Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234342e302f32342d3234203d3e20313531383732.roa
File:                     3139392e34382e3234342e302f32342d3234203d3e20313531383732.roa (raw, json)
Hash identifier:          50CNKkpWYP15PG/0dyOOxnbkG9Y5WjF4rd9DmsSC78E=
Subject key identifier:   17:E3:3B:D4:9C:B4:C4:ED:72:A9:3F:27:70:05:63:6D:A4:EF:48:F5
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       158D591396CBFC8C9BAA24FA485DFC7BD6197458
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234342e302f32342d3234203d3e20313531383732.roa
Signing time:             Sun 09 Feb 2025 19:16:59 +0000
ROA not before:           Sun 09 Feb 2025 19:11:59 +0000
ROA not after:            Sun 08 Feb 2026 19:16:59 +0000
asID:                     151872
IP address blocks:        199.48.244.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 17:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8d:59:13:96:cb:fc:8c:9b:aa:24:fa:48:5d:fc:7b:d6:19:74:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: Feb  9 19:11:59 2025 GMT
            Not After : Feb  8 19:16:59 2026 GMT
        Subject: CN=17E33BD49CB4C4ED72A93F277005636DA4EF48F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:db:0b:f8:47:51:28:96:d7:38:03:2a:91:
                    15:c9:42:17:ec:8d:44:90:63:23:d8:4e:bb:5d:bc:
                    27:1f:da:8e:a9:42:48:12:9f:a6:2d:76:aa:ea:ed:
                    5d:05:7c:ea:58:4f:5a:bf:2b:69:b4:b6:46:54:dd:
                    84:fe:0a:09:c8:43:a2:2e:14:d5:8e:13:d6:6a:09:
                    6b:75:a5:47:93:26:16:30:e3:b7:a3:19:12:74:0a:
                    ce:5d:f7:a4:f2:c3:16:b8:52:3f:6b:64:6c:a0:f6:
                    c8:a0:5f:18:e4:ff:31:95:3e:e8:01:36:ad:68:e5:
                    ff:7b:ee:e2:2a:22:03:d9:f1:19:d2:50:11:74:74:
                    9a:e1:4f:6f:41:c1:1b:8c:a7:cb:40:b8:f4:bd:08:
                    37:32:55:2f:f0:d7:62:b5:33:1b:c5:38:78:c6:7f:
                    15:73:bb:41:d3:f0:a7:fa:92:ad:32:54:f8:1f:9a:
                    76:4d:16:e7:d8:f0:6b:6f:f0:78:24:d4:9d:84:21:
                    a6:7a:90:f9:f9:c4:78:6f:92:f2:4c:43:ee:7f:af:
                    ff:f2:08:f4:67:ba:4f:83:1e:2e:60:23:77:6b:b9:
                    e5:4c:90:20:fc:10:9b:2d:22:09:3a:51:59:4b:72:
                    e7:7b:3e:e9:31:2a:c3:b8:c7:5c:6d:60:3c:85:29:
                    50:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:E3:3B:D4:9C:B4:C4:ED:72:A9:3F:27:70:05:63:6D:A4:EF:48:F5
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234342e302f32342d3234203d3e20313531383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:5f:a8:6f:06:08:d0:94:53:2f:b1:41:e8:43:5d:77:c1:dd:
         3a:5e:1b:e4:8b:8c:02:2f:b6:1e:22:79:96:22:4a:e0:f8:64:
         23:43:80:eb:12:3d:f8:ba:b4:ce:d6:69:4e:2f:a3:5a:cc:8b:
         05:ac:e5:aa:28:f3:90:42:ef:8c:19:c0:7e:f6:ec:64:bd:d1:
         a8:5b:e4:40:9f:7d:99:80:ec:84:98:31:f1:53:f0:07:2a:e7:
         88:6f:e1:75:a7:a7:0e:01:0e:61:70:46:1f:cf:6d:36:7a:12:
         65:e6:90:44:d4:b3:e4:9d:96:47:1c:40:e8:57:aa:31:4f:d4:
         3d:d4:4d:44:4d:e2:76:64:75:9c:14:d4:a7:f1:89:61:99:78:
         cb:6d:c9:51:0e:4a:01:dd:27:85:7e:67:38:18:04:34:c3:1d:
         49:71:57:ad:28:37:7f:b0:74:ad:70:be:ec:d8:37:4a:60:8b:
         78:5c:10:24:49:a8:8c:59:58:74:a2:ba:aa:6b:b6:9e:79:5b:
         43:fa:a0:d1:09:a4:25:35:22:c2:0e:7d:79:b6:92:0e:b6:b3:
         59:ac:37:d7:7e:d5:66:3e:ce:2d:18:db:b4:13:6b:49:11:12:
         b6:71:d1:8d:4a:7d:0f:7e:2e:61:8b:b5:0f:81:3f:09:53:38:
         f7:33:1b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:18:55 2025 by rpki-client