Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e20323130353534.roa
File:                     3139392e34382e3234322e302f32342d3234203d3e20323130353534.roa (raw, json)
Hash identifier:          Y8XSWwQKBhfd6GE0WDBz8VthSll/O5I68YeFh5ht0G0=
Subject key identifier:   15:54:09:5A:F8:6A:77:12:51:70:4B:9A:74:1D:D4:64:4D:82:12:B0
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       5A09EBECBEBEF3E94A5079018DB4C47879F69527
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e20323130353534.roa
Signing time:             Mon 12 May 2025 15:32:52 +0000
ROA not before:           Mon 12 May 2025 15:27:52 +0000
ROA not after:            Mon 11 May 2026 15:32:52 +0000
asID:                     210554
IP address blocks:        199.48.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:30:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:09:eb:ec:be:be:f3:e9:4a:50:79:01:8d:b4:c4:78:79:f6:95:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: May 12 15:27:52 2025 GMT
            Not After : May 11 15:32:52 2026 GMT
        Subject: CN=1554095AF86A771251704B9A741DD4644D8212B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0d:76:61:5c:1a:08:be:80:d4:3e:22:85:d1:
                    b7:22:72:f6:05:83:7e:7f:b2:a7:68:39:89:3c:bf:
                    a4:65:55:3b:17:57:5e:5b:0d:59:73:b4:33:40:c6:
                    ce:0a:90:ca:19:06:c4:70:13:4e:6c:0d:b3:8d:6b:
                    ec:9a:95:dc:8e:63:ec:54:13:db:cc:e9:54:c1:59:
                    52:3b:26:12:cc:4c:81:d4:50:a8:95:5b:0f:ee:3d:
                    b9:dd:2d:49:42:3a:b8:aa:89:73:11:47:81:0b:fb:
                    1e:ca:ad:ac:c5:25:1d:4b:bc:77:ad:64:aa:b8:dc:
                    95:53:63:ae:26:fa:ee:55:01:4c:fd:f4:1b:09:a4:
                    3b:08:58:fc:51:c5:f8:e6:91:83:9e:67:18:82:a5:
                    54:df:90:31:0b:1f:a9:b4:db:e8:76:72:95:aa:a5:
                    96:b1:f6:a1:0f:5b:5f:e9:a9:b4:bf:99:31:2a:7d:
                    e0:76:db:0d:21:d5:47:a9:c7:37:a7:c1:80:aa:bf:
                    52:08:98:36:9c:e9:d4:bf:81:20:68:e4:94:43:89:
                    df:c8:3f:10:55:ce:0b:10:b9:a1:be:1d:71:dc:ce:
                    e3:c8:51:e2:a4:50:96:3b:8d:d5:98:f7:23:25:38:
                    ce:99:e3:6d:61:c2:7a:52:aa:9d:0d:81:47:3d:d5:
                    c9:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:54:09:5A:F8:6A:77:12:51:70:4B:9A:74:1D:D4:64:4D:82:12:B0
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e20323130353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:d4:02:f8:42:93:42:c6:89:ac:5c:57:56:c1:4b:83:ef:ec:
         48:e0:90:3e:a4:97:01:6f:4e:1b:e5:67:2d:41:32:2d:0d:2d:
         32:dc:e8:22:25:df:f9:ea:bd:d5:cc:f4:57:25:d3:7e:6e:8b:
         03:9a:f9:15:d1:5e:af:5b:cf:fd:dd:8a:35:96:b3:2a:66:57:
         31:61:d2:46:5a:fd:29:a8:e9:f8:8d:20:8f:2e:fe:65:95:3c:
         4d:2b:dd:d8:1c:94:45:e4:c8:63:fc:d9:e5:24:64:1c:5f:f6:
         d7:72:c0:8f:af:9c:53:25:f4:33:2a:f3:f2:84:27:0e:5e:79:
         a7:1e:87:01:f2:e2:56:58:5f:90:7c:e7:75:44:2d:53:16:31:
         f7:fe:ad:9f:fe:0e:f4:a4:8a:d2:02:6a:1e:46:f6:79:eb:c8:
         38:d9:a9:14:73:e4:e2:fa:3e:c4:7e:65:dc:31:93:be:b5:4b:
         a9:db:5a:92:7d:26:fd:08:b6:3c:26:e1:f7:f8:49:ec:33:4c:
         12:be:55:3c:96:b6:b6:b2:f4:34:5d:71:4c:95:a5:05:d6:c8:
         34:42:57:96:4c:7c:f8:4b:f2:7e:2f:20:32:fb:88:33:d1:b9:
         a3:b7:9a:f3:e0:ea:48:c4:a9:e7:ec:11:fb:54:6b:05:9d:1b:
         89:fa:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:57:23 2025 by rpki-client