Route Origin Authorization

$ rpki-client -vvf rsync-ipv4.prefixlogic.com/repo-ipv4/prefixlogic-v4/0/3139392e3138382e3134392e302f32342d3234203d3e203133353237.roa
File:                     3139392e3138382e3134392e302f32342d3234203d3e203133353237.roa (raw, json)
Hash identifier:          /rJB+qXbIkeU7mOlHzA59O4/hiirFoJqbWiMwE9Vs9k=
Subject key identifier:   0A:31:7F:6D:3B:7A:05:6B:CF:04:EB:56:0B:17:A1:C1:F0:79:94:A4
Certificate issuer:       /CN=3e29f8e85b9abf297df2511f1bfeaad67b735188720ae1c5d8
Certificate serial:       44C3B709C58104075F3AE636FAACAED91E1D95FE
Authority key identifier: 8E:9A:2C:A8:82:78:B2:A1:A4:F6:C2:E7:68:C2:81:CE:77:5E:35:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e6b516b3-6b66-44f7-8aab-c53eb9f8a5ff/3e29f8e85b9abf297df2511f1bfeaad67b735188720ae1c5d8.cer
Subject info access:      rsync://rsync-ipv4.prefixlogic.com/repo-ipv4/prefixlogic-v4/0/3139392e3138382e3134392e302f32342d3234203d3e203133353237.roa
Signing time:             Mon 15 Jun 2026 17:16:39 +0000
ROA not before:           Mon 15 Jun 2026 17:11:39 +0000
ROA not after:            Mon 14 Jun 2027 17:16:39 +0000
asID:                     13527
IP address blocks:        199.188.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rsync-ipv4.prefixlogic.com/repo-ipv4/prefixlogic-v4/0/8E9A2CA88278B2A1A4F6C2E768C281CE775E35E7.crl
                          rsync://rsync-ipv4.prefixlogic.com/repo-ipv4/prefixlogic-v4/0/8E9A2CA88278B2A1A4F6C2E768C281CE775E35E7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e6b516b3-6b66-44f7-8aab-c53eb9f8a5ff/3e29f8e85b9abf297df2511f1bfeaad67b735188720ae1c5d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e6b516b3-6b66-44f7-8aab-c53eb9f8a5ff/e6b516b3-6b66-44f7-8aab-c53eb9f8a5ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e6b516b3-6b66-44f7-8aab-c53eb9f8a5ff/e6b516b3-6b66-44f7-8aab-c53eb9f8a5ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e6b516b3-6b66-44f7-8aab-c53eb9f8a5ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Jul 2026 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c3:b7:09:c5:81:04:07:5f:3a:e6:36:fa:ac:ae:d9:1e:1d:95:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e29f8e85b9abf297df2511f1bfeaad67b735188720ae1c5d8
        Validity
            Not Before: Jun 15 17:11:39 2026 GMT
            Not After : Jun 14 17:16:39 2027 GMT
        Subject: CN=0A317F6D3B7A056BCF04EB560B17A1C1F07994A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:26:86:7c:8a:49:b2:ff:f2:1b:f2:ed:4b:5b:
                    8c:43:1a:1c:4d:36:08:a5:13:a0:80:9a:5f:75:56:
                    e9:9e:8b:ed:6f:5d:8b:f1:91:e4:7a:08:92:f6:4f:
                    5d:f0:62:d2:13:dc:3e:aa:30:08:a5:c1:1b:55:6f:
                    64:0c:05:31:40:3e:8c:23:6d:d0:c4:19:2f:a8:60:
                    4f:af:1b:1f:d2:aa:f2:b6:cd:6f:76:57:b0:58:a4:
                    cf:53:71:e2:e8:b4:28:cf:5c:95:bb:10:7e:6a:e3:
                    b9:39:12:7a:7a:56:b3:f7:64:82:f7:d8:69:9a:6b:
                    38:ce:30:92:52:6b:95:28:a5:e4:61:77:3d:ca:db:
                    3c:1a:e0:5b:87:d4:24:f3:bc:69:17:18:f0:2e:f3:
                    00:2a:8d:f7:29:19:27:d1:6a:27:50:5b:ea:9c:69:
                    b2:e5:15:0c:97:b9:19:c2:81:e8:80:84:3b:78:e3:
                    2b:68:8c:fe:fe:80:85:a7:d0:08:1f:ee:ca:20:f5:
                    e2:1b:f8:3b:fe:d4:9e:d0:2a:5b:20:14:ab:2c:11:
                    f9:e6:6a:fa:4b:e0:df:d9:de:6b:91:d5:af:d4:66:
                    45:69:d5:2d:57:1e:96:06:66:e2:31:0e:36:76:df:
                    22:11:f1:60:b8:8b:89:5e:43:77:23:b6:0c:c4:3e:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:31:7F:6D:3B:7A:05:6B:CF:04:EB:56:0B:17:A1:C1:F0:79:94:A4
            X509v3 Authority Key Identifier:
                keyid:8E:9A:2C:A8:82:78:B2:A1:A4:F6:C2:E7:68:C2:81:CE:77:5E:35:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync-ipv4.prefixlogic.com/repo-ipv4/prefixlogic-v4/0/8E9A2CA88278B2A1A4F6C2E768C281CE775E35E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e6b516b3-6b66-44f7-8aab-c53eb9f8a5ff/3e29f8e85b9abf297df2511f1bfeaad67b735188720ae1c5d8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync-ipv4.prefixlogic.com/repo-ipv4/prefixlogic-v4/0/3139392e3138382e3134392e302f32342d3234203d3e203133353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:eb:09:6b:87:5d:11:52:89:02:2c:da:92:d9:ee:ec:12:6a:
         a9:5d:e1:e3:ea:4d:10:53:10:57:ea:a4:de:2c:5c:12:b4:ec:
         0c:87:77:8e:b4:9a:6d:4d:29:e6:8a:fb:ec:bb:f7:53:f0:f3:
         8d:57:8e:3f:8c:ae:f0:e3:cd:93:e9:94:64:69:73:18:09:1d:
         1a:4a:47:ec:82:4f:db:25:67:40:d5:85:4b:33:51:d0:2e:a2:
         f6:83:70:9a:b7:44:eb:68:0e:2f:70:f5:f3:1d:4c:8e:94:34:
         25:d3:a5:27:af:c5:45:2c:cf:e5:53:df:a6:b7:80:87:b3:23:
         6d:03:32:c7:fc:fb:b9:8d:60:72:f5:48:dc:5b:57:25:6f:c4:
         4e:d1:0c:e6:85:39:2b:9e:8b:ec:04:f0:93:bc:41:68:fa:48:
         55:77:7a:0d:04:56:2e:46:39:bb:e6:d2:1f:17:b1:99:2a:bc:
         6d:ef:0a:6d:09:80:88:c8:ad:59:84:3a:fc:27:2f:fb:8c:c9:
         6a:6b:07:ee:34:38:ef:6d:cc:14:72:0d:b9:87:e1:7f:ce:40:
         40:ec:79:e5:58:01:1d:e1:fc:7b:e8:03:33:36:dc:af:dd:8e:
         27:04:db:07:76:f9:a4:e1:10:48:2f:56:90:25:eb:f3:1d:9c:
         3e:d1:95:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 00:55:15 2026 by rpki-client