Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
File:                     3139382e33372e3130342e302f32312d3234203d3e203137323136.roa (raw, json)
Hash identifier:          cXRB7hpLk1Qt3mXeC6x1W2c7cS90h9S3HROP/gz6Tp8=
Subject key identifier:   37:FA:9B:B5:C5:DE:22:FC:34:FC:ED:0F:7B:47:9D:3A:1E:B2:42:6E
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       6C83F1A401C3E00C38C9CCA936CED4D93E6BE98B
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa
Signing time:             Mon 01 Sep 2025 13:29:45 +0000
ROA not before:           Mon 01 Sep 2025 13:24:45 +0000
ROA not after:            Mon 31 Aug 2026 13:29:45 +0000
asID:                     17216
IP address blocks:        198.37.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 11 Sep 2025 15:14:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:83:f1:a4:01:c3:e0:0c:38:c9:cc:a9:36:ce:d4:d9:3e:6b:e9:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep  1 13:24:45 2025 GMT
            Not After : Aug 31 13:29:45 2026 GMT
        Subject: CN=37FA9BB5C5DE22FC34FCED0F7B479D3A1EB2426E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:53:ac:82:c9:78:f7:9e:b9:26:65:4b:fe:
                    d9:b9:b0:1b:8c:97:99:0a:d6:6e:b8:38:cd:bb:7c:
                    4a:bb:2d:c8:c9:98:22:fe:92:45:a2:4b:c8:ad:54:
                    bb:13:49:bc:87:3c:41:33:5c:6a:28:06:08:67:35:
                    8b:b4:12:43:6c:f7:0c:c5:16:a7:a6:3f:f1:97:a5:
                    e2:14:1b:3d:ff:cc:6f:28:00:da:92:d6:46:fd:87:
                    11:4e:22:45:c1:48:eb:46:37:f3:00:3d:86:53:bd:
                    cf:8d:06:3f:a4:ca:79:78:d4:5d:4a:bc:76:45:70:
                    c4:a1:06:27:41:0a:51:d5:65:9a:b2:53:c3:9f:33:
                    2f:e4:00:fb:61:0d:33:15:ec:13:96:49:bc:b0:9f:
                    2e:68:a3:2b:63:b6:20:26:46:d3:e0:c7:81:35:50:
                    0a:f6:f8:44:ba:b9:78:2e:d6:a4:6c:c3:3d:1e:c3:
                    b6:67:0b:eb:95:a8:3a:5d:7c:6c:a8:95:af:9d:c3:
                    2d:91:14:eb:dd:29:c4:55:5f:e6:ea:ee:7b:5e:b4:
                    ba:04:87:4e:8c:63:93:eb:1a:1c:dd:0d:0b:f6:dd:
                    5a:bd:f6:30:2e:22:f6:40:7e:f3:e3:e8:05:7b:6b:
                    0b:e3:a1:b8:47:74:48:4c:c3:b4:33:51:1e:01:f7:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FA:9B:B5:C5:DE:22:FC:34:FC:ED:0F:7B:47:9D:3A:1E:B2:42:6E
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3130342e302f32312d3234203d3e203137323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         72:42:48:e7:83:da:1e:28:b8:47:d7:54:7b:e4:c3:e1:a1:04:
         83:bd:44:03:e6:29:02:63:97:e2:5a:c6:03:64:8f:16:37:6d:
         ad:ce:d1:ae:d0:58:51:45:d7:62:e5:68:77:27:aa:a5:cb:a2:
         ed:e3:2f:de:ee:fb:dd:a0:d1:50:da:2f:c0:f8:dd:75:02:68:
         4b:91:eb:3e:8e:56:e9:ae:a0:6f:ca:15:f8:46:db:1e:71:9d:
         4f:e2:73:de:45:5d:49:51:e2:cf:b8:9c:20:48:b1:ed:be:dd:
         61:bf:b0:9f:74:91:d8:60:2b:a5:fb:12:dd:8a:fe:82:3f:e9:
         29:4c:39:47:27:eb:f9:e5:cc:14:e7:80:9e:1d:e4:9d:b2:55:
         e7:d7:35:71:36:68:4e:60:ba:64:78:02:51:cb:8e:13:aa:c1:
         3d:d9:e5:a7:06:3b:83:d4:01:57:13:ab:46:fe:d0:db:0d:87:
         c1:5e:4d:27:51:96:32:50:e6:f5:d9:85:75:32:f3:34:28:76:
         54:7b:3b:bb:9b:52:fb:ce:12:3d:74:aa:86:dc:c7:61:2b:5b:
         a7:da:3e:9c:7e:1e:33:f9:a0:18:93:54:ba:d0:ff:45:b5:76:
         61:5e:e5:3e:b0:73:e2:48:00:f5:9e:24:9a:8d:e2:e9:c6:d9:
         80:c4:6e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:20:08 2025 by rpki-client