Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e203136353039.roa
File:                     3139322e302e31362e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          JUpm53gLh2ygmUq66oMCl1KWpFL9e3C38lIUk4XClaY=
Subject key identifier:   26:34:51:A5:31:99:AB:E4:CF:5A:4B:AC:E5:71:53:C6:1C:54:E2:BA
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       1F467F0458A1C85F6184A6DA32DE7389611ACD4A
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e203136353039.roa
Signing time:             Mon 16 Jun 2025 04:55:53 +0000
ROA not before:           Mon 16 Jun 2025 04:50:53 +0000
ROA not after:            Mon 15 Jun 2026 04:55:53 +0000
asID:                     16509
IP address blocks:        192.0.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 09:32:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:46:7f:04:58:a1:c8:5f:61:84:a6:da:32:de:73:89:61:1a:cd:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun 16 04:50:53 2025 GMT
            Not After : Jun 15 04:55:53 2026 GMT
        Subject: CN=263451A53199ABE4CF5A4BACE57153C61C54E2BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:5d:d9:38:65:ae:d1:09:72:ec:1d:77:eb:9d:
                    c4:eb:fd:35:dc:02:08:12:a3:09:37:6e:e5:1d:aa:
                    63:55:35:7c:7b:3a:f3:48:52:df:bd:08:f0:c5:ec:
                    0c:f6:90:75:2e:41:6e:05:f5:45:e8:ee:59:db:28:
                    32:f7:53:dc:2f:c4:55:4a:53:bf:3f:87:4e:14:15:
                    ef:7d:84:8d:0e:e7:fb:f0:b4:9e:b4:a2:e4:e8:be:
                    8e:22:f0:36:e9:c3:e3:fa:fb:3c:e7:89:88:73:c1:
                    c0:01:ad:67:f2:8b:37:47:91:58:6d:54:83:88:26:
                    9a:56:e1:2a:c2:fb:55:0d:78:6b:63:89:3c:0e:4b:
                    e7:2b:e6:25:fb:cf:e2:c9:94:82:1b:e4:44:7a:54:
                    2a:13:09:b5:5a:b4:46:9b:96:f4:de:4e:c2:44:0b:
                    a6:fc:bd:53:c3:0b:ac:8b:39:ea:93:5b:c9:ec:c5:
                    0c:f9:b7:39:73:fa:64:58:0a:b2:bc:34:7a:b4:ab:
                    23:05:2c:f1:b8:da:21:4f:1b:8a:b2:d3:6f:88:c2:
                    8c:eb:54:ba:af:22:e1:2d:71:bd:8e:44:39:71:d9:
                    26:0a:c1:41:e2:4a:64:d8:4c:e1:ff:72:ba:59:13:
                    69:46:00:15:0c:6c:1a:f3:0f:31:be:63:d0:76:50:
                    cb:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:34:51:A5:31:99:AB:E4:CF:5A:4B:AC:E5:71:53:C6:1C:54:E2:BA
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:25:3a:ac:f8:83:58:5b:43:43:92:84:26:90:9b:a0:41:71:
         df:8c:c2:47:c1:c9:e2:b9:52:8a:1b:5e:21:ec:82:c6:4b:f1:
         cc:1e:41:a7:94:63:b5:e4:15:d4:41:43:a8:c0:09:78:f0:3a:
         96:95:55:22:bf:17:56:9e:49:56:00:0e:ab:40:d2:dc:23:c7:
         3a:dc:68:71:fb:56:21:99:96:cf:d4:c9:c5:b3:c2:50:af:5f:
         f5:c0:03:d0:09:5f:e1:c6:bf:d7:d2:41:be:f2:47:b7:4b:9d:
         dd:17:dc:4e:d3:5b:4b:e8:82:86:70:76:b8:fd:e0:0f:1a:d2:
         f4:ca:01:54:dc:f3:39:46:d8:18:7f:80:4c:a6:17:8b:66:12:
         89:bf:f3:3c:27:34:c7:44:d7:0e:43:42:31:e4:58:1a:8b:60:
         d7:63:84:2c:ab:4b:d9:bc:67:b6:2d:24:8e:a1:a4:14:28:7e:
         0f:1e:87:98:04:94:31:04:9e:81:c8:47:05:b7:91:5c:c4:91:
         23:8c:b7:fa:12:34:f0:4b:bd:99:1e:87:a3:eb:4a:03:51:a2:
         33:e5:49:06:e9:da:46:f5:ab:6c:b9:00:a6:7d:a8:2d:ff:66:
         15:41:cc:c1:c7:03:2e:95:9f:4b:ee:e6:ff:d2:23:a6:96:d1:
         fb:94:e3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:25:12 2025 by rpki-client