Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20323133393930.roa
File:                     3139392e3233312e36372e302f32342d3234203d3e20323133393930.roa (raw, json)
Hash identifier:          NwitFqBw2ySzAPqyHSboZhRJZbCncMpFTQ9xgVwYgt0=
Subject key identifier:   EB:D1:F4:AD:46:56:C7:39:19:0E:80:99:86:40:BB:EB:DE:31:3F:7C
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       60C3F60193D634EB88640EDA0DF365D9B9E8A807
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20323133393930.roa
Signing time:             Sun 09 Feb 2025 13:51:56 +0000
ROA not before:           Sun 09 Feb 2025 13:46:56 +0000
ROA not after:            Sun 08 Feb 2026 13:51:56 +0000
asID:                     213990
IP address blocks:        199.231.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 05:18:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c3:f6:01:93:d6:34:eb:88:64:0e:da:0d:f3:65:d9:b9:e8:a8:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Feb  9 13:46:56 2025 GMT
            Not After : Feb  8 13:51:56 2026 GMT
        Subject: CN=EBD1F4AD4656C739190E80998640BBEBDE313F7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:1a:6c:3d:a7:99:e4:bc:37:fb:ad:7b:d2:
                    c6:d8:01:b6:e9:ad:d4:04:87:f8:35:94:be:c7:89:
                    f4:a3:58:2a:f5:a7:a5:99:c2:b6:2b:1c:d8:55:11:
                    30:b6:72:f7:1d:21:31:35:f8:68:f8:81:55:e2:36:
                    4f:2c:99:7c:af:5c:bc:dd:8f:5f:61:0c:f4:0d:31:
                    d8:9e:17:a3:4b:27:02:8c:b7:00:0e:fb:73:ea:79:
                    89:be:89:de:75:79:94:ea:56:4f:03:e3:2a:45:61:
                    24:9c:86:99:bd:f0:14:8b:88:f5:07:90:b7:5c:77:
                    65:df:88:27:4c:5f:c3:a9:45:95:de:42:16:5a:96:
                    b6:e1:ed:95:d6:89:f7:0c:64:73:d1:9a:6b:98:ef:
                    ac:b1:2f:85:bd:22:40:6f:dd:1a:87:b0:7e:40:ab:
                    b0:b9:0e:01:f2:e3:eb:94:87:5e:8b:94:60:9d:13:
                    26:06:e3:59:28:64:c0:d2:9e:82:b5:86:ab:d3:62:
                    bb:4c:da:c4:e5:7a:b3:0f:22:20:4d:f9:91:6b:d3:
                    1a:1e:4b:3e:11:6f:42:0c:b5:d5:b9:59:ac:5e:4a:
                    e1:90:35:62:54:9f:b8:87:28:84:b3:87:a7:fc:69:
                    5a:c7:5c:9f:57:d6:e8:fc:69:f4:7c:e0:44:69:96:
                    7a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:D1:F4:AD:46:56:C7:39:19:0E:80:99:86:40:BB:EB:DE:31:3F:7C
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e20323133393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:0b:aa:86:d5:74:38:92:2d:a1:51:f0:29:a9:86:24:b2:4a:
         85:c1:63:19:86:4d:ee:ff:40:25:97:30:13:34:d1:4e:80:54:
         a4:3d:0b:87:6e:84:1d:74:43:64:ea:0f:a4:04:20:20:a1:18:
         f1:1b:3d:8e:97:6e:6c:1c:a8:26:c4:91:26:ca:28:c7:37:c8:
         10:b8:60:08:a6:40:b4:93:5b:6f:91:1b:a1:5b:f2:d9:1c:68:
         b6:d5:82:af:af:4d:22:42:6e:83:c4:86:82:0d:9a:b1:0a:12:
         8b:ff:a6:43:f2:05:6b:a3:c2:09:f8:e8:56:2a:9e:7b:dd:1b:
         da:6f:e5:ae:49:4f:eb:8e:4a:eb:10:e3:72:9e:f0:75:7e:c8:
         69:03:03:71:f9:91:be:84:56:36:75:56:f0:7e:41:8d:a8:57:
         1c:56:c7:39:f4:3c:fd:bb:53:3b:8f:55:fd:ba:97:8c:71:37:
         1c:a7:fe:39:2e:ad:20:6c:c6:24:60:d8:a5:80:88:14:0b:b8:
         9f:4e:3a:ef:18:d1:ed:6e:c6:24:aa:fb:5f:e8:4a:0d:b4:98:
         07:27:a9:53:53:f8:e2:85:17:7c:b0:a5:4f:0f:5d:7d:0b:04:
         31:b0:8f:7f:dd:95:ec:57:f2:10:bd:64:41:2b:43:16:f4:e7:
         fb:7a:55:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:37 2025 by rpki-client