Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35372e302f32342d3234203d3e20343031353538.roa
File:                     3139382e3137372e35372e302f32342d3234203d3e20343031353538.roa (raw, json)
Hash identifier:          8ezoX9LyviIT+zRkfcT9D6UnO9N0AhoB0AR4YxfUF0A=
Subject key identifier:   45:E2:F3:AA:0E:70:53:DF:B4:60:27:BA:0A:8B:9D:C2:62:B6:7D:74
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       6BC8DCA63F65B6F13F4BCC29C1427D83874648BA
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35372e302f32342d3234203d3e20343031353538.roa
Signing time:             Fri 28 Feb 2025 16:46:23 +0000
ROA not before:           Fri 28 Feb 2025 16:41:23 +0000
ROA not after:            Fri 27 Feb 2026 16:46:23 +0000
asID:                     401558
IP address blocks:        198.177.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 19:42:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:c8:dc:a6:3f:65:b6:f1:3f:4b:cc:29:c1:42:7d:83:87:46:48:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Feb 28 16:41:23 2025 GMT
            Not After : Feb 27 16:46:23 2026 GMT
        Subject: CN=45E2F3AA0E7053DFB46027BA0A8B9DC262B67D74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3e:a7:15:29:b1:53:c3:0a:b0:95:4c:9d:57:
                    e5:ec:a0:26:4b:10:79:d9:c1:0b:23:30:67:1b:bb:
                    50:c6:b3:bd:da:bd:57:f2:45:01:a8:e9:91:ea:b2:
                    5f:41:34:12:b7:86:ce:aa:b2:a6:64:38:3a:cb:c9:
                    e3:c1:20:42:46:67:e4:67:c4:14:f4:7b:6a:d8:cb:
                    5e:bf:f5:a7:a6:f2:45:09:4e:09:ad:4b:08:cc:e1:
                    46:44:35:13:ab:43:36:1a:de:a6:27:71:85:69:c1:
                    03:46:94:64:62:07:56:8b:ad:94:79:64:a5:b1:19:
                    16:bc:10:07:19:ac:79:2f:7e:d8:8d:84:a0:6c:b5:
                    8e:1d:4c:9d:56:1a:86:6d:4a:67:3b:5b:7c:78:b0:
                    d1:34:82:8a:f8:2b:a5:bc:5c:7e:2e:ed:87:7a:ba:
                    b5:56:5d:3f:82:e0:d8:dc:69:d0:e2:d3:48:18:a8:
                    18:f3:b5:4b:95:2d:55:7a:11:c2:6d:cd:48:d7:21:
                    2f:f5:8e:32:10:ec:35:fd:50:2f:9e:6c:ae:6f:25:
                    a7:6e:83:7b:ec:96:97:9f:a9:2b:70:55:44:33:a5:
                    6c:cb:5b:0f:32:fe:ff:6b:c3:29:66:fe:02:f8:54:
                    da:8b:a6:5c:f9:9b:69:a1:f1:c0:12:19:21:73:7c:
                    95:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:E2:F3:AA:0E:70:53:DF:B4:60:27:BA:0A:8B:9D:C2:62:B6:7D:74
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35372e302f32342d3234203d3e20343031353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:5b:dd:7e:d8:14:00:3d:95:80:89:d5:70:31:5a:ab:6d:6b:
         b5:3d:ef:25:48:07:40:cb:6b:76:e5:e2:3c:40:6a:fb:79:d7:
         78:b2:ac:39:5d:13:f0:1b:5f:53:51:c0:ab:11:b1:b6:a4:27:
         a8:f3:df:e6:49:58:36:1f:bb:5f:ec:1b:e9:ce:b4:63:d9:84:
         b1:9a:49:57:5f:11:86:18:96:78:2e:57:33:c9:91:8e:11:8b:
         0f:0f:db:29:93:38:18:a4:12:44:5a:5c:f3:d2:64:30:07:fd:
         98:d5:ad:f6:0e:dd:58:75:df:5a:71:57:53:58:65:64:08:17:
         7a:c0:07:98:d0:33:95:37:55:92:95:20:7d:4d:72:3a:0d:26:
         1b:63:e1:a0:0d:64:05:cb:c9:8b:fb:80:da:ab:00:39:d4:30:
         4c:95:28:fa:96:49:6b:a2:df:2f:e4:4b:89:5b:8e:4b:90:90:
         4b:6e:07:84:4e:fc:5d:20:a6:1c:a8:ac:94:e7:fc:51:8a:45:
         e1:94:46:04:6b:19:f3:df:d7:fe:eb:15:6b:4e:a7:af:40:6a:
         09:cc:aa:92:a0:b1:a1:97:99:9e:cc:c1:4b:a2:40:20:88:78:
         85:3f:91:12:cb:2e:0e:72:b6:3a:54:82:79:36:52:28:ce:d2:
         10:6f:d0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 15 01:07:34 2025 by rpki-client