Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20313532383638.roa
File:                     3139322e3230382e31332e302f32342d3234203d3e20313532383638.roa (raw, json)
Hash identifier:          4CwQdy3vREAz0iUx9FO5Lle4LBvM6DlcH2QTpgsOme8=
Subject key identifier:   25:CA:2D:F2:19:68:BE:17:4A:D7:6D:24:EB:47:DF:01:AE:3A:46:B8
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       1C19127666821A360D4D9761A55E03E2E5480976
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20313532383638.roa
Signing time:             Tue 01 Jul 2025 14:32:55 +0000
ROA not before:           Tue 01 Jul 2025 14:27:55 +0000
ROA not after:            Tue 30 Jun 2026 14:32:55 +0000
asID:                     152868
IP address blocks:        192.208.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Jul 2025 00:29:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:19:12:76:66:82:1a:36:0d:4d:97:61:a5:5e:03:e2:e5:48:09:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Jul  1 14:27:55 2025 GMT
            Not After : Jun 30 14:32:55 2026 GMT
        Subject: CN=25CA2DF21968BE174AD76D24EB47DF01AE3A46B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:33:aa:56:33:67:06:94:c7:a2:02:bb:cd:00:
                    7c:c0:f1:d9:26:e7:69:66:59:37:a7:3f:50:ba:40:
                    e4:20:4c:10:ff:64:ed:f5:e6:19:30:be:5d:d0:6a:
                    6b:38:0f:28:00:91:46:60:df:2d:b8:91:58:49:f9:
                    ac:3b:57:0a:a5:67:06:66:8d:dc:ff:35:8c:cb:d0:
                    81:2b:aa:2e:2a:2b:2d:0f:1b:32:91:cc:e0:13:74:
                    be:f5:eb:47:e3:35:c2:d8:80:45:0e:52:d9:70:2f:
                    b8:c0:66:d1:02:b3:fa:f7:cb:4c:6c:23:ac:99:af:
                    97:a5:2c:51:ed:ab:37:81:a0:6b:ff:cb:a5:c1:6e:
                    dc:a5:ec:1a:32:b8:ba:e7:5f:6b:f8:5f:ba:66:c0:
                    76:b8:fd:55:4e:86:0f:17:23:4a:e9:f4:8a:54:43:
                    3a:2e:9c:d6:34:c9:91:9f:c2:4c:d4:8e:01:80:a7:
                    9c:d4:fb:1e:8b:f5:85:59:b8:c6:52:28:5c:f8:71:
                    00:d1:66:75:3a:aa:a0:1f:9b:d2:76:e3:98:43:29:
                    f3:cd:22:c5:da:98:a8:8a:75:11:ef:38:60:18:e9:
                    36:45:5b:98:00:9e:74:74:4a:41:3f:2e:1b:ec:1a:
                    4d:5b:73:79:fe:23:b8:07:57:48:12:66:2e:89:3c:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:CA:2D:F2:19:68:BE:17:4A:D7:6D:24:EB:47:DF:01:AE:3A:46:B8
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31332e302f32342d3234203d3e20313532383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:98:b2:d9:a1:61:41:22:20:32:43:8b:7e:fa:66:be:c7:8c:
         b4:70:f7:8d:8c:f5:a1:56:7b:6f:2b:a7:01:9e:eb:f2:df:02:
         dc:c2:05:6b:79:f5:ad:4b:92:94:84:92:03:06:c4:68:50:09:
         d1:c6:14:5a:3a:51:b3:1e:5b:18:50:22:c6:07:de:1a:51:64:
         64:2d:36:31:93:8c:90:eb:86:19:ea:9a:ec:ef:de:89:4f:14:
         00:36:07:0d:21:7e:53:b6:b4:56:dc:d6:68:03:5b:1f:df:a4:
         b2:2e:36:9a:95:ea:c9:42:b4:58:dd:0a:94:34:3d:36:71:86:
         e3:f0:d0:d8:99:63:73:e3:17:f3:5f:4b:c4:2a:bd:4d:ef:44:
         d9:16:56:82:40:9e:79:66:d6:32:90:7c:b1:6d:7b:86:2f:69:
         21:20:45:66:e5:1d:a0:bb:f1:fc:22:05:3d:15:1c:ba:6c:47:
         cb:70:ad:bb:fe:05:66:66:be:93:ef:93:18:12:43:32:b3:62:
         7e:79:17:69:b1:fd:bb:85:23:f5:fe:4e:f4:a1:ef:36:48:35:
         5b:ec:21:1c:cd:d6:07:7e:6f:5a:d9:d0:95:26:94:2f:f7:56:
         5e:ea:37:cc:3a:c4:49:35:a4:d9:e2:16:e9:c0:ce:85:57:19:
         a3:fa:b2:93
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUHBkSdmaCGjYNTZdhpV4D4uVICXYwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjUwNzAxMTQyNzU1WhcNMjYwNjMwMTQzMjU1
WjAzMTEwLwYDVQQDEygyNUNBMkRGMjE5NjhCRTE3NEFENzZEMjRFQjQ3REYwMUFF
M0E0NkI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTOqVjNnBpTH
ogK7zQB8wPHZJudpZlk3pz9QukDkIEwQ/2Tt9eYZML5d0GprOA8oAJFGYN8tuJFY
SfmsO1cKpWcGZo3c/zWMy9CBK6ouKistDxsykczgE3S+9etH4zXC2IBFDlLZcC+4
wGbRArP698tMbCOsma+XpSxR7as3gaBr/8ulwW7cpewaMri6519r+F+6ZsB2uP1V
ToYPFyNK6fSKVEM6LpzWNMmRn8JM1I4BgKec1Psei/WFWbjGUihc+HEA0WZ1Oqqg
H5vSduOYQynzzSLF2pioinUR7zhgGOk2RVuYAJ50dEpBPy4b7BpNW3N5/iO4B1dI
EmYuiTxGwwIDAQABo4ICtDCCArAwHQYDVR0OBBYEFCXKLfIZaL4XStdtJOtH3wGu
Oka4MB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzMTMzMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNTMyMzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwNANMA0GCSqGSIb3DQEB
CwUAA4IBAQCSmLLZoWFBIiAyQ4t++ma+x4y0cPeNjPWhVntvK6cBnuvy3wLcwgVr
efWtS5KUhJIDBsRoUAnRxhRaOlGzHlsYUCLGB94aUWRkLTYxk4yQ64YZ6prs796J
TxQANgcNIX5TtrRW3NZoA1sf36SyLjaalerJQrRY3QqUND02cYbj8NDYmWNz4xfz
X0vEKr1N70TZFlaCQJ55ZtYykHyxbXuGL2khIEVm5R2gu/H8IgU9FRy6bEfLcK27
/gVmZr6T75MYEkMys2J+eRdpsf27hSP1/k70oe82SDVb7CEczdYHfm9a2dCVJpQv
91Ze6jfMOsRJNaTZ4hbpwM6FVxmj+rKT
-----END CERTIFICATE-----
Generated at Sat Jul 5 05:22:57 2025 by rpki-client