Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/3139322e3132392e37302e302f32342d3234203d3e20323035323230.roa
File:                     3139322e3132392e37302e302f32342d3234203d3e20323035323230.roa (raw, json)
Hash identifier:          gAMAzKtf4CN5qgvfwvrDpuSLb0Dd6OzTKjmbPELRt/g=
Subject key identifier:   6F:14:AE:F3:B0:AA:32:7C:A1:1D:D7:F2:A0:9F:38:AB:29:43:FE:9D
Certificate issuer:       /CN=bf0f90d7e8228bf6bd5a3245a2c05483b84ab7075e1e024df8
Certificate serial:       6253FD419B10CB5E8016513F2ED73BDCD9703FED
Authority key identifier: 87:14:8D:1D:98:0A:25:7F:69:16:F2:DA:3A:30:5B:D7:51:78:97:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/bf0f90d7e8228bf6bd5a3245a2c05483b84ab7075e1e024df8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/3139322e3132392e37302e302f32342d3234203d3e20323035323230.roa
Signing time:             Tue 27 May 2025 21:14:04 +0000
ROA not before:           Tue 27 May 2025 21:09:04 +0000
ROA not after:            Tue 26 May 2026 21:14:04 +0000
asID:                     205220
IP address blocks:        192.129.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/87148D1D980A257F6916F2DA3A305BD7517897DE.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/87148D1D980A257F6916F2DA3A305BD7517897DE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/bf0f90d7e8228bf6bd5a3245a2c05483b84ab7075e1e024df8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/7491ca97-4125-4dca-a20b-fe4fb458e1c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/7491ca97-4125-4dca-a20b-fe4fb458e1c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 11:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:53:fd:41:9b:10:cb:5e:80:16:51:3f:2e:d7:3b:dc:d9:70:3f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf0f90d7e8228bf6bd5a3245a2c05483b84ab7075e1e024df8
        Validity
            Not Before: May 27 21:09:04 2025 GMT
            Not After : May 26 21:14:04 2026 GMT
        Subject: CN=6F14AEF3B0AA327CA11DD7F2A09F38AB2943FE9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ab:04:9e:e4:71:70:9b:5a:2b:6f:6a:0b:e5:
                    90:bf:33:9a:e1:40:bc:00:96:c6:27:da:ff:ba:3a:
                    45:7e:6f:bf:91:81:54:93:dc:25:72:32:c0:5a:f1:
                    1c:76:a2:44:1d:66:27:d6:36:0d:5a:d4:3b:a9:28:
                    9c:f7:6a:90:18:70:01:cd:82:1b:d0:2d:15:8b:1e:
                    a1:c4:d5:33:4e:f3:7d:64:9e:c6:0e:b5:b2:98:40:
                    11:a5:ee:b9:0d:ab:0c:cf:db:b0:14:86:8d:a4:bd:
                    60:36:9c:bc:fd:95:45:4f:0d:a3:91:2d:a0:92:2e:
                    6b:3c:b8:d7:c5:5b:f5:29:86:bc:f1:ce:f3:d7:e1:
                    14:27:d2:4d:ce:5b:6c:70:e9:70:63:a6:34:31:17:
                    1e:62:27:f0:ba:a9:b0:a1:22:98:1b:71:97:2b:2e:
                    27:3b:7d:51:d6:bb:92:26:fe:68:21:a9:1a:c2:98:
                    41:80:0f:c1:ee:ad:42:8f:b2:6b:68:a4:f4:20:5f:
                    94:fe:ea:94:83:2a:e6:86:d8:87:71:b9:15:00:ee:
                    d3:7d:2b:43:22:22:43:9e:be:f2:d9:45:a4:5f:9e:
                    6c:62:85:46:f3:5d:9d:12:77:d8:e3:a9:2c:e6:ca:
                    10:08:1f:2f:c1:49:9f:45:b0:63:02:bc:cd:98:a5:
                    b8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:14:AE:F3:B0:AA:32:7C:A1:1D:D7:F2:A0:9F:38:AB:29:43:FE:9D
            X509v3 Authority Key Identifier:
                keyid:87:14:8D:1D:98:0A:25:7F:69:16:F2:DA:3A:30:5B:D7:51:78:97:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/87148D1D980A257F6916F2DA3A305BD7517897DE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7491ca97-4125-4dca-a20b-fe4fb458e1c5/bf0f90d7e8228bf6bd5a3245a2c05483b84ab7075e1e024df8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c97019246af0cf73ee8/0/3139322e3132392e37302e302f32342d3234203d3e20323035323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.129.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:bd:5d:e0:87:50:8a:66:d9:17:06:37:67:12:37:9b:e1:39:
         0b:c9:7d:c1:83:d0:e6:cd:0f:72:3a:93:02:73:5c:60:95:89:
         c4:51:c0:62:d5:53:0e:d7:f1:e4:3c:30:0e:1a:80:1f:9f:c4:
         c7:af:09:aa:8b:9c:af:35:10:82:6f:f5:de:cf:61:15:db:1d:
         79:17:96:50:85:9d:02:36:b8:87:8b:7d:ed:94:46:77:8a:e5:
         f0:18:00:eb:dc:f3:d4:5a:dc:1b:79:6e:ab:28:9b:8b:35:fc:
         31:0b:c6:ad:d0:4d:90:07:8d:4a:df:1e:37:a9:60:26:94:aa:
         3b:94:bc:86:2e:01:66:74:4c:16:c6:9c:59:77:5f:35:ff:11:
         07:81:dc:cd:4c:c9:77:d1:bb:93:07:25:1d:b3:92:12:b2:47:
         0a:7a:99:45:8a:6d:a6:8e:99:a8:ac:8f:c8:1a:2c:33:73:6c:
         9d:53:eb:07:0e:4d:ee:e9:1e:1a:07:5f:15:c6:8f:6d:da:95:
         84:81:d9:b1:6a:b4:a2:69:40:2d:18:70:96:ee:42:34:cb:86:
         cd:4b:0f:b4:ed:b0:d4:70:4b:3b:33:49:53:77:82:7e:43:39:
         10:a9:da:84:2f:0d:bc:45:7b:42:8d:3e:0b:79:5b:75:39:84:
         fa:05:11:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:25:06 2025 by rpki-client