Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3137352e302f32342d3234203d3e203632363130.roa
File:                     3139342e33342e3137352e302f32342d3234203d3e203632363130.roa (raw, json)
Hash identifier:          IwixoZwYx0QtSGKEbIqa9OnU3jM4TbCFDO/ZnMuMWLA=
Subject key identifier:   F3:93:8E:FD:9B:A9:28:FD:EB:BC:03:80:42:AD:99:4B:04:36:EF:70
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       68D6B9205F5FF2930C80647E7D4B6AD124D2CE22
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3137352e302f32342d3234203d3e203632363130.roa
Signing time:             Mon 12 May 2025 02:47:51 +0000
ROA not before:           Mon 12 May 2025 02:42:51 +0000
ROA not after:            Mon 11 May 2026 02:47:51 +0000
asID:                     62610
IP address blocks:        194.34.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:45:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d6:b9:20:5f:5f:f2:93:0c:80:64:7e:7d:4b:6a:d1:24:d2:ce:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: May 12 02:42:51 2025 GMT
            Not After : May 11 02:47:51 2026 GMT
        Subject: CN=F3938EFD9BA928FDEBBC038042AD994B0436EF70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:62:42:30:6f:e0:c4:0c:ab:d1:9f:6a:f6:
                    6b:97:01:16:34:a6:c9:02:7b:73:c0:f9:5c:11:bf:
                    3e:f6:08:e6:2d:79:6c:a9:58:20:51:24:6f:0e:0d:
                    05:bf:a4:18:8b:4a:03:d1:fd:5f:cb:8d:65:02:5d:
                    1b:bd:b0:fd:4f:75:e1:78:72:c1:1e:7e:05:02:cd:
                    f9:d9:c9:25:8f:93:43:d2:92:8a:80:e5:56:b1:b9:
                    78:49:59:06:a7:02:60:2a:46:b0:6f:80:0f:81:f4:
                    3a:77:a4:e2:38:d2:32:ca:47:3c:eb:69:6b:1a:ec:
                    53:62:48:9f:22:ba:d8:cf:5c:43:49:17:78:69:23:
                    81:c0:56:ab:d1:d9:5a:03:8f:5d:f3:23:0c:b0:35:
                    26:3f:a6:5e:60:4b:af:e5:6e:80:0b:d6:27:d9:31:
                    42:01:c3:2c:3b:b2:c7:60:60:dc:5a:7c:49:fc:65:
                    7c:ae:b6:ab:bf:44:52:53:09:c2:92:6a:94:ad:2e:
                    46:49:32:4b:2a:19:f4:cb:1c:ca:a4:b5:45:c4:b7:
                    9a:18:50:23:80:f9:77:be:2f:c2:4c:b2:5a:84:9e:
                    29:17:c6:37:60:c6:2a:07:47:ba:ac:13:1e:70:ac:
                    ac:09:cf:62:28:6b:a5:3f:25:cb:5c:26:de:79:5c:
                    7d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:93:8E:FD:9B:A9:28:FD:EB:BC:03:80:42:AD:99:4B:04:36:EF:70
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139342e33342e3137352e302f32342d3234203d3e203632363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.34.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:ff:38:a9:e1:0a:9f:7e:02:3f:93:5c:e6:41:e3:2f:46:5a:
         9c:e3:3f:6d:48:f8:57:82:65:7f:1b:05:70:2a:18:3e:07:86:
         c8:e1:20:3d:3a:fa:d7:9e:40:84:af:fd:4a:db:da:72:c6:fc:
         0f:08:75:ce:5a:98:9c:f6:be:e1:f8:55:ef:7b:51:d0:7f:bb:
         58:b1:65:52:a8:b0:77:08:50:d4:b0:2d:f9:0f:a4:e2:68:67:
         91:d2:2e:fb:71:41:b8:86:dc:fb:f7:6e:ea:38:c6:0e:6e:6d:
         9f:03:fa:c1:95:06:37:06:4d:01:96:20:f5:2a:03:a0:c5:89:
         e4:7e:cd:16:c1:ba:13:1d:69:40:3c:6f:fb:47:68:c2:5c:a1:
         4c:94:47:e7:cb:08:a6:4b:6d:17:88:55:8b:7f:80:39:67:dc:
         de:42:56:84:32:99:16:0e:ab:9e:60:c5:d4:ad:b3:4f:4f:fc:
         94:15:59:32:91:88:19:75:88:02:39:cc:02:76:c0:02:3d:ca:
         0e:50:8b:7c:2c:66:22:87:be:02:4b:66:1f:9e:63:31:82:63:
         52:92:d9:f8:a0:93:d5:a6:3c:95:01:de:a1:a9:78:0d:56:c4:
         1e:c8:7c:e5:34:45:45:5c:db:98:60:b8:5e:ea:10:d7:e4:ea:
         a3:21:f6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:41:57 2025 by rpki-client