Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20393739.roa
File:                     3139392e36382e3231372e302f32342d3234203d3e20393739.roa (raw, json)
Hash identifier:          RP6lK7bm7S/H3YuiyKgKmZxkFNELvt8NwQ75xW7PwAk=
Subject key identifier:   A3:46:CC:4E:4C:45:DB:61:DA:14:72:69:B3:64:D6:BE:EC:3D:E6:79
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       1159960CE6DC3AE4418B969E15A3513AD71E9407
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20393739.roa
Signing time:             Tue 18 Mar 2025 15:21:34 +0000
ROA not before:           Tue 18 Mar 2025 15:16:34 +0000
ROA not after:            Tue 17 Mar 2026 15:21:34 +0000
asID:                     979
IP address blocks:        199.68.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:05:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:59:96:0c:e6:dc:3a:e4:41:8b:96:9e:15:a3:51:3a:d7:1e:94:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Mar 18 15:16:34 2025 GMT
            Not After : Mar 17 15:21:34 2026 GMT
        Subject: CN=A346CC4E4C45DB61DA147269B364D6BEEC3DE679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4a:47:0e:0d:93:af:4a:02:12:ef:f0:0b:32:
                    15:e6:59:03:5e:d5:22:13:aa:fb:a2:3c:c2:51:ad:
                    e0:17:f0:ae:84:cb:cd:8a:0c:86:a3:8c:42:54:e8:
                    88:06:d2:e6:b8:b0:6f:4c:db:54:b5:cd:89:11:f6:
                    fc:17:c3:7b:92:4d:d7:bc:f8:02:78:e6:74:73:6d:
                    d8:8b:b9:81:da:b2:9f:f1:2a:a9:f1:ac:2b:f8:0d:
                    a5:e1:86:fc:95:d5:c9:d1:95:50:f1:f5:f9:b8:7d:
                    ce:0b:cb:60:55:3e:1f:c3:29:98:42:01:c0:a8:51:
                    93:b8:07:0b:c8:45:ec:d2:a4:e6:a1:83:66:0b:1e:
                    c3:ca:01:8a:78:3f:c2:a5:59:81:96:d9:8a:d3:62:
                    3c:7a:d9:8c:1e:ab:b7:1e:b9:a3:c3:40:41:aa:61:
                    0f:d9:f8:60:18:cb:06:b8:c2:45:98:07:a8:ef:5a:
                    6c:58:a8:19:96:48:b0:98:d8:13:32:44:a5:aa:d1:
                    36:8f:c0:43:3c:1d:2f:c0:34:f3:c0:e6:30:e2:05:
                    65:8e:fd:7a:16:2e:6c:a7:74:5c:e0:15:f3:de:1f:
                    93:ce:5e:45:32:9e:78:58:4b:90:6c:f0:2c:8c:19:
                    1f:4d:d8:97:64:b9:cd:a2:84:11:99:c3:2e:d2:5b:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:46:CC:4E:4C:45:DB:61:DA:14:72:69:B3:64:D6:BE:EC:3D:E6:79
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231372e302f32342d3234203d3e20393739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:9e:04:23:c6:22:f0:7a:d4:b6:7a:cd:45:ef:ef:f9:e1:9d:
         70:65:b7:77:2e:c2:47:28:f8:44:7d:b9:80:28:96:d3:d2:2a:
         ca:fd:27:4e:8d:44:08:c2:bf:ae:bf:92:1b:8e:da:a9:92:7a:
         86:3e:03:0c:9d:c9:0b:4f:1d:ed:b3:28:fa:36:11:1e:a4:be:
         89:8c:6a:45:6e:60:21:86:7e:24:c8:ca:12:93:e5:5f:bf:7b:
         69:27:d9:d7:91:f7:87:b6:2e:bd:d3:a0:81:34:87:6b:22:bf:
         03:a7:a2:a0:1a:4a:6a:6c:bb:96:90:d7:c2:92:c3:a2:07:e1:
         29:cb:54:f0:37:4c:2b:39:91:d3:8d:92:c1:ca:a2:1a:bc:bc:
         96:54:90:10:82:67:cf:ca:fd:45:7a:77:1a:59:0b:29:b7:61:
         a7:e9:90:f6:10:e9:7d:ed:fe:1f:23:3f:8d:d2:b6:aa:65:5a:
         c6:51:b8:f2:3f:5a:ea:d9:66:91:51:04:5d:ed:8e:1c:ee:c4:
         3a:ed:30:c8:95:4a:07:23:41:cf:55:8b:af:b4:f2:98:24:72:
         3c:06:ae:e2:a0:d1:63:12:d2:84:b9:73:94:d5:eb:d3:6d:c3:
         43:47:73:b0:07:aa:dc:df:17:29:3a:39:1e:c0:fc:40:88:09:
         f0:4e:04:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:56:58 2025 by rpki-client