Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
File:                     3139382e33372e39362e302f32302d3234203d3e20333937333733.roa (raw, json)
Hash identifier:          TX1pcYycuq1sY3I/ec7I2ZJ+ykiMcsmaAmOR4m3LdiM=
Subject key identifier:   FE:E1:AE:21:D2:D4:74:67:D6:BC:C0:AE:8B:80:74:4B:0C:2C:CA:2A
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       06DBADAE757B50A3F8DDFCC0035162DC6932EBDF
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa
Signing time:             Mon 01 Sep 2025 13:29:45 +0000
ROA not before:           Mon 01 Sep 2025 13:24:45 +0000
ROA not after:            Mon 31 Aug 2026 13:29:45 +0000
asID:                     397373
IP address blocks:        198.37.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 06 Sep 2025 10:18:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:db:ad:ae:75:7b:50:a3:f8:dd:fc:c0:03:51:62:dc:69:32:eb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Sep  1 13:24:45 2025 GMT
            Not After : Aug 31 13:29:45 2026 GMT
        Subject: CN=FEE1AE21D2D47467D6BCC0AE8B80744B0C2CCA2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:97:67:52:9d:44:4b:d0:63:dc:8b:ec:f9:69:
                    b1:c8:54:41:3a:6b:2e:92:df:c4:2b:4f:10:2e:8f:
                    b2:2a:5c:82:f5:77:d6:f5:97:6e:d0:3b:19:e1:af:
                    f9:3f:7a:be:96:e8:f7:46:67:ec:f7:c9:ee:3c:26:
                    0b:3f:a2:03:42:66:97:6b:45:43:66:b9:f8:7d:da:
                    66:94:35:99:89:c8:53:3d:d4:05:43:8d:bf:dc:6a:
                    2a:30:0d:c3:d3:22:cd:d2:55:cb:9e:63:66:80:4a:
                    28:08:d2:ee:ef:51:24:2c:ba:30:ad:b5:ec:08:b5:
                    8a:c7:47:12:68:0d:20:6d:72:b7:53:49:64:b1:e0:
                    a3:99:f9:32:dc:53:84:56:47:2d:ba:46:82:ee:f8:
                    44:31:0f:2a:20:1a:93:24:bb:49:8b:d9:b8:ad:e8:
                    fd:fd:85:7c:ed:7d:67:5c:89:9e:0e:fb:bf:66:b0:
                    e2:8a:66:2b:fb:46:8d:bf:30:e5:e7:5e:52:5a:f1:
                    39:0e:9f:76:f3:0d:18:eb:cc:21:48:58:54:2d:22:
                    b1:6d:0c:7d:41:5a:5e:81:89:e4:a1:ba:53:71:ce:
                    f7:32:aa:0f:15:3d:7c:2b:83:9c:a3:cc:1c:21:10:
                    9e:11:03:ad:29:d8:ef:73:98:4f:aa:7f:f5:2e:7a:
                    f2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E1:AE:21:D2:D4:74:67:D6:BC:C0:AE:8B:80:74:4B:0C:2C:CA:2A
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139382e33372e39362e302f32302d3234203d3e20333937333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.37.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         23:85:bb:a0:e1:bb:27:cd:3d:4e:74:77:42:f6:9d:34:19:8e:
         b8:68:3a:1c:ff:d1:6e:98:a1:cc:a9:17:b0:11:41:09:bd:f2:
         56:df:b9:8d:0e:4c:fd:26:12:f6:e4:8f:ea:1c:05:26:74:aa:
         95:a5:b8:04:3f:fd:f9:80:a0:ae:38:88:fb:2f:b6:da:ce:24:
         1d:2a:7f:08:2c:73:c4:d8:d0:b6:7b:d7:15:94:13:6b:e6:33:
         e7:72:ce:f9:e6:2a:c1:3b:40:49:db:e5:1d:17:4f:0a:90:af:
         1e:cd:2e:a9:bc:b4:fd:9f:b9:35:22:c3:1d:ab:e7:88:48:e5:
         aa:8a:5b:c8:d5:d1:ea:0b:19:cc:fc:54:c6:5a:71:5a:1a:d5:
         6c:c8:67:38:87:f2:1e:7f:cb:3e:48:8d:f8:4d:fe:2f:ab:33:
         21:a3:15:78:32:04:d5:4e:00:6f:84:24:15:07:2b:fc:d3:b8:
         25:f8:c4:e2:45:f9:ea:2a:d2:34:d5:94:fa:c2:fe:b7:db:76:
         21:ef:f6:b2:c8:3e:55:b6:10:ce:22:07:37:e1:07:40:62:6c:
         2c:29:b8:02:d3:81:c9:e9:a4:05:6a:09:52:94:f8:92:fe:ca:
         99:8d:9e:dd:82:68:31:3b:ee:f2:22:65:c7:c9:aa:9f:a9:52:
         4c:ea:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 20:00:08 2025 by rpki-client