Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3138322e302f32342d3234203d3e203632363130.roa
File:                     3139342e33332e3138322e302f32342d3234203d3e203632363130.roa (raw, json)
Hash identifier:          pk01p9USAbpia6HLR9eVLLwEYQ32hQanI7RvpjY1WQc=
Subject key identifier:   94:36:17:5C:BF:17:2E:18:B9:CD:7B:23:50:EB:AA:DB:16:E6:BF:62
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       248F6B79B896ADC52C1F8F2508FAFC3411668200
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3138322e302f32342d3234203d3e203632363130.roa
Signing time:             Mon 12 May 2025 02:47:52 +0000
ROA not before:           Mon 12 May 2025 02:42:52 +0000
ROA not after:            Mon 11 May 2026 02:47:52 +0000
asID:                     62610
IP address blocks:        194.33.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:32:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:8f:6b:79:b8:96:ad:c5:2c:1f:8f:25:08:fa:fc:34:11:66:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May 12 02:42:52 2025 GMT
            Not After : May 11 02:47:52 2026 GMT
        Subject: CN=9436175CBF172E18B9CD7B2350EBAADB16E6BF62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:5d:0d:11:10:88:bd:1f:91:a9:87:6f:9e:d6:
                    8d:b5:cc:81:21:0c:79:a0:5a:30:e0:47:2d:6c:c1:
                    0f:5b:c3:35:32:c5:bb:f1:4b:5c:15:32:29:32:a5:
                    08:e1:cb:74:ce:38:ea:ba:60:17:7a:8d:4b:69:b8:
                    d8:f7:74:f1:91:2c:23:d9:ef:92:5a:f8:ec:a0:b7:
                    40:f1:d5:75:c3:cd:84:e8:90:0c:b7:b7:39:dd:06:
                    13:f4:61:66:5c:4c:22:f3:e8:72:cb:95:8a:ba:e6:
                    a9:3e:3d:3b:0b:be:53:03:c9:f0:2e:07:19:51:1e:
                    89:4a:0a:e1:3f:44:aa:4c:9c:ee:76:a8:a4:e8:57:
                    38:a7:76:19:1a:82:70:ec:23:c6:da:c8:c7:c3:ff:
                    f5:9b:59:59:e4:e2:82:4e:82:89:6c:7c:be:34:33:
                    9c:97:92:68:d2:7d:2b:87:8e:9f:36:aa:8b:1e:4c:
                    0a:36:c8:12:80:f6:2d:8e:82:67:e2:0b:17:90:b2:
                    13:e3:ad:53:46:f1:91:1a:ba:94:c2:58:7f:81:7f:
                    5a:cc:c6:37:53:aa:ec:7e:93:28:5b:33:ce:e1:d5:
                    8b:11:71:b7:9f:c1:0a:93:1c:15:b6:d3:44:5c:50:
                    06:e6:d5:47:e1:ab:9f:6e:c4:1e:07:5a:a4:9e:b5:
                    3e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:36:17:5C:BF:17:2E:18:B9:CD:7B:23:50:EB:AA:DB:16:E6:BF:62
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33332e3138322e302f32342d3234203d3e203632363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.33.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:70:0c:fb:1a:9a:86:d5:9f:11:e1:6d:5e:04:a5:4a:d5:f7:
         a6:4b:00:76:ab:44:52:de:74:ea:90:4c:cc:8f:8f:4f:5c:32:
         7e:ab:be:70:8f:e4:c2:db:ff:b8:9c:0b:e8:cb:d9:3d:cf:53:
         e4:46:94:71:96:c2:8b:21:e9:e4:49:48:29:f2:62:83:d0:e8:
         83:ed:00:56:cc:c7:08:99:3d:50:d7:6a:ff:f0:f1:e0:b7:e0:
         2c:1d:df:42:37:03:28:25:34:bb:1f:cc:68:3a:c1:ae:12:f5:
         d7:20:cc:61:5e:e6:33:3c:7b:12:97:a0:1a:de:45:ce:6c:b0:
         07:fd:c1:4f:d4:ed:20:f9:cd:8d:47:a1:22:2e:34:4a:0a:10:
         27:38:45:9a:19:9a:49:67:98:a4:76:1e:f5:87:ba:88:ef:a7:
         ae:55:a2:50:ca:bb:5b:76:d9:0a:1a:3f:ee:82:94:6e:9d:11:
         e4:55:26:9c:f0:77:20:cc:3d:f4:55:79:c6:29:d3:7c:25:2c:
         7e:a4:f9:73:d8:f9:eb:71:75:14:b3:78:a4:42:c6:cc:d9:cb:
         36:f3:41:ee:d9:ed:20:6c:37:09:25:1f:e3:a0:b4:a5:f1:15:
         36:45:d8:3e:f4:44:43:15:2c:7c:31:d8:1e:ee:f3:55:56:f6:
         94:2a:d5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:39:44 2025 by rpki-client