Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e203232343237.roa
File:                     3139392e36382e3231382e302f32342d3234203d3e203232343237.roa (raw, json)
Hash identifier:          FnTsmj9cJIz+Abn6HHcTDFLJ9gdlJqpMg//fwXiMTaU=
Subject key identifier:   69:E1:EC:2A:FE:3C:EC:0C:09:40:26:0A:3E:36:7E:6B:63:80:63:31
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       6F6ED434BD224D3A5B5375579F1E5B6E69028D7D
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e203232343237.roa
Signing time:             Thu 22 May 2025 08:59:34 +0000
ROA not before:           Thu 22 May 2025 08:54:34 +0000
ROA not after:            Thu 21 May 2026 08:59:34 +0000
asID:                     22427
IP address blocks:        199.68.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 02:58:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6e:d4:34:bd:22:4d:3a:5b:53:75:57:9f:1e:5b:6e:69:02:8d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: May 22 08:54:34 2025 GMT
            Not After : May 21 08:59:34 2026 GMT
        Subject: CN=69E1EC2AFE3CEC0C0940260A3E367E6B63806331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:12:89:2a:41:97:ba:fe:b7:fe:2c:31:35:1d:
                    15:ce:aa:2f:66:57:a8:37:ba:4f:eb:a6:70:a8:57:
                    ff:d1:1d:01:5e:9f:af:c6:d3:6f:9e:89:0a:c2:48:
                    f6:ad:af:9f:b2:21:7a:b0:c4:ba:25:bb:41:6b:1e:
                    e9:57:8b:55:c8:d0:70:80:c2:c1:f5:a2:4b:5e:29:
                    2a:06:17:fa:18:e7:3d:99:2d:9e:58:6a:f4:d2:de:
                    02:ab:f8:84:01:28:46:61:0b:37:86:b0:c9:96:a4:
                    cb:9f:1e:e7:85:68:38:48:70:76:aa:98:31:77:bf:
                    3a:40:ce:7b:c7:7d:33:e7:2b:2d:0c:7b:d4:68:07:
                    b4:8d:25:fb:63:b2:8b:85:56:bb:ab:16:ce:7f:93:
                    57:06:d2:81:ab:cd:8d:8a:ac:88:3c:3c:d4:50:f6:
                    5e:f0:a0:78:c9:66:ce:57:7d:76:19:64:ba:2b:46:
                    18:6a:d7:9a:f5:0c:11:96:56:cc:c7:f5:60:01:82:
                    f0:8e:c6:61:c8:36:a6:17:66:40:c5:e9:0a:9c:5b:
                    89:46:e6:68:ba:fa:54:ab:1a:9c:e8:05:a5:02:19:
                    db:e3:1f:e8:82:d3:26:c9:a2:c9:ec:94:68:5b:1b:
                    03:2a:38:ba:be:3b:44:08:b8:33:4d:07:4c:7b:2c:
                    5c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E1:EC:2A:FE:3C:EC:0C:09:40:26:0A:3E:36:7E:6B:63:80:63:31
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231382e302f32342d3234203d3e203232343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:e6:23:31:7e:a7:fa:85:d5:47:c1:b7:93:36:a0:22:d5:a4:
         17:17:4e:f7:66:dc:e0:b7:c7:57:de:d3:1b:17:fc:71:44:41:
         d5:bc:60:73:4b:b7:38:45:49:a9:82:18:04:f7:0e:3b:df:a3:
         e6:08:50:0c:13:b5:c2:db:63:9a:2f:ce:ab:c6:cb:33:0a:b3:
         46:5e:a2:79:63:90:33:2f:2f:71:09:31:2e:e8:2c:10:37:e7:
         e1:24:04:d0:dc:0e:3d:e3:97:7c:55:7a:9f:c0:be:41:80:42:
         0f:f1:9a:fa:d6:91:b7:4d:17:dc:d8:65:9d:d5:aa:1b:58:56:
         d7:3e:4f:f3:a5:d6:6a:31:74:1b:38:19:bf:29:8f:7f:52:80:
         dd:99:60:92:49:b8:d9:e9:60:93:8f:fc:bb:63:81:29:a2:75:
         10:39:15:ee:9a:ba:4f:7a:cc:34:20:c9:85:4d:5a:f0:cf:b6:
         a2:cc:43:4d:3a:f4:6b:0c:c1:6c:d8:ed:0b:a7:b9:50:2d:7e:
         57:f7:7e:94:47:0e:45:93:4e:fc:68:22:6b:b5:63:89:67:81:
         50:68:cf:95:32:96:86:f7:04:01:9e:89:04:90:f6:47:67:6d:
         ef:77:39:2b:7f:17:3f:67:39:bb:95:ef:62:fc:47:22:45:fc:
         2a:dd:a0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 12:35:14 2025 by rpki-client