Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3137302e302f32342d3234203d3e2039333034.roa
File:                     3139382e3137352e3137302e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          somhpVflPCc0N5rJJDG5USX8NyGbLmP2kmIFSGC0MF8=
Subject key identifier:   BD:40:2F:C5:B6:DF:67:FF:56:6F:3A:DA:75:8B:5C:4F:37:11:83:EF
Certificate issuer:       /CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Certificate serial:       1BB9045327B6107F1F5A5BC062F59856F0986DFB
Authority key identifier: 1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3137302e302f32342d3234203d3e2039333034.roa
Signing time:             Mon 02 Jun 2025 16:10:27 +0000
ROA not before:           Mon 02 Jun 2025 16:05:27 +0000
ROA not after:            Mon 01 Jun 2026 16:10:27 +0000
asID:                     9304
IP address blocks:        198.175.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 15:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b9:04:53:27:b6:10:7f:1f:5a:5b:c0:62:f5:98:56:f0:98:6d:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
        Validity
            Not Before: Jun  2 16:05:27 2025 GMT
            Not After : Jun  1 16:10:27 2026 GMT
        Subject: CN=BD402FC5B6DF67FF566F3ADA758B5C4F371183EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:81:01:e0:2d:ca:7c:85:a5:95:b6:b6:bb:01:
                    be:2c:23:3d:c6:e8:45:52:01:1e:16:be:ba:37:d2:
                    9b:cf:eb:7d:16:98:23:a5:b4:f3:f4:d6:b6:40:70:
                    58:8c:e9:f8:28:b4:19:11:2b:3b:f5:f2:9a:76:cf:
                    00:ad:5b:d8:26:18:8c:cc:0a:32:16:ef:c3:85:6b:
                    f8:77:b0:16:b0:bb:5a:c3:9b:7d:8e:69:23:69:f2:
                    d0:0b:e8:a6:96:fa:19:57:de:e1:76:db:13:27:16:
                    67:cb:65:77:ed:8a:74:23:a2:3f:44:5c:32:e8:dd:
                    b8:ef:ff:62:f7:8d:06:44:c3:2f:67:af:80:e5:1c:
                    69:26:84:a7:9a:67:f2:ca:a4:d1:ae:6c:15:c5:01:
                    89:89:76:f5:f8:60:91:05:8e:e7:bd:7d:fc:87:0b:
                    b3:bf:44:28:56:12:04:cd:eb:60:fd:86:81:46:72:
                    7e:f7:1f:2a:ba:19:0b:dc:ad:e6:c8:29:b3:76:b7:
                    cf:6a:5b:ae:36:5f:18:0a:a7:52:6b:22:fd:06:42:
                    5a:ac:e5:cc:79:3b:9b:05:51:8c:97:db:cd:4a:b6:
                    a9:52:16:ad:d3:6e:22:eb:f8:b4:29:b0:50:d0:e3:
                    bd:09:53:cf:91:da:17:d7:19:f8:65:e9:c5:00:73:
                    45:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:40:2F:C5:B6:DF:67:FF:56:6F:3A:DA:75:8B:5C:4F:37:11:83:EF
            X509v3 Authority Key Identifier:
                keyid:1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3137302e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:38:20:07:32:0a:31:65:2c:d9:d4:9d:f7:90:b1:6c:33:79:
         5a:2b:e4:be:5d:3e:98:30:66:ef:2f:0e:f1:d3:74:d9:6d:d5:
         bc:58:58:8a:26:3a:aa:72:43:05:1b:5f:23:91:b1:c5:0d:06:
         41:dd:21:5d:7f:d4:8f:1b:75:7a:99:3b:fd:a6:c0:19:9e:f5:
         01:a9:35:e3:3a:0a:d2:23:a5:5d:60:b5:f9:09:8b:f6:08:54:
         61:59:13:36:79:c2:cf:d9:a4:4f:e5:0b:46:25:17:f6:d2:f7:
         df:c3:b4:8d:fd:3a:01:df:fc:05:69:c9:9a:58:bf:ec:36:b1:
         06:6d:31:8b:34:94:db:bc:33:78:df:41:ef:d6:d3:1b:90:39:
         92:a2:e2:90:8f:76:e5:11:18:00:78:78:84:ae:59:e6:ae:bf:
         15:ee:30:7f:37:fc:f3:96:ef:9f:c1:28:49:d0:21:ff:69:62:
         f0:30:f3:be:76:30:d8:f5:04:26:8c:33:87:a2:d2:fa:87:50:
         2a:4c:97:27:b2:fc:a5:22:68:cf:a7:f2:13:2b:23:ff:2f:fd:
         6f:ee:53:25:b1:e8:f6:05:95:06:1c:4a:fb:20:5f:d9:1d:f7:
         49:d9:15:c7:13:ee:d9:b8:a0:f8:59:d1:2e:3a:9b:2a:f6:a9:
         3a:0a:4e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:26:28 2025 by rpki-client