Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa
File:                     3230382e39312e3139312e302f32342d3234203d3e203431303935.roa (raw, json)
Hash identifier:          CN3Y4qUPf0xp49cW2ANFevJQB62oUF73LCclkF9++hI=
Subject key identifier:   F0:BB:73:70:04:06:2C:94:FB:39:2A:7A:71:E3:06:E9:11:F2:B2:A4
Certificate issuer:       /CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
Certificate serial:       62A879FE178B7A14A03BEA572F67B77458C9A456
Authority key identifier: E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa
Signing time:             Tue 03 Jun 2025 04:29:01 +0000
ROA not before:           Tue 03 Jun 2025 04:24:01 +0000
ROA not after:            Tue 02 Jun 2026 04:29:01 +0000
asID:                     41095
IP address blocks:        208.91.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/ae85d24a-77d4-4cf7-80aa-c071199c2889.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 08:44:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:a8:79:fe:17:8b:7a:14:a0:3b:ea:57:2f:67:b7:74:58:c9:a4:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845
        Validity
            Not Before: Jun  3 04:24:01 2025 GMT
            Not After : Jun  2 04:29:01 2026 GMT
        Subject: CN=F0BB737004062C94FB392A7A71E306E911F2B2A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:53:06:eb:f1:09:f7:88:33:de:36:cd:97:11:
                    84:43:c7:a8:24:83:3c:76:0e:8e:05:5b:30:81:bd:
                    be:75:a9:ab:37:ae:56:d9:66:bc:40:7f:98:7b:8f:
                    c3:15:71:b5:a7:bd:8f:70:f0:ec:21:d1:65:33:66:
                    ec:00:7e:a1:5b:61:4e:ae:c3:20:96:2a:28:39:dd:
                    71:02:67:e6:3e:45:40:15:6e:50:83:ec:36:fd:f7:
                    5b:49:4c:34:e5:9e:1b:7f:97:f0:67:d0:ef:70:05:
                    5e:d2:a8:b1:2b:c0:73:41:99:7a:6f:e3:68:08:58:
                    e0:d8:7c:a6:4c:5c:61:53:96:08:3d:60:66:b0:a5:
                    35:bb:98:36:5f:4e:c1:0a:5e:01:24:02:9c:ce:9a:
                    b8:5f:49:a4:63:85:5a:fe:be:3b:ae:6d:f0:69:54:
                    84:84:d1:f7:10:2a:10:14:a7:53:f5:ff:70:db:b2:
                    b9:8b:4a:69:07:c7:e3:52:3d:2b:b7:09:d9:63:57:
                    c7:e4:4d:8f:6a:b6:f6:5d:b7:20:d5:7e:41:43:82:
                    d6:f0:e0:20:b2:83:4a:5b:91:d8:f2:34:64:8a:a4:
                    54:14:72:81:29:82:b7:9d:31:a6:2c:c5:6e:7e:ed:
                    00:a8:86:cb:62:2c:f8:a4:d9:e4:19:5b:41:40:d9:
                    cb:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:BB:73:70:04:06:2C:94:FB:39:2A:7A:71:E3:06:E9:11:F2:B2:A4
            X509v3 Authority Key Identifier:
                keyid:E9:AB:82:D4:D9:BF:4C:16:EA:6E:7C:FA:F3:EE:14:CF:EC:5A:4A:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/E9AB82D4D9BF4C16EA6E7CFAF3EE14CFEC5A4A8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ae85d24a-77d4-4cf7-80aa-c071199c2889/58f72174a0a9e3d07a37cad87c2235a762efa6a9b620372845.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186998663d80702/0/3230382e39312e3139312e302f32342d3234203d3e203431303935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.91.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:ff:1a:90:09:75:ec:98:67:34:04:c7:c8:df:c3:fd:ac:97:
         9a:a6:67:2a:89:93:16:4d:43:47:88:a6:c9:73:9f:55:17:9a:
         3e:0f:46:14:05:16:d8:7f:7e:e8:e4:1d:d5:ec:66:14:e2:9f:
         83:05:d8:af:04:20:da:a2:a0:42:46:d1:64:72:47:6b:d7:f1:
         95:21:74:c7:71:6c:24:b5:ea:d9:66:e3:d8:c4:11:a5:73:22:
         0b:d5:bb:c6:e2:f1:0b:e0:ab:38:01:db:d6:17:d5:fc:90:38:
         29:66:58:84:47:14:65:5c:6c:e2:2e:b7:c4:81:49:93:74:1b:
         c9:e6:7e:99:33:97:c4:b5:fb:31:f1:3d:fe:55:4e:6e:d2:88:
         09:6b:9d:7c:24:08:f3:40:b9:ca:77:e4:d3:2b:4d:2d:26:e5:
         b6:07:dc:83:75:f1:38:a5:d1:a7:40:db:4b:73:3e:01:e8:a5:
         9a:76:c9:54:c7:89:01:30:92:93:34:2e:98:50:8b:ee:15:3d:
         ab:25:55:aa:da:f5:12:52:a8:d1:e6:19:1a:5e:28:50:a6:ed:
         42:de:5b:75:ef:ab:4e:63:04:8a:14:4a:37:7e:57:96:f4:9e:
         03:d4:9d:6c:43:11:00:e2:98:1d:df:fd:da:7b:b8:d0:a4:04:
         5e:4d:c6:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 17:01:06 2025 by rpki-client