Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20333935383339.roa
File:                     3139322e3230382e31352e302f32342d3234203d3e20333935383339.roa (raw, json)
Hash identifier:          BUspUGIjcp40e/VFl1rs8JpEDVlY5VNg8t02FEifT90=
Subject key identifier:   65:FC:D4:A3:57:D3:54:C2:D6:14:69:F6:DE:6D:9F:D5:E7:DA:20:46
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       1129E9D8D0D0249C66323E272735F3990800B258
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20333935383339.roa
Signing time:             Thu 15 May 2025 13:02:08 +0000
ROA not before:           Thu 15 May 2025 12:57:08 +0000
ROA not after:            Thu 14 May 2026 13:02:08 +0000
asID:                     395839
IP address blocks:        192.208.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 06:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:29:e9:d8:d0:d0:24:9c:66:32:3e:27:27:35:f3:99:08:00:b2:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: May 15 12:57:08 2025 GMT
            Not After : May 14 13:02:08 2026 GMT
        Subject: CN=65FCD4A357D354C2D61469F6DE6D9FD5E7DA2046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:60:2b:dc:b4:45:1b:24:ef:d4:18:15:ce:2d:
                    a0:7b:7a:37:ac:b4:08:6d:9b:00:77:d0:92:3d:27:
                    07:da:d7:fb:48:be:43:1c:d5:55:19:49:77:2c:5a:
                    e9:32:70:bb:c3:74:37:b4:97:51:7c:cb:e9:12:23:
                    6b:95:b1:fb:44:54:0e:34:3b:6b:73:a9:6a:31:c6:
                    6a:66:ae:ce:e5:2e:cd:11:cc:83:59:c7:6f:d9:6d:
                    86:c0:c7:66:c8:f6:0f:03:69:5a:b7:14:ef:93:cc:
                    aa:bb:82:cc:fd:94:ec:29:d1:83:56:64:57:33:74:
                    52:10:86:49:6c:c5:79:e5:22:21:5b:33:df:fb:a4:
                    93:36:99:25:20:58:b6:95:47:58:83:2c:0e:1f:34:
                    c7:71:23:24:35:e6:45:78:0d:8e:58:91:b4:5b:6c:
                    20:53:e7:e7:ea:57:05:3c:1f:72:e4:d4:69:12:3d:
                    94:7c:de:c0:a9:19:a6:e6:57:2c:c9:3c:f1:d5:17:
                    ea:2a:e5:20:87:24:c0:bc:bc:97:aa:47:c7:96:a4:
                    30:34:1c:58:55:01:c3:aa:1e:a6:ec:92:12:a9:f7:
                    9b:59:3c:a8:0a:b5:a3:91:10:fa:2b:56:23:24:d2:
                    30:6a:81:14:1d:52:87:d1:0a:8e:54:36:eb:89:b8:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:FC:D4:A3:57:D3:54:C2:D6:14:69:F6:DE:6D:9F:D5:E7:DA:20:46
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31352e302f32342d3234203d3e20333935383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:e8:12:89:fe:a6:90:ba:3e:a7:a6:dc:6b:7b:a7:e8:c2:a5:
         06:f7:8c:76:7d:4b:28:c0:47:90:9f:33:45:2a:19:eb:db:85:
         dc:25:de:f6:46:31:3f:2e:50:51:f8:9b:5c:76:83:21:b1:d7:
         d4:7f:f6:f6:05:e2:9f:31:fd:f3:9b:76:59:f2:21:45:bf:63:
         cc:8f:0d:16:bc:d4:83:90:4e:c6:4c:35:6d:f4:01:31:f2:39:
         37:69:26:2b:9f:54:7f:eb:74:7e:59:6c:19:65:7b:29:c3:60:
         26:86:15:55:8d:1f:25:a3:9c:22:92:5b:ac:05:ba:4d:1b:bc:
         75:65:61:ee:e7:1e:cb:ae:2a:93:c6:77:a4:d5:aa:54:fe:86:
         6d:f0:0a:1e:2c:7c:25:09:fe:38:e4:15:47:59:93:14:19:59:
         92:8c:de:ec:1c:73:d7:14:38:d6:a7:3c:f9:da:6c:73:6e:7f:
         62:86:58:62:15:38:34:59:c8:26:d7:4f:d9:35:bd:e9:8a:4c:
         29:0a:7c:f4:68:01:90:b7:92:5f:85:50:51:7b:49:cc:a9:45:
         cc:fc:70:e0:e7:60:82:51:34:3d:ce:55:d8:14:ca:63:a6:96:
         64:b0:3f:44:8b:67:6b:10:5e:02:d3:3e:be:12:59:3b:d8:47:
         79:35:a0:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:14:47 2025 by rpki-client