Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e332e302f32342d3234203d3e203334393237.roa
File:                     3139322e3230382e332e302f32342d3234203d3e203334393237.roa (raw, json)
Hash identifier:          MKOcuIZMxFhXA7qbsuvqN4r84EU6vQd4wXnvBt+vleQ=
Subject key identifier:   C1:28:4E:E1:9F:C2:29:74:B5:9C:06:D5:1C:9F:A4:9B:3A:A4:3B:BF
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       2560E867AE9FAB20E950C7C41D3EA207B43D80B3
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e332e302f32342d3234203d3e203334393237.roa
Signing time:             Sat 17 May 2025 10:28:33 +0000
ROA not before:           Sat 17 May 2025 10:23:33 +0000
ROA not after:            Sat 16 May 2026 10:28:33 +0000
asID:                     34927
IP address blocks:        192.208.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 02:16:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:60:e8:67:ae:9f:ab:20:e9:50:c7:c4:1d:3e:a2:07:b4:3d:80:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: May 17 10:23:33 2025 GMT
            Not After : May 16 10:28:33 2026 GMT
        Subject: CN=C1284EE19FC22974B59C06D51C9FA49B3AA43BBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:49:00:19:e8:26:90:3b:96:8f:8e:62:72:
                    c0:58:52:66:a8:4a:d2:df:04:57:e6:45:82:eb:cd:
                    0f:6c:46:b0:6e:f6:34:c6:0b:08:07:b3:af:e8:15:
                    02:7b:97:db:2a:b1:97:fd:4c:81:35:da:04:03:75:
                    22:63:38:39:15:16:db:65:44:cc:7c:68:6a:d4:1b:
                    4e:c1:05:3e:82:00:27:0c:ce:cd:94:26:58:5b:3e:
                    13:1b:c0:1c:0b:77:ff:10:14:d6:43:28:3b:5a:d6:
                    62:4a:26:67:21:d7:8b:14:b8:59:4a:14:8d:01:94:
                    9e:6c:85:02:40:98:6a:97:08:e7:a2:ee:cb:91:24:
                    2e:94:64:44:7b:87:37:47:8b:18:c5:3b:d8:63:47:
                    bf:82:83:d5:fa:3d:63:df:a3:91:86:a3:61:89:b5:
                    48:f9:7d:5d:d9:e9:5c:b3:0d:2a:db:d0:a1:1e:79:
                    56:78:ff:fc:7f:3b:0c:d8:70:48:03:7c:17:bd:e8:
                    73:61:26:60:a6:21:23:41:b2:4d:5f:51:6e:47:6d:
                    a3:1e:3d:3a:ce:16:bf:66:cf:8c:b2:5f:6b:e4:26:
                    de:76:bd:ac:95:e1:db:74:6a:a5:63:a9:0b:99:90:
                    c7:62:ae:ad:54:62:53:63:66:2b:f4:ef:94:32:1a:
                    3b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:28:4E:E1:9F:C2:29:74:B5:9C:06:D5:1C:9F:A4:9B:3A:A4:3B:BF
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e332e302f32342d3234203d3e203334393237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:eb:1d:6c:41:3c:23:5b:53:5a:fe:70:e9:ae:75:9f:dc:72:
         42:ee:2a:cb:d6:65:08:4f:01:ae:f2:7f:fd:f9:2d:7e:d0:e8:
         1c:f6:b8:87:63:58:d4:c3:d8:45:88:c3:d8:f3:9b:b3:e7:74:
         12:b4:84:26:e5:4f:fe:16:d0:57:fa:b0:3d:91:b5:6c:c9:09:
         f1:a9:17:41:d6:57:74:bf:e4:5d:f4:35:7a:c0:a4:b1:9b:26:
         a1:c7:2c:4e:16:c5:f8:f3:bc:0a:6c:3a:22:ce:27:67:96:57:
         f9:f8:4e:04:73:ca:9e:77:41:68:f4:c1:41:30:66:9a:23:b0:
         9c:98:1a:04:e8:58:c9:6c:ca:11:e4:12:06:92:e8:5d:71:73:
         9b:f1:f0:00:de:3f:92:8b:46:c4:86:8f:2b:e4:11:d0:8d:0c:
         9e:a0:b3:43:50:ca:9a:9e:aa:1b:e5:ff:f2:89:57:44:00:1f:
         35:d0:34:88:0a:c4:57:a5:6c:bc:3f:24:67:9c:07:80:f9:c2:
         f1:52:8b:b3:d8:86:09:5a:02:8f:6f:95:50:d7:75:ba:b6:b7:
         a7:dd:40:3a:80:4f:bb:d1:b2:ad:01:19:53:6c:6f:10:7d:ae:
         9d:0d:2d:45:4f:6a:41:ce:f2:65:71:a4:10:56:33:6a:6b:e6:
         c5:6b:55:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:53:56 2025 by rpki-client