Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e2039333034.roa
File:                     3139382e3137372e36332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          QboDN8JwNy6y+nrc0nZmoD3HLxQprao95NAP+jtTK9U=
Subject key identifier:   B2:19:3E:ED:D4:C0:BD:4F:C3:4B:78:E0:3A:BA:73:90:1F:35:76:3B
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       09B44F98C66C81034E37072EA3E63BF1628B9ACB
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e2039333034.roa
Signing time:             Thu 06 Mar 2025 08:10:25 +0000
ROA not before:           Thu 06 Mar 2025 08:05:25 +0000
ROA not after:            Thu 05 Mar 2026 08:10:25 +0000
asID:                     9304
IP address blocks:        198.177.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 11:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b4:4f:98:c6:6c:81:03:4e:37:07:2e:a3:e6:3b:f1:62:8b:9a:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Mar  6 08:05:25 2025 GMT
            Not After : Mar  5 08:10:25 2026 GMT
        Subject: CN=B2193EEDD4C0BD4FC34B78E03ABA73901F35763B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:38:7e:8e:ac:c1:56:41:65:15:44:41:9e:01:
                    fa:eb:50:3d:7c:e7:cc:e7:1c:06:08:ba:47:ac:ba:
                    b3:b1:5b:77:b1:a8:e0:d7:cc:6a:61:7c:04:42:d3:
                    02:7a:16:61:4c:9e:e4:dc:20:4d:10:b1:61:89:09:
                    d7:4c:f6:1f:25:fb:67:bb:1b:cd:5f:1d:2f:4a:cc:
                    94:e4:50:e7:e1:de:ae:af:b7:cf:d8:1f:bf:45:04:
                    d5:b8:6f:9d:1f:9f:59:56:05:14:3a:69:4a:6c:00:
                    75:ef:c1:64:01:89:10:b8:d2:93:4a:9e:ad:6e:aa:
                    8c:73:7f:b1:c7:8e:19:fe:a8:72:5c:d9:15:8f:6f:
                    2b:5c:fb:84:4d:d5:8d:d0:b3:51:1a:c8:91:d1:0d:
                    a6:ab:da:20:ff:f2:d5:08:ce:a3:0d:5b:27:44:84:
                    83:b6:4e:4e:f8:56:f1:fb:6c:9e:17:b5:37:81:27:
                    cc:4b:29:ed:bf:12:7a:93:4d:09:8f:8b:21:53:20:
                    15:93:32:55:e4:74:1a:09:33:cc:6b:15:f8:55:d3:
                    3c:40:5d:6b:21:28:b0:dc:ed:7c:a8:a4:e9:8c:84:
                    c7:2d:a2:a2:f0:aa:53:1b:15:f4:04:5a:a6:40:e4:
                    cd:10:38:2d:23:58:bf:17:54:43:3b:5b:e5:93:e3:
                    2c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:19:3E:ED:D4:C0:BD:4F:C3:4B:78:E0:3A:BA:73:90:1F:35:76:3B
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:0b:00:d6:db:fb:16:90:2a:1b:13:5c:2d:6f:93:ef:d0:8b:
         8d:b1:7f:15:95:f5:b9:86:30:29:d3:af:94:55:27:ac:cd:8f:
         b7:5f:64:a7:58:52:9d:c0:cf:e2:6d:f3:d6:bc:44:3d:58:5e:
         a3:fc:2e:f7:b8:5f:9a:95:53:32:8f:c9:8f:dd:c7:68:a9:d0:
         ed:13:c9:2f:04:ab:02:7d:8f:bd:2d:e8:dd:e1:0a:e5:1c:a6:
         7a:bc:f7:d8:a8:81:b3:92:21:dc:6d:71:d6:21:12:4c:b5:8f:
         9a:97:f2:30:85:88:66:cf:60:78:9c:a5:ea:bf:76:2e:64:8f:
         45:28:df:48:66:ce:5f:bb:a6:d2:04:a4:f5:ae:be:80:94:a8:
         7d:ba:cd:48:97:7b:a3:dc:4d:fb:d7:77:7a:20:c4:75:95:41:
         78:13:be:b8:ad:a2:b7:51:f6:88:57:27:3e:5d:18:29:f5:f5:
         f9:59:fe:8a:7b:5a:ea:c4:5f:fc:a2:51:8c:8b:ee:4c:4e:ad:
         13:19:10:4c:e5:f3:a3:46:10:ee:0d:a9:e8:da:7a:f9:61:e1:
         b3:71:b9:41:29:80:a9:4a:cf:3c:00:95:7f:e4:a2:bb:6e:d8:
         89:c2:9f:0e:68:2c:ac:e2:8d:99:78:fa:32:7f:b1:de:69:da:
         fb:20:99:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:35 2025 by rpki-client