:f7:e7:07:a0:b3:49:28:e2:8e:d5:37:
                    70:b7:d1:64:25:5c:b5:97:25:b5:f0:f8:fc:92:c1:
                    33:2b:b2:80:3d:39:33:cb:0c:20:e2:54:6a:84:68:
                    04:86:c6:e3:62:23:ff:aa:60:a8:cf:a7:27:b8:52:
                    9f:28:82:89:19:dc:47:b7:a6:75:74:d8:28:c9:72:
                    99:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:79:43:E8:8C:86:14:D3:E7:F3:2C:36:49:FE:46:4C:B4:6B:73:66
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130312e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:ba:69:12:61:06:d5:ed:d2:c3:b7:33:20:eb:d3:33:ab:2f:
         80:4c:fd:5c:7b:4a:c7:99:27:43:e6:35:60:be:cb:a1:d9:27:
         f4:b4:af:3f:f0:d6:44:37:8f:da:f3:16:cc:3f:93:4e:c2:0f:
         48:75:73:44:12:e4:cc:34:53:e5:b9:21:21:cd:70:b5:34:d9:
         af:01:5a:24:54:85:dc:4d:12:96:00:57:b3:b9:dd:06:92:0b:
         e6:7c:d6:ee:d5:77:88:77:d4:3d:b4:3f:0b:06:41:65:66:da:
         d9:a4:f1:00:9c:f8:45:3c:fb:17:68:86:7b:df:cb:b9:5d:5e:
         12:57:e5:8d:90:e7:d7:a8:e3:18:fc:66:18:0a:2e:22:35:fa:
         60:2c:42:e6:35:e9:e1:45:39:3d:03:6a:44:09:0b:64:f3:0f:
         f3:5c:b2:40:2c:e0:ee:a0:e1:f0:d1:16:73:dc:33:28:da:81:
         55:4c:c2:11:80:2b:a4:a8:73:c7:6f:ef:fe:6d:57:3a:c6:2b:
         47:a4:69:d9:3a:cb:78:1a:10:a9:30:c2:ea:f2:b0:c7:9c:cf:
         82:1e:ea:f3:bc:13:63:37:69:6c:e0:40:3a:bc:a2:89:f7:01:
         59:01:ff:c9:ba:84:b3:00:0a:dc:0a:f8:30:77:42:e7:21:f1:
         4b:77:03:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:39:54 2025 by rpki-client