Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3134392e302f32342d3234203d3e2038313030.roa
File:                     3139322e3130392e3134392e302f32342d3234203d3e2038313030.roa (raw, json)
Hash identifier:          awGT7ByFX1hnlFn1Z8rV7hS5i/Sf36pt0865icMhouI=
Subject key identifier:   CA:F4:5B:E4:8D:54:33:0F:16:96:F0:69:13:8F:F1:39:66:5E:B9:87
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       1FE8FB351550F7F5E466DE3962BD2EA048D6FC0C
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3134392e302f32342d3234203d3e2038313030.roa
Signing time:             Thu 09 Jan 2025 04:28:23 +0000
ROA not before:           Thu 09 Jan 2025 04:23:23 +0000
ROA not after:            Thu 08 Jan 2026 04:28:23 +0000
asID:                     8100
IP address blocks:        192.109.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 12:21:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e8:fb:35:15:50:f7:f5:e4:66:de:39:62:bd:2e:a0:48:d6:fc:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jan  9 04:23:23 2025 GMT
            Not After : Jan  8 04:28:23 2026 GMT
        Subject: CN=CAF45BE48D54330F1696F069138FF139665EB987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:b1:52:99:ab:73:07:2c:ac:ab:2e:5b:0e:63:
                    92:41:7f:1e:7e:6f:c5:27:65:df:a4:3d:8e:52:44:
                    a9:e3:5d:3f:be:1b:53:69:50:f1:c9:77:b5:d4:77:
                    5f:18:1d:59:6f:5b:ab:5d:e1:3f:2d:92:92:c4:22:
                    40:40:6c:11:77:94:7c:e9:f1:05:79:d8:86:fc:eb:
                    5e:54:8f:bb:31:ab:96:06:76:47:59:0b:19:22:0f:
                    59:5c:09:e0:cc:bc:af:a9:49:5c:73:45:b9:82:83:
                    12:33:3e:d7:3d:e5:57:3d:53:59:be:88:92:fe:a2:
                    1f:56:cb:68:a2:93:54:91:d8:37:0f:78:ea:a9:24:
                    d6:2f:e8:23:85:eb:29:ea:4d:14:e6:ec:17:9f:6a:
                    cc:68:26:47:5a:a9:c4:5a:e1:e7:8e:c1:a1:80:51:
                    6f:a0:eb:dd:83:68:dd:d7:bf:a9:ff:7a:eb:b9:89:
                    9c:50:cf:d8:4f:fc:cc:90:e5:87:41:4a:2f:08:32:
                    3b:88:03:5c:ff:95:0a:ac:a9:67:91:7e:d0:fa:e0:
                    2b:ce:55:3e:a9:99:14:50:bb:a2:72:5c:2a:a5:87:
                    94:b5:4b:0e:8b:cd:8f:f0:ae:0a:1f:f6:7e:bf:05:
                    e5:9c:24:3f:8b:b6:8d:a8:71:dc:22:31:d7:a4:00:
                    65:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F4:5B:E4:8D:54:33:0F:16:96:F0:69:13:8F:F1:39:66:5E:B9:87
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139322e3130392e3134392e302f32342d3234203d3e2038313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.109.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:1e:6b:40:6a:c2:ce:1b:70:c7:4c:e2:51:7e:0d:f8:d8:f7:
         ca:5f:9f:6c:4b:28:3e:6b:8f:b6:dd:15:47:05:91:1a:f8:18:
         60:49:90:1c:a7:68:66:de:b4:6e:f4:92:09:4d:1d:02:d4:2a:
         3b:37:7b:ee:09:49:5d:3e:f7:eb:13:37:e7:2d:e3:ef:fd:f9:
         4b:ba:bc:6a:99:2a:6f:5f:cb:e1:7a:4d:59:22:ce:f2:69:4b:
         c8:1e:fd:9b:f0:4f:67:8d:a5:90:81:b5:e9:92:60:5f:db:78:
         be:1e:bc:ef:4b:bf:0f:ab:71:d9:c3:12:0d:b2:d5:d5:5e:7f:
         84:07:a6:44:52:49:d3:d5:bd:0a:37:e6:bb:55:c9:06:b6:82:
         87:08:64:e1:4b:db:12:bb:88:44:74:c3:f7:07:7a:c6:1f:94:
         88:d2:5e:99:48:e8:fe:42:63:8e:74:b9:a4:a5:00:da:54:60:
         68:d3:91:b4:1e:81:bd:b5:e4:58:1a:90:7c:fd:8b:13:68:ed:
         ca:d2:89:a0:ee:ae:89:12:b4:72:6b:20:0b:d8:96:8e:fc:6f:
         5b:2f:15:bc:83:d8:1b:5d:a9:a9:04:a8:28:46:cb:40:99:25:
         e7:17:42:df:06:06:1a:65:9a:29:17:67:e2:a3:4d:1c:97:d9:
         a9:60:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 18:11:48 2025 by rpki-client