Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32342d3234203d3e20323035383836.roa
File:                     3139382e3137372e35382e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier:          5eYio9cyI0ik5SjnSgG3Hrxd2lCEWCg5B+g8ND1zpGg=
Subject key identifier:   E4:EF:5A:52:9E:19:95:57:E1:A4:0A:FB:6A:C9:30:2F:B1:63:2F:9A
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       23E439DF986D4DF2D4B82A0F50C54896BAEF4FDF
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32342d3234203d3e20323035383836.roa
Signing time:             Wed 29 Oct 2025 13:50:54 +0000
ROA not before:           Wed 29 Oct 2025 13:45:54 +0000
ROA not after:            Wed 28 Oct 2026 13:50:54 +0000
asID:                     205886
IP address blocks:        198.177.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Nov 2025 05:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e4:39:df:98:6d:4d:f2:d4:b8:2a:0f:50:c5:48:96:ba:ef:4f:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Oct 29 13:45:54 2025 GMT
            Not After : Oct 28 13:50:54 2026 GMT
        Subject: CN=E4EF5A529E199557E1A40AFB6AC9302FB1632F9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fc:8a:02:d3:54:4a:85:2a:c7:5e:90:da:64:
                    49:ad:88:ce:21:f2:b1:6d:2e:be:7a:ff:f9:61:f7:
                    ef:b3:19:5c:43:c7:e9:6e:0e:ce:96:a7:44:79:af:
                    84:8e:fe:05:ea:1d:82:95:ee:ae:20:04:c0:da:04:
                    48:8f:b8:dd:30:a4:65:d3:c3:31:49:dd:73:93:d6:
                    fc:ea:a3:33:07:c5:d4:70:fe:c0:43:45:e7:51:27:
                    3b:0a:fd:ba:d8:64:9c:ce:31:ce:1e:30:bb:28:cf:
                    8b:ad:72:d4:3c:7b:90:3b:52:a4:28:5c:91:ca:9f:
                    e5:c6:79:19:21:96:67:c4:9b:4e:f6:cd:26:bb:39:
                    2f:ee:3d:b6:d7:21:df:0e:fc:2a:11:d3:a3:a4:b6:
                    ff:74:74:03:9a:40:cf:b3:17:c9:3e:7b:b1:22:09:
                    9d:89:59:15:f0:b7:cb:45:26:cb:69:44:e4:ff:51:
                    e5:ca:b8:46:e1:82:0f:f8:91:d4:d9:2d:de:dc:37:
                    2b:03:44:75:60:ec:7e:a0:bd:e6:29:c2:f9:4a:f7:
                    cb:df:35:91:98:e6:6f:48:93:cf:ab:78:28:11:cc:
                    7f:12:dc:34:0a:69:bf:32:b9:ff:03:d8:4a:a2:17:
                    36:1d:8e:d5:d9:82:a9:d3:1b:00:91:ab:e8:3c:4c:
                    c2:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:EF:5A:52:9E:19:95:57:E1:A4:0A:FB:6A:C9:30:2F:B1:63:2F:9A
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32342d3234203d3e20323035383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:e0:f8:7c:a5:db:66:7a:88:c1:78:52:b6:da:4d:3a:62:ce:
         58:60:62:44:6d:78:7a:7d:92:29:c2:67:3e:66:07:b3:25:ed:
         36:04:59:67:25:b4:53:6e:24:db:a2:ca:74:d5:ae:93:b9:5c:
         91:97:dc:6d:58:94:51:e7:72:01:f5:4d:2f:ad:29:49:97:ae:
         ad:fa:02:b9:8e:fd:ed:0c:26:dd:a0:bf:22:73:b1:9f:11:2b:
         33:8d:6d:a6:34:01:94:5d:3e:cd:bc:e7:36:45:50:5e:03:cb:
         36:e5:66:21:33:f9:28:15:5b:ee:9c:15:b6:23:a8:8c:4e:a7:
         8e:89:1d:b6:3b:36:84:51:47:ef:e7:48:e1:79:ce:21:ce:78:
         c1:ff:8d:5b:87:8a:f8:17:db:cc:13:e1:7e:23:ac:40:ec:85:
         b6:70:56:9b:0c:f6:56:f7:73:42:08:ef:c1:ee:18:0e:21:81:
         b2:f2:d2:b4:55:c5:b5:bf:4d:99:d0:c5:a7:a1:58:f6:d3:69:
         e6:4a:fe:c8:86:e6:cf:c8:11:7a:66:8a:60:d8:99:6a:39:af:
         17:a1:be:06:d8:25:8a:dd:ad:a6:be:11:b4:ac:b3:b9:05:dc:
         9a:bd:a9:3a:6b:71:f9:2b:39:08:c5:3b:a4:34:0f:cb:9b:c8:
         bd:50:bc:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 16:39:21 2025 by rpki-client