Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32332d3234203d3e203430363736.roa
File:                     3139392e39312e3130302e302f32332d3234203d3e203430363736.roa (raw, json)
Hash identifier:          7qa19f0jx/dApt6q+YuQxAvI/2gMl+CWfQIXjsyh+FA=
Subject key identifier:   6F:E9:7A:00:B1:64:48:87:AA:16:00:7C:07:D6:10:C3:C0:A3:AE:6B
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       5CD3413B0AD5105961E2DC4EB596ACE85BFE0DDE
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32332d3234203d3e203430363736.roa
Signing time:             Fri 27 Jun 2025 20:47:05 +0000
ROA not before:           Fri 27 Jun 2025 20:42:05 +0000
ROA not after:            Fri 26 Jun 2026 20:47:05 +0000
asID:                     40676
IP address blocks:        199.91.100.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 22:38:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:d3:41:3b:0a:d5:10:59:61:e2:dc:4e:b5:96:ac:e8:5b:fe:0d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Jun 27 20:42:05 2025 GMT
            Not After : Jun 26 20:47:05 2026 GMT
        Subject: CN=6FE97A00B1644887AA16007C07D610C3C0A3AE6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:c0:ae:bc:2f:f5:36:85:c8:18:a9:28:d8:1c:
                    03:32:5a:9f:52:47:3f:12:a0:d9:5b:58:3e:3f:0b:
                    4e:fc:54:2f:8f:a2:08:38:30:d3:94:2f:5b:3d:cb:
                    ba:9e:93:48:68:9c:d9:37:99:09:2d:be:b4:b4:6a:
                    6a:6b:39:8c:f3:d8:d8:27:61:c5:de:50:98:1a:b1:
                    a5:df:6e:dc:41:99:d3:a7:7b:23:95:44:df:36:35:
                    e1:6d:ad:02:6c:63:ef:f7:4e:69:82:a3:64:34:c6:
                    9a:7f:4a:2e:74:c5:92:ab:80:4c:c1:a6:52:22:ad:
                    5c:ae:7f:39:0d:b3:e6:90:29:ba:65:c9:71:46:0c:
                    cb:3f:05:4b:82:a9:ab:46:8e:24:a2:58:17:dc:5c:
                    ab:35:96:f0:50:b3:f9:1f:e0:44:32:0c:29:29:5c:
                    ab:55:2e:32:ea:96:ba:33:f7:c7:f1:4a:d8:14:39:
                    fe:fa:78:ab:3b:f2:2d:7c:e6:e3:b3:f4:8c:72:4a:
                    6e:5e:ef:3b:2a:4a:d5:f7:49:5d:0c:15:67:a5:b4:
                    76:22:0e:f0:3d:fa:90:34:ad:e0:c6:91:d3:77:ff:
                    d3:55:f1:34:2a:fe:c3:7b:84:f3:c9:7a:1f:6f:75:
                    03:ab:94:1f:4a:f3:4d:e3:1b:88:88:6d:4e:e0:50:
                    13:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E9:7A:00:B1:64:48:87:AA:16:00:7C:07:D6:10:C3:C0:A3:AE:6B
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32332d3234203d3e203430363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:a3:c0:71:12:b3:f8:ce:2a:55:9a:3e:06:bc:d0:04:bc:01:
         78:80:fd:a3:f5:08:98:a1:d3:c1:f7:c9:51:93:b2:30:0f:51:
         93:41:9c:d7:7b:18:24:37:8f:15:8c:26:b6:a7:39:c2:34:43:
         e7:b5:f1:48:9c:4a:0a:56:30:98:8f:f1:61:83:6d:e6:cf:6e:
         a9:58:ff:a7:dd:4c:97:04:1a:5b:40:a7:df:57:f6:80:32:e7:
         9b:ae:c2:86:6c:0b:a2:c7:57:fb:35:10:9a:d6:fc:9a:a4:08:
         ab:6d:ea:a1:c0:fb:c5:7b:12:55:50:9c:94:b6:66:74:43:e9:
         ad:f0:64:98:cb:d3:15:1a:ce:48:d1:cb:5d:16:d3:27:d9:c0:
         09:52:05:f8:ae:9a:e6:7e:ad:b3:ab:ca:1d:b7:50:25:e3:1f:
         c9:14:23:68:90:d4:f0:4f:de:c3:63:fb:aa:e7:14:39:c5:12:
         32:30:9e:2d:4e:ff:ca:2f:7a:a4:98:85:c8:ad:8c:ff:1c:25:
         0d:0f:fd:52:33:a1:22:2d:b5:1d:73:88:4e:e7:ea:0a:56:14:
         ac:e0:5a:d8:c2:88:af:3d:92:1b:a2:46:99:f9:c8:53:67:f4:
         92:55:9c:36:62:52:7e:01:6c:16:57:2f:db:70:8b:b2:5a:fc:
         54:16:28:08
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUXNNBOwrVEFlh4txOtZas6Fv+Dd4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjUwNjI3MjA0MjA1WhcNMjYwNjI2MjA0NzA1
WjAzMTEwLwYDVQQDEyg2RkU5N0EwMEIxNjQ0ODg3QUExNjAwN0MwN0Q2MTBDM0Mw
QTNBRTZCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cCuvC/1NoXI
GKko2BwDMlqfUkc/EqDZW1g+PwtO/FQvj6IIODDTlC9bPcu6npNIaJzZN5kJLb60
tGpqazmM89jYJ2HF3lCYGrGl327cQZnTp3sjlUTfNjXhba0CbGPv905pgqNkNMaa
f0oudMWSq4BMwaZSIq1crn85DbPmkCm6ZclxRgzLPwVLgqmrRo4kolgX3FyrNZbw
ULP5H+BEMgwpKVyrVS4y6pa6M/fH8UrYFDn++nirO/ItfObjs/SMckpuXu87KkrV
90ldDBVnpbR2Ig7wPfqQNK3gxpHTd//TVfE0Kv7De4TzyXofb3UDq5QfSvNN4xuI
iG1O4FATTQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFG/pegCxZEiHqhYAfAfWEMPA
o65rMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzEzMDMwMmUzMDJmMzIzMzJkMzIz
NDIwM2QzZTIwMzQzMDM2MzczNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcdbZDANBgkqhkiG9w0BAQsF
AAOCAQEABKPAcRKz+M4qVZo+BrzQBLwBeID9o/UImKHTwffJUZOyMA9Rk0Gc13sY
JDePFYwmtqc5wjRD57XxSJxKClYwmI/xYYNt5s9uqVj/p91MlwQaW0Cn31f2gDLn
m67ChmwLosdX+zUQmtb8mqQIq23qocD7xXsSVVCclLZmdEPprfBkmMvTFRrOSNHL
XRbTJ9nACVIF+K6a5n6ts6vKHbdQJeMfyRQjaJDU8E/ew2P7qucUOcUSMjCeLU7/
yi96pJiFyK2M/xwlDQ/9UjOhIi21HXOITufqClYUrOBa2MKIrz2SG6JGmfnIU2f0
klWcNmJSfgFsFlcv23CLslr8VBYoCA==
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:36:19 2025 by rpki-client