Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234372e302f32342d3234203d3e20313939373037.roa
File:                     3139392e34382e3234372e302f32342d3234203d3e20313939373037.roa (raw, json)
Hash identifier:          F9Gsdmmfk/WkkRg+aQ27rbAtnAITLUdx51qHrCfwsxs=
Subject key identifier:   CD:BC:7D:17:C9:A3:80:3A:A6:BC:05:91:0E:1F:41:32:2B:BB:75:C7
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       4E88B2C6038DFFE96E101686724921B31D5755E4
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234372e302f32342d3234203d3e20313939373037.roa
Signing time:             Mon 30 Dec 2024 11:49:20 +0000
ROA not before:           Mon 30 Dec 2024 11:44:20 +0000
ROA not after:            Mon 29 Dec 2025 11:49:20 +0000
asID:                     199707
IP address blocks:        199.48.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 17:41:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:88:b2:c6:03:8d:ff:e9:6e:10:16:86:72:49:21:b3:1d:57:55:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: Dec 30 11:44:20 2024 GMT
            Not After : Dec 29 11:49:20 2025 GMT
        Subject: CN=CDBC7D17C9A3803AA6BC05910E1F41322BBB75C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bb:2d:32:6e:42:ff:5a:97:20:8c:7c:4e:01:
                    a4:77:d8:6b:7b:d2:e2:57:32:0b:d0:48:d5:58:42:
                    3b:31:76:e6:35:0a:34:68:81:0f:82:ff:ff:38:97:
                    bc:9d:7d:6f:7a:a8:15:96:99:42:22:92:29:39:11:
                    85:41:10:d2:e0:bc:08:77:b2:d6:a9:cf:08:34:4a:
                    e7:bc:0b:8b:b3:d4:53:d6:b7:dc:f6:12:b6:c9:ca:
                    c6:28:f6:f6:0c:e5:00:fa:94:cb:98:5e:a6:2f:2a:
                    a1:84:1e:f6:94:d7:b4:26:0e:cb:86:55:1d:92:9e:
                    96:d6:9c:32:d7:33:91:45:95:53:9a:de:a8:a5:b8:
                    48:53:47:dd:86:32:77:c4:eb:b3:91:dd:01:b2:61:
                    47:ea:05:01:50:18:b5:54:e3:3b:ec:70:f5:52:a8:
                    d7:58:41:ad:95:b1:97:57:ba:e9:2b:dc:c0:2d:55:
                    ad:5c:79:53:74:17:99:55:1d:b1:c5:ed:42:b3:c2:
                    27:0d:1a:9c:7e:27:60:84:af:07:76:fb:2a:bd:d3:
                    84:5a:a3:02:db:6b:7b:be:0b:70:d9:16:d7:c1:f1:
                    0b:c8:1e:62:e9:76:50:9e:d7:52:07:f0:0b:d1:1d:
                    c7:b5:51:b6:67:4f:1d:16:a6:b4:20:1a:27:4e:fd:
                    1e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:BC:7D:17:C9:A3:80:3A:A6:BC:05:91:0E:1F:41:32:2B:BB:75:C7
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234372e302f32342d3234203d3e20313939373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:4b:61:46:af:85:59:82:43:5e:fc:04:5a:85:ab:87:59:13:
         98:b0:76:14:8b:ac:a9:16:b9:5a:06:3b:f9:6a:8c:a8:bc:d7:
         9e:c0:e9:7b:75:01:7f:58:48:57:2d:49:9a:c5:1b:2e:3f:75:
         45:aa:86:5e:11:ee:43:09:2f:41:45:ce:41:a1:ec:9a:d6:19:
         b2:4e:c7:1d:41:8e:42:c5:ba:7a:26:27:b4:12:c9:42:37:c2:
         97:a1:46:ff:da:ad:b4:4c:55:d7:4d:b4:82:b1:20:89:34:ee:
         0f:18:e5:f5:0b:d8:71:c7:f9:03:22:8d:11:b6:8d:21:a4:ee:
         d0:95:01:cc:5b:ea:d5:ae:90:3f:6b:cb:87:1b:e8:be:c2:b9:
         f4:2c:7f:82:83:d3:d2:ca:f3:73:e2:e4:1a:03:b5:62:7c:fa:
         ba:f2:8d:11:1a:c8:dc:1e:24:8b:2a:42:a1:1a:d3:5f:ce:3c:
         21:2e:ec:5c:97:71:26:bb:b7:09:95:b3:93:48:b4:fe:35:fa:
         61:36:68:e3:1c:05:4f:57:ea:c0:59:9a:c7:4c:d6:83:04:02:
         08:f4:81:36:d1:21:9f:03:5c:05:08:2f:81:d0:65:93:72:42:
         2b:a0:9f:0d:b2:50:73:20:b1:c3:bc:c9:17:74:5c:7c:79:83:
         86:16:35:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:13:24 2025 by rpki-client