Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
File:                     3139382e33372e3131302e302f32342d3234203d3e203533333430.roa (raw, json)
Hash identifier:          2L/lPA2hzv06bA6f6OmFW2Yw/7mDpDO4N5PRrchHsfE=
Subject key identifier:   9E:98:74:F8:BD:01:2D:76:2C:98:C6:E0:E9:93:01:C4:D4:DD:A9:5D
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       59C29C72ED43D5F52A70D16195F9233598543ABD
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa
Signing time:             Mon 01 Sep 2025 13:29:45 +0000
ROA not before:           Mon 01 Sep 2025 13:24:45 +0000
ROA not after:            Mon 31 Aug 2026 13:29:45 +0000
asID:                     53340
IP address blocks:        198.37.110.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 10:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c2:9c:72:ed:43:d5:f5:2a:70:d1:61:95:f9:23:35:98:54:3a:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep  1 13:24:45 2025 GMT
            Not After : Aug 31 13:29:45 2026 GMT
        Subject: CN=9E9874F8BD012D762C98C6E0E99301C4D4DDA95D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:91:5f:07:dc:5c:92:b2:45:fb:2d:db:88:4a:
                    c3:12:35:37:ff:29:85:21:38:3d:60:c2:aa:54:3d:
                    e6:91:b8:af:67:14:25:12:e0:e9:46:6a:fa:86:dd:
                    65:c9:94:9f:46:3a:97:f8:cb:01:8f:2b:86:c5:75:
                    31:aa:39:2f:53:cf:d2:85:f6:93:c5:3a:d2:9f:bb:
                    93:3d:65:f1:6a:73:39:17:53:4f:b9:fe:ef:5a:7a:
                    4e:02:39:e7:0e:60:58:e5:cb:20:6a:c4:2a:c8:46:
                    d2:9f:83:38:ad:70:fc:5a:1b:eb:2d:ae:4f:b0:a4:
                    79:97:7c:10:8c:a0:d7:a1:83:f8:35:51:4a:53:ca:
                    f2:ba:06:ea:5f:89:c6:46:35:64:4c:ec:8a:51:7e:
                    a0:72:8b:7b:b1:52:8f:35:40:0b:06:97:c3:cb:5f:
                    88:a3:03:fd:ca:81:fd:ae:0b:26:34:9f:d6:c9:e2:
                    5a:20:4a:02:ab:31:1b:41:48:3b:d0:25:23:b6:46:
                    8b:9b:f1:3b:f4:86:f5:58:c4:e1:3a:58:6f:a2:dd:
                    6b:27:20:f5:8e:88:97:e5:3c:e9:25:86:dc:b2:fb:
                    99:46:fd:0e:c4:c3:fb:25:dc:04:ba:fd:24:0f:d4:
                    3b:a3:24:37:8d:fc:4f:54:99:77:5b:56:7a:79:11:
                    05:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:98:74:F8:BD:01:2D:76:2C:98:C6:E0:E9:93:01:C4:D4:DD:A9:5D
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e3131302e302f32342d3234203d3e203533333430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:65:a1:22:59:ec:37:8f:6a:0c:52:c9:6b:28:44:6a:3d:9f:
         0f:f3:6a:3c:41:53:03:0a:23:32:67:a1:60:b2:d4:f5:f9:50:
         8b:8c:8a:c0:dc:c4:d2:c3:32:1c:55:8c:4e:68:29:12:2c:eb:
         78:9e:2c:9b:41:34:82:e9:c5:82:c9:3f:c4:03:24:a5:40:fe:
         4d:1b:33:80:c6:6e:d6:36:34:95:e3:71:3d:bf:ab:6b:f6:6e:
         35:52:b6:eb:d2:f0:d7:90:d7:07:fa:1f:2e:97:97:62:94:6d:
         03:25:f9:a9:f0:fc:99:55:3a:cf:34:a9:b6:8e:8b:9a:cf:05:
         8b:0a:0f:b1:3a:01:15:eb:5d:3b:99:4e:ce:4e:e4:18:fd:21:
         a0:20:b0:d5:a7:68:e9:73:db:8e:08:f0:d1:69:31:ed:a6:41:
         3e:f3:7c:e9:93:07:27:30:29:f3:1d:ea:d4:2f:09:91:9d:07:
         32:37:8e:69:04:31:51:f7:7f:53:8e:e4:b9:81:1a:44:4f:28:
         d7:ad:88:f3:34:ba:af:c8:83:8f:10:b0:83:d7:d1:8a:33:e8:
         5a:da:f7:f9:a4:c2:71:92:a5:15:28:17:68:93:a2:e6:8b:db:
         1b:fe:68:69:97:e8:da:d2:0b:f1:c2:cb:25:d4:b4:0f:3c:dd:
         29:bf:56:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 15:52:32 2025 by rpki-client