Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e3139352e302f32342d3234203d3e20333936333536.roa
File:                     3139332e3138382e3139352e302f32342d3234203d3e20333936333536.roa (raw, json)
Hash identifier:          3Ou3Z3xGwyEfnIHw2BKHckbOfNq4GZDXi8p9q8gjTAU=
Subject key identifier:   DE:30:C4:48:CC:38:EC:0E:AE:D0:5A:14:46:68:7A:93:03:76:DD:81
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       679671F1B77A21B9C0772C7A744669694B22B2BE
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e3139352e302f32342d3234203d3e20333936333536.roa
Signing time:             Mon 12 May 2025 12:28:33 +0000
ROA not before:           Mon 12 May 2025 12:23:33 +0000
ROA not after:            Mon 11 May 2026 12:28:33 +0000
asID:                     396356
IP address blocks:        193.188.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:96:71:f1:b7:7a:21:b9:c0:77:2c:7a:74:46:69:69:4b:22:b2:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May 12 12:23:33 2025 GMT
            Not After : May 11 12:28:33 2026 GMT
        Subject: CN=DE30C448CC38EC0EAED05A1446687A930376DD81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:47:5d:5c:00:ce:85:1c:08:b4:ed:62:f8:
                    23:91:89:b6:11:59:ee:f1:96:be:67:3b:a9:da:44:
                    4f:08:52:77:9f:f4:aa:07:3e:4b:07:0c:67:86:eb:
                    16:52:5a:d4:0f:92:35:f5:4f:5d:5d:f8:dc:34:0f:
                    1f:1a:b8:02:15:46:70:dc:a4:df:8f:63:12:08:39:
                    96:5b:ba:14:ce:9a:0d:25:df:0d:08:f5:e9:e5:61:
                    1d:a1:4d:7f:ba:5f:ff:1b:98:89:c7:2d:c3:d7:ad:
                    33:ab:a8:21:e6:13:4d:83:92:47:92:a6:2e:22:65:
                    19:62:1a:a9:13:e4:41:4e:56:e3:27:07:cf:7c:48:
                    93:51:7b:f8:e0:97:45:35:10:e5:3c:6f:f6:0b:a1:
                    62:fc:af:86:4c:65:f5:a3:47:8a:f4:08:d7:ec:e1:
                    b3:4e:cc:51:0d:ca:17:d0:8d:4c:e0:70:fd:ff:eb:
                    92:56:d6:97:1f:46:a9:07:ae:c4:77:4b:bb:0a:fc:
                    c6:c6:67:eb:84:b9:0c:91:65:44:cd:70:e6:9f:3d:
                    5d:7e:dd:95:1c:21:4b:ec:25:12:da:df:9b:52:a4:
                    69:3d:5c:15:a7:eb:34:14:c5:1a:28:d7:a6:24:d8:
                    88:7b:c3:d6:5f:8f:a6:9f:da:1b:23:e2:80:c9:c5:
                    af:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:30:C4:48:CC:38:EC:0E:AE:D0:5A:14:46:68:7A:93:03:76:DD:81
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3138382e3139352e302f32342d3234203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.188.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:dc:a2:de:97:e0:d1:b9:e2:24:ef:e8:a4:89:ba:fb:be:cb:
         e2:26:0d:59:f0:74:28:b2:0e:6f:5f:2d:4f:b6:fd:87:a1:03:
         16:05:62:bc:25:a9:79:87:00:a9:61:4b:87:f5:44:30:76:4f:
         b8:9c:4c:93:e8:b7:4d:74:2d:14:de:9e:59:1f:ac:2a:ad:61:
         0c:a6:43:45:ef:bc:d0:2d:d8:9b:5c:20:d6:82:a7:d3:59:d6:
         16:4b:19:9c:6c:4d:81:06:26:e3:cf:f6:9a:c2:89:c3:fd:ad:
         ee:fc:9e:29:c9:14:fb:20:d5:37:b5:82:11:9c:71:b0:ba:36:
         77:73:9a:6a:eb:ff:3b:6f:dd:08:d5:29:25:28:fa:50:69:0d:
         06:34:f6:fb:41:89:28:35:fa:cc:3b:35:e5:ae:29:ab:17:93:
         99:d8:5a:25:68:87:72:21:21:8a:97:af:a8:1b:77:98:3f:f2:
         8c:d5:1c:68:99:4e:14:99:51:94:b6:2e:1a:86:18:00:a1:f7:
         ff:9c:52:d4:b7:84:6a:59:0e:c9:a0:3d:e8:c6:f5:14:03:60:
         90:a7:d6:4e:62:ba:d0:37:7b:33:95:57:49:e0:7d:e6:e9:68:
         49:cd:57:7a:ae:fe:e4:a1:c6:92:b5:47:89:76:ba:bd:c3:15:
         ee:22:13:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:08:48 2025 by rpki-client