Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203235313938.roa
File:                     3139392e39312e3130302e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          WWbFe3scXd8u15E1Y4qcYe2LeShbyARVo6SqO8V43OA=
Subject key identifier:   AE:94:28:D7:05:74:0F:67:E1:25:56:01:6D:73:B2:AD:2B:5D:43:08
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       78666B99B85F499C887ACEAAD0FF216D7867A52E
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203235313938.roa
Signing time:             Mon 22 Sep 2025 03:42:23 +0000
ROA not before:           Mon 22 Sep 2025 03:37:23 +0000
ROA not after:            Mon 21 Sep 2026 03:42:23 +0000
asID:                     25198
IP address blocks:        199.91.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:66:6b:99:b8:5f:49:9c:88:7a:ce:aa:d0:ff:21:6d:78:67:a5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Sep 22 03:37:23 2025 GMT
            Not After : Sep 21 03:42:23 2026 GMT
        Subject: CN=AE9428D705740F67E12556016D73B2AD2B5D4308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:73:76:64:be:27:7a:bf:34:bb:21:cc:2e:ea:
                    38:c3:ff:56:30:00:13:d8:a2:92:62:47:33:fa:b6:
                    7b:6e:1b:ed:15:02:78:43:59:01:fb:71:dd:84:a8:
                    eb:2c:c0:ee:28:5f:90:d9:82:4f:ed:51:01:d1:13:
                    19:47:20:42:a2:b9:f9:cf:aa:28:00:93:45:8f:04:
                    55:9e:5d:16:d5:9b:68:f9:14:65:27:ad:57:a4:d4:
                    40:1e:e6:ca:79:60:81:53:01:76:5e:1e:89:28:0f:
                    9f:51:cd:b3:a6:84:e9:42:8b:38:28:58:7a:18:b9:
                    a4:e3:4a:57:dc:0c:d2:e1:f4:53:10:20:26:41:3a:
                    44:a5:6f:4b:d4:75:39:b8:0b:c4:9e:04:28:f7:ef:
                    9e:05:db:a9:ab:ab:c8:c3:6e:44:df:49:bb:1a:3d:
                    63:f0:2f:83:f3:18:71:fb:90:a8:70:34:51:66:ca:
                    22:f2:08:b1:e5:f1:74:e4:75:51:33:d5:30:6d:91:
                    a1:98:07:c1:4e:f4:77:c7:11:a9:52:55:e8:e2:53:
                    12:c4:98:87:89:2d:30:5d:f4:35:14:71:3f:e2:17:
                    f6:04:45:94:c8:a1:14:69:2f:cc:cd:80:2e:69:d5:
                    b9:de:28:5e:74:26:90:d5:68:3f:54:c9:c3:ce:9a:
                    2a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:94:28:D7:05:74:0F:67:E1:25:56:01:6D:73:B2:AD:2B:5D:43:08
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e3130302e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:95:c4:fe:94:59:bd:4e:f8:14:a7:34:4c:3d:1a:fc:cd:
         b5:06:e4:4c:5f:05:b7:6b:13:a8:02:be:53:4c:6b:dd:b1:f5:
         0e:b6:7e:85:ec:f8:87:f4:ab:8d:a3:3b:8d:d0:05:3f:06:cd:
         2f:c3:f6:ca:40:64:99:77:f6:86:b5:73:69:bb:f4:c2:59:5a:
         d5:d8:18:fb:f4:b7:15:94:fd:39:81:da:fc:d6:d3:fa:97:a9:
         99:68:d4:ce:26:b4:ee:92:cf:09:8b:14:25:f9:cf:06:29:f7:
         fa:06:11:6c:59:08:45:5e:08:10:2c:f7:24:1c:c5:6c:d0:97:
         cc:71:30:07:ea:38:22:3f:f1:b9:63:ae:d7:eb:15:2a:c5:62:
         fd:73:dc:ec:7f:95:25:26:59:a8:b7:45:25:92:89:70:a6:48:
         55:53:48:c0:19:c4:fa:e7:87:85:c0:a9:69:54:eb:ff:ce:da:
         9e:e5:cb:60:e9:71:b0:75:81:57:19:13:aa:11:13:da:e0:70:
         b2:5a:c1:58:12:5b:b1:13:85:06:88:36:7c:df:7d:6d:54:0d:
         69:57:1f:f4:df:87:af:43:0e:45:40:f2:43:00:32:19:2a:94:
         67:c2:b0:03:11:b6:88:96:70:da:1d:48:80:06:c7:34:aa:52:
         0e:4a:f2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:47:50 2025 by rpki-client