Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20393936.roa
File:                     3139352e37382e35372e302f32342d3234203d3e20393936.roa (raw, json)
Hash identifier:          +0PxP2a1nE8+7W8z+E2MFtEGp9/2DkoOAcmfyh8MLl4=
Subject key identifier:   5D:F2:D3:32:30:BD:80:53:32:C0:DC:7B:1E:04:E4:8C:23:C9:3B:02
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       56ED5C1543031E43040669B93CA5D7983CBBD9FA
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20393936.roa
Signing time:             Mon 17 Mar 2025 15:28:26 +0000
ROA not before:           Mon 17 Mar 2025 15:23:26 +0000
ROA not after:            Mon 16 Mar 2026 15:28:26 +0000
asID:                     996
IP address blocks:        195.78.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 20:26:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:ed:5c:15:43:03:1e:43:04:06:69:b9:3c:a5:d7:98:3c:bb:d9:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Mar 17 15:23:26 2025 GMT
            Not After : Mar 16 15:28:26 2026 GMT
        Subject: CN=5DF2D33230BD805332C0DC7B1E04E48C23C93B02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:41:8a:14:c4:94:39:fa:90:b6:7e:a5:bd:8f:
                    48:05:f2:8a:dc:49:b6:6c:07:3e:24:54:e9:84:87:
                    8e:9a:e9:49:a3:3a:ab:28:30:3a:df:6c:a4:96:54:
                    83:05:7d:03:9e:36:9a:12:82:be:74:37:83:ff:a5:
                    b1:1c:2b:9b:c1:0b:f6:82:14:29:6d:88:2f:3d:f3:
                    83:c8:d1:80:76:83:5b:6e:c8:fc:c7:e7:2f:a8:a3:
                    a9:a5:69:9a:ed:9f:80:8b:7d:6a:d7:f9:0c:d0:9d:
                    5c:21:ad:2b:ed:7c:52:ac:fa:c5:21:94:d1:da:6d:
                    c3:48:64:6a:84:86:bb:39:62:68:ee:70:18:15:52:
                    4a:07:b2:ec:12:0c:40:05:6c:de:5a:a7:6c:45:0f:
                    bb:a9:ff:f7:21:45:fe:63:bc:47:10:71:46:c8:ce:
                    e3:5e:e9:4c:74:27:b6:ef:4e:97:33:d8:bf:a1:5f:
                    da:d1:1a:45:06:1f:be:38:a5:6c:da:8e:47:1f:dc:
                    6c:d6:b4:d3:0c:9d:73:e2:e5:b8:09:17:17:07:a2:
                    8f:2b:dd:56:33:1e:f8:b5:81:3c:d5:8d:a7:23:b7:
                    44:85:cb:63:99:e3:3f:9a:21:af:6e:c3:78:2b:60:
                    a3:f4:12:30:13:b3:be:aa:41:25:6b:d8:e3:27:45:
                    ea:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:F2:D3:32:30:BD:80:53:32:C0:DC:7B:1E:04:E4:8C:23:C9:3B:02
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20393936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c3:cf:83:be:95:eb:e6:17:d8:40:69:3e:16:53:3b:2d:24:
         da:3e:89:25:23:0f:1f:72:b1:70:25:d8:b5:7f:86:37:e2:49:
         c8:32:d0:fe:36:29:cd:ac:c4:d3:49:04:be:5a:fa:5a:ac:62:
         02:4f:f2:79:fc:84:11:c6:d5:a9:87:00:c0:64:7e:77:b6:fe:
         e9:8e:09:de:96:b5:33:cf:b8:fd:f8:d1:17:e3:59:cb:0e:08:
         06:c1:00:1c:a1:95:f5:93:6c:d3:4c:4a:58:3d:fb:6f:aa:4b:
         37:4e:be:48:b4:a0:b0:1d:5c:45:6a:50:80:af:5e:ec:02:28:
         ae:1e:53:a9:9b:cd:b6:5d:a5:bb:07:a5:ef:83:63:76:d7:db:
         ae:31:16:51:be:ff:f5:ee:c3:36:df:dd:93:57:04:86:3a:33:
         e5:2c:1b:28:bb:88:00:be:3d:a4:48:c5:bc:f3:5a:b7:2d:16:
         d6:83:27:33:61:83:13:de:1e:23:eb:75:b9:23:8e:30:1d:90:
         a0:71:27:58:b9:a2:21:f5:84:2e:86:e5:f2:89:92:15:0c:8c:
         4b:1c:f3:dd:7d:95:84:88:e3:03:09:61:e4:ad:df:17:37:1f:
         c8:95:ac:f2:48:f4:51:48:a2:ba:6b:69:d0:67:75:da:f4:9d:
         53:94:df:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:27:32 2025 by rpki-client