Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39392e302f32342d3234203d3e203139343337.roa
File:                     3139392e39312e39392e302f32342d3234203d3e203139343337.roa (raw, json)
Hash identifier:          MguRlFdjnwidv23UHZw47XCtF/mUCZrSdKdMRC2+qA4=
Subject key identifier:   75:EA:94:FD:5E:11:C5:29:47:DD:A3:A7:AC:9B:95:D5:1A:8B:10:12
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       310CB75563FDAC508DFD7D30886E6AEA342633D4
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39392e302f32342d3234203d3e203139343337.roa
Signing time:             Wed 07 May 2025 18:28:32 +0000
ROA not before:           Wed 07 May 2025 18:23:32 +0000
ROA not after:            Wed 06 May 2026 18:28:32 +0000
asID:                     19437
IP address blocks:        199.91.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 19:51:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:0c:b7:55:63:fd:ac:50:8d:fd:7d:30:88:6e:6a:ea:34:26:33:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: May  7 18:23:32 2025 GMT
            Not After : May  6 18:28:32 2026 GMT
        Subject: CN=75EA94FD5E11C52947DDA3A7AC9B95D51A8B1012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:0f:07:e2:77:1e:53:dc:e1:94:d9:b9:8c:5c:
                    6e:95:74:44:dc:74:e5:60:1f:18:e0:06:ec:ba:7f:
                    51:e8:c1:e2:2f:4d:e5:73:2c:0f:49:ac:82:49:a7:
                    93:25:12:55:86:33:4c:20:77:ba:c9:c3:ec:2e:a0:
                    5c:80:7a:8a:0f:9f:85:37:14:3b:7b:dd:14:f6:1d:
                    32:1c:e1:51:12:5a:4f:0a:a7:2d:61:00:59:cf:98:
                    04:76:38:5b:44:c5:b7:9d:13:08:78:cf:23:cc:55:
                    32:cd:18:3a:42:b0:65:75:f8:5a:4a:89:a4:d3:05:
                    41:65:ad:b2:c1:d8:3c:a5:fc:4c:41:e2:cb:ef:b9:
                    6e:27:ea:5a:c9:db:c5:82:8d:12:b5:f7:05:63:5e:
                    4f:30:55:a1:de:34:fc:be:bc:4c:d3:1e:9b:72:97:
                    5c:cd:1d:b6:13:97:1f:5f:54:86:77:a1:1c:c0:b8:
                    49:31:0d:d7:39:50:3b:f4:e5:2b:b0:aa:3d:10:94:
                    3f:c6:94:fe:d4:a3:62:c0:b5:9a:8d:f8:77:fc:2e:
                    f6:ce:65:85:ca:43:e5:26:31:28:4e:6c:e8:96:2d:
                    53:00:69:8b:67:ce:e3:4c:2d:40:d2:80:d0:62:11:
                    02:06:85:85:98:60:6f:7a:69:67:ef:a4:38:54:a5:
                    e1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EA:94:FD:5E:11:C5:29:47:DD:A3:A7:AC:9B:95:D5:1A:8B:10:12
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3139392e39312e39392e302f32342d3234203d3e203139343337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:74:41:a8:46:49:0e:d8:e0:44:ff:4c:be:ae:85:e1:31:
         e4:29:d7:6d:71:cb:12:e7:dd:db:48:47:fd:f2:f5:8a:4a:a2:
         5f:98:05:40:8d:ac:f2:45:9b:56:7a:72:b9:9c:ca:03:9c:e2:
         0d:d7:76:5c:6a:65:99:dc:f4:26:d4:d0:93:7e:64:d1:2c:28:
         f2:7f:c3:d9:ca:da:b9:c7:48:ed:19:0e:12:3d:c9:04:55:9c:
         90:a1:f5:c4:bd:f4:77:a0:f8:b1:37:58:59:cf:6e:a2:0a:66:
         31:47:83:76:71:10:c4:2e:3a:a9:63:f4:30:d3:ab:cc:67:d6:
         9e:7f:a5:b2:a6:ed:e0:ed:fb:83:c6:56:05:07:7c:c4:54:f7:
         3f:0a:82:cd:68:8a:d4:64:82:ad:83:d5:1e:11:a1:0e:5f:7b:
         0f:3d:06:54:73:26:f2:b2:52:59:77:28:09:7e:f9:02:9e:cc:
         49:7f:fa:cb:16:3e:ec:04:40:43:ad:6b:e1:9f:63:92:45:92:
         9a:38:cc:4a:be:c9:dc:28:aa:39:26:a7:85:d3:a7:e4:1c:96:
         58:90:ef:16:9d:56:5b:3f:f6:55:61:99:bd:40:76:7b:90:96:
         c4:95:d3:45:2d:f9:9e:84:3b:6f:aa:e2:85:8f:90:31:5d:e5:
         62:14:9b:0e
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUMQy3VWP9rFCN/X0wiG5q6jQmM9QwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzRmN2E0NWEzYTUxMGRlOTE4ZjZkZGY3Y2NhMWRmNTNk
MzJkZDllYjA1NjRlZDVjZmIwHhcNMjUwNTA3MTgyMzMyWhcNMjYwNTA2MTgyODMy
WjAzMTEwLwYDVQQDEyg3NUVBOTRGRDVFMTFDNTI5NDdEREEzQTdBQzlCOTVENTFB
OEIxMDEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA8H4nceU9zh
lNm5jFxulXRE3HTlYB8Y4Absun9R6MHiL03lcywPSayCSaeTJRJVhjNMIHe6ycPs
LqBcgHqKD5+FNxQ7e90U9h0yHOFRElpPCqctYQBZz5gEdjhbRMW3nRMIeM8jzFUy
zRg6QrBldfhaSomk0wVBZa2ywdg8pfxMQeLL77luJ+paydvFgo0StfcFY15PMFWh
3jT8vrxM0x6bcpdczR22E5cfX1SGd6EcwLhJMQ3XOVA79OUrsKo9EJQ/xpT+1KNi
wLWajfh3/C72zmWFykPlJjEoTmzoli1TAGmLZ87jTC1A0oDQYhECBoWFmGBvemln
76Q4VKXhhwIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFHXqlP1eEcUpR92jp6ybldUa
ixASMB8GA1UdIwQYMBaAFO0jZRmOunSSeBSVFuPHbFCUrpk/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODhlMzliZmEwMTg5MjcwNGQ1ZjMzMmViLzAv
RUQyMzY1MTk4RUJBNzQ5Mjc4MTQ5NTE2RTNDNzZDNTA5NEFFOTkzRi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNTIxZWIzM2YtOTY3Mi00Y2Q5LWFjY2UtMTM3MjI3
ZTk3MWFjL2UxNmMyZWU2LWVlOTQtNGFlMy1hNmY3LWNjYjc3NmVmNzVhMi83NGY3
YTQ1YTNhNTEwZGU5MThmNmRkZjdjY2ExZGY1M2QzMmRkOWViMDU2NGVkNWNmYi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTg4ZTM5YmZhMDE4OTI3
MDRkNWYzMzJlYi8wLzMxMzkzOTJlMzkzMTJlMzkzOTJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDMxMzkzNDMzMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADHW2MwDQYJKoZIhvcNAQELBQAD
ggEBAEq+dEGoRkkO2OBE/0y+roXhMeQp121xyxLn3dtIR/3y9YpKol+YBUCNrPJF
m1Z6crmcygOc4g3XdlxqZZnc9CbU0JN+ZNEsKPJ/w9nK2rnHSO0ZDhI9yQRVnJCh
9cS99Heg+LE3WFnPbqIKZjFHg3ZxEMQuOqlj9DDTq8xn1p5/pbKm7eDt+4PGVgUH
fMRU9z8Kgs1oitRkgq2D1R4RoQ5few89BlRzJvKyUll3KAl++QKezEl/+ssWPuwE
QEOta+GfY5JFkpo4zEq+ydwoqjkmp4XTp+QclliQ7xadVls/9lVhmb1AdnuQlsSV
00Ut+Z6EO2+q4oWPkDFd5WIUmw4=
-----END CERTIFICATE-----
Generated at Sat May 10 19:20:44 2025 by rpki-client