Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35392e302f32342d3234203d3e20323035383836.roa
File:                     3139382e3137372e35392e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier:          U2gEwFSzlguMmNXAIVSooiQmj1QCmi9/NNcENhuPhGI=
Subject key identifier:   1B:E3:58:7C:54:A2:AC:B5:15:29:75:5C:75:11:6E:21:74:2C:BF:1F
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       3467D97558DFB83C54CA4B0070278664BCC1081B
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35392e302f32342d3234203d3e20323035383836.roa
Signing time:             Wed 29 Oct 2025 13:50:57 +0000
ROA not before:           Wed 29 Oct 2025 13:45:57 +0000
ROA not after:            Wed 28 Oct 2026 13:50:57 +0000
asID:                     205886
IP address blocks:        198.177.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 01 Nov 2025 05:21:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:67:d9:75:58:df:b8:3c:54:ca:4b:00:70:27:86:64:bc:c1:08:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Oct 29 13:45:57 2025 GMT
            Not After : Oct 28 13:50:57 2026 GMT
        Subject: CN=1BE3587C54A2ACB51529755C75116E21742CBF1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f3:a9:b2:5e:87:90:53:c3:53:5c:ea:06:89:
                    51:63:6f:e3:3d:1f:b4:5d:a3:46:2a:88:76:c0:5a:
                    c7:d1:9d:f5:f0:3e:75:8f:d1:06:db:2a:46:52:21:
                    26:4c:91:29:b7:ab:e8:c7:5e:64:56:cd:6f:81:7e:
                    1a:78:2b:14:01:e0:b5:b7:f5:78:0e:9f:86:46:d5:
                    47:6e:79:eb:dd:38:1d:66:cc:62:ee:19:28:d5:e1:
                    26:4c:38:1a:cc:e7:39:a0:8a:e0:fd:32:e8:43:11:
                    a1:55:ad:9a:76:57:00:0f:6d:3a:ad:f5:92:60:32:
                    ef:5b:f6:71:50:a3:f8:f0:46:e8:4c:5f:44:ec:5f:
                    d8:aa:31:3c:a5:1d:82:1f:0c:a7:7e:d0:6e:8e:c8:
                    f4:a2:8d:d4:18:89:2e:d7:31:35:ce:58:1b:35:06:
                    f5:67:17:8a:db:56:ed:9d:7a:92:2f:b7:25:5a:21:
                    54:68:9d:45:6b:b0:1e:a1:1c:f4:a0:1f:e9:c1:56:
                    0e:9e:a1:f2:6e:28:71:30:60:86:70:53:f4:f3:57:
                    ab:29:8a:83:56:80:5c:3a:3b:b7:24:fe:38:41:bc:
                    a6:b1:97:c4:c3:e1:87:ac:e9:f2:d4:8d:01:48:36:
                    99:f9:24:e7:bd:55:f9:51:1a:a4:32:75:4f:93:29:
                    84:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E3:58:7C:54:A2:AC:B5:15:29:75:5C:75:11:6E:21:74:2C:BF:1F
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35392e302f32342d3234203d3e20323035383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:72:32:b9:3f:12:20:64:fd:e0:e6:00:06:dd:61:58:63:f9:
         df:fe:49:7c:d7:7a:36:e9:33:64:e2:27:4e:7a:8b:43:1a:8e:
         f1:4a:67:39:65:5f:5e:2f:2b:e3:97:39:47:a8:91:46:47:7b:
         71:f3:18:3a:d9:02:d4:79:f3:de:20:bb:62:2d:ee:cc:4f:ee:
         78:8b:a1:67:5d:98:06:ec:ef:fd:8d:29:87:d6:c8:53:54:85:
         d2:74:d4:6f:27:a8:db:11:47:a7:58:4a:c8:32:f0:47:c0:cb:
         83:42:19:b0:5f:6d:ac:b7:b6:d6:4b:1d:1a:e9:4a:e6:bc:24:
         4f:d6:78:f6:0a:00:2f:7b:94:62:24:74:60:59:dc:1c:a1:5a:
         4c:40:d8:73:8f:8f:f6:40:f8:99:e5:27:7c:25:6c:f6:dd:a0:
         0a:31:67:4a:2a:f6:9a:a8:27:11:dc:1d:08:db:26:c0:a0:8c:
         26:d0:a8:71:fe:a7:ea:c5:7e:a7:54:91:21:55:d0:df:fb:2a:
         c6:ea:97:00:0f:2a:2d:9a:62:db:49:07:9d:c8:3f:5b:01:e8:
         c0:3a:59:7f:d2:e3:93:52:96:3d:05:f8:c9:75:d8:36:24:64:
         fa:cf:ab:e5:90:d4:fa:94:91:4f:07:4c:f2:7c:7b:19:fa:d0:
         39:28:d8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 16:39:22 2025 by rpki-client