Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36322e302f32342d3234203d3e20383334.roa
File:                     3139382e3137372e36322e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          148jewiGIMh5R5iywR0DXpYrG4qdLiTM8BOHNpwvBHc=
Subject key identifier:   25:30:2B:85:69:D4:E2:E4:DB:EB:4B:04:D0:57:84:F7:89:C5:19:A1
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       69E362C538562E48A67FB62E3AEB034ECEF0EF8E
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36322e302f32342d3234203d3e20383334.roa
Signing time:             Thu 06 Mar 2025 08:12:15 +0000
ROA not before:           Thu 06 Mar 2025 08:07:15 +0000
ROA not after:            Thu 05 Mar 2026 08:12:15 +0000
asID:                     834
IP address blocks:        198.177.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e3:62:c5:38:56:2e:48:a6:7f:b6:2e:3a:eb:03:4e:ce:f0:ef:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Mar  6 08:07:15 2025 GMT
            Not After : Mar  5 08:12:15 2026 GMT
        Subject: CN=25302B8569D4E2E4DBEB4B04D05784F789C519A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:12:e3:9c:88:c9:d6:89:74:99:23:b8:b4:e1:
                    7f:3a:0a:8e:45:00:f9:7a:ce:17:90:2b:69:f8:95:
                    e6:bb:32:7f:60:25:c0:33:d2:e4:7b:4e:c1:6c:53:
                    b9:b7:b2:eb:98:f8:e5:ae:86:6f:4a:61:b4:00:63:
                    e1:23:f2:e4:ef:fd:22:a3:b4:9d:dc:ca:b0:e3:c6:
                    11:5a:aa:fc:47:65:30:49:42:e4:43:b8:6e:c3:90:
                    dd:dd:99:93:71:eb:11:98:76:53:43:a9:da:0e:a5:
                    27:19:53:b6:a8:04:70:55:3c:a6:b3:2e:5a:d5:ad:
                    a7:48:2d:e0:3c:26:78:e8:1a:40:17:04:e7:45:1a:
                    25:9d:59:48:32:0a:14:9d:a0:49:73:8a:15:78:7f:
                    49:9b:90:10:01:ea:98:0b:4d:ea:d3:9b:04:8f:be:
                    e9:71:91:4b:3e:3b:fd:ab:53:c4:9f:0b:ba:e8:74:
                    98:54:c4:f1:c9:ea:2b:46:85:8e:b7:22:04:2e:b1:
                    da:a7:03:87:e8:d0:e8:4d:98:62:ec:f7:4c:96:9e:
                    a5:65:29:ca:b3:7e:4c:bc:83:e8:20:1a:ba:25:59:
                    e5:bf:6c:89:16:51:ee:86:3c:41:6f:e7:18:14:e5:
                    b5:ef:0f:dc:a5:01:3b:74:12:32:02:ea:00:81:1a:
                    cb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:30:2B:85:69:D4:E2:E4:DB:EB:4B:04:D0:57:84:F7:89:C5:19:A1
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36322e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:29:ce:d6:84:96:fa:53:05:cf:74:a4:50:d5:4b:a8:e3:0c:
         9c:68:c0:55:39:55:04:fc:5a:71:d9:05:51:7c:cd:51:9b:d4:
         fb:22:c0:7f:81:f8:62:4a:6d:67:29:4d:81:19:c6:45:f8:ea:
         24:97:b2:bc:71:bd:a9:d1:55:ea:8d:1c:90:63:d5:e4:d6:55:
         3f:e9:c0:09:92:39:0a:c9:4d:86:1a:42:b2:21:7d:c5:eb:eb:
         c3:c3:9d:b8:f8:47:22:cf:ab:66:4c:81:6e:61:71:2f:50:e7:
         e3:8b:2b:60:e6:a7:14:2b:90:13:00:b2:d4:66:7b:02:0f:91:
         f5:fa:14:0e:1d:4d:cf:d8:2d:e7:82:60:97:55:23:d4:f6:4e:
         76:eb:21:9e:ce:08:85:36:cb:2a:74:c7:fe:05:24:a3:f9:17:
         0b:11:7f:13:e0:8e:25:9d:c4:29:d3:9b:7b:4d:26:4c:17:9b:
         21:ba:cf:78:83:3c:2f:d1:ee:03:b7:75:d5:d8:ec:35:12:cc:
         32:a7:de:60:72:90:01:42:67:03:52:c2:26:be:d9:6d:f1:92:
         56:a4:b5:f6:6b:73:21:d1:05:6c:72:5c:ba:48:da:82:31:c9:
         9c:22:30:5e:c9:38:a4:d0:b7:29:ed:98:fd:ea:d9:d7:a1:3d:
         9b:92:9e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:42:51 2025 by rpki-client