Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231392e302f32342d3234203d3e20323036313530.roa
File:                     3139392e36382e3231392e302f32342d3234203d3e20323036313530.roa (raw, json)
Hash identifier:          TIp4jRzytpRCq5bVogByTFTDNmWGP3DdCvOSEAo1VdQ=
Subject key identifier:   EB:AD:9F:75:39:DC:EE:02:E0:18:AC:BC:C7:66:21:40:D6:EB:DF:E0
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       0F53912AF4FD0817531A5D26D8F794632A829233
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231392e302f32342d3234203d3e20323036313530.roa
Signing time:             Thu 11 Sep 2025 07:29:45 +0000
ROA not before:           Thu 11 Sep 2025 07:24:45 +0000
ROA not after:            Thu 10 Sep 2026 07:29:45 +0000
asID:                     206150
IP address blocks:        199.68.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:53:91:2a:f4:fd:08:17:53:1a:5d:26:d8:f7:94:63:2a:82:92:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Sep 11 07:24:45 2025 GMT
            Not After : Sep 10 07:29:45 2026 GMT
        Subject: CN=EBAD9F7539DCEE02E018ACBCC7662140D6EBDFE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cf:19:fe:d1:be:71:f1:31:7a:78:bb:f6:95:
                    22:6c:8e:8c:bf:79:2f:fb:33:ed:5f:ff:fd:3d:80:
                    28:a0:dd:7a:25:d6:92:f3:ac:60:60:e0:54:69:69:
                    d7:27:65:aa:e2:3d:4b:3e:9e:1c:96:ba:8d:58:5d:
                    f5:f5:63:98:39:ae:64:97:c6:cd:0c:ad:05:64:e3:
                    e9:2b:14:31:f4:01:e3:8f:fa:a9:f6:99:00:5d:57:
                    d7:54:54:c7:c8:e9:3b:32:a1:1c:ad:58:1a:1c:64:
                    39:f8:ae:49:dd:65:21:42:9e:c0:f5:bd:9b:c6:5a:
                    8c:7e:ca:e1:31:6f:75:db:fb:71:75:ed:d3:f2:c1:
                    f6:17:2d:04:a6:1f:b0:b7:b5:7d:ed:78:d4:99:b1:
                    bc:de:84:f1:e7:1c:c8:34:8a:f1:1f:72:68:e6:c6:
                    d3:cb:fb:dc:e2:1f:f4:44:ff:3b:7f:63:32:e1:b9:
                    16:56:54:28:52:54:ac:66:9d:72:27:e7:53:e4:69:
                    42:fb:55:3d:6a:91:e4:75:d3:3d:b9:e6:89:22:7f:
                    68:d3:c0:9b:4d:45:45:82:84:6e:79:96:7c:f0:69:
                    41:0a:f3:85:c9:c2:7d:38:b3:d5:a1:11:e8:90:11:
                    78:1c:d8:f8:f1:96:37:a7:e1:77:f0:1e:94:6b:e4:
                    53:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:AD:9F:75:39:DC:EE:02:E0:18:AC:BC:C7:66:21:40:D6:EB:DF:E0
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3139392e36382e3231392e302f32342d3234203d3e20323036313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.68.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:6e:b5:39:9a:77:43:81:5d:db:60:64:a0:05:73:3a:36:7b:
         e8:3a:88:e2:92:73:e9:b9:00:ec:72:ec:e1:6e:cf:56:eb:7a:
         85:49:d3:8a:66:60:3c:25:16:f7:f8:64:9b:86:ac:cc:33:90:
         1f:eb:9c:a6:33:35:79:19:28:7f:cf:8e:66:91:16:84:99:fe:
         4a:60:a0:79:cc:39:ab:5b:08:71:72:fb:d1:d5:1a:a0:eb:73:
         9b:9c:cb:7f:98:12:0f:4a:9b:62:4c:2c:cc:d0:ae:b5:45:5c:
         d9:a1:b4:32:e1:59:38:67:94:4f:8e:d8:b8:86:8c:4c:e9:2a:
         44:74:c7:0b:75:70:02:63:3e:48:07:74:f0:b8:37:08:64:57:
         c0:48:bc:dc:31:e3:dd:77:92:bc:f7:2a:97:36:e5:38:51:19:
         a4:60:b0:be:6d:88:c9:89:10:55:7b:16:b4:15:7a:74:35:21:
         53:de:02:3c:20:c3:55:04:c1:cf:81:75:d2:d4:be:17:2e:96:
         f3:58:0b:65:df:fd:4b:9a:f2:da:ec:60:0c:c3:3a:96:f8:7a:
         29:81:15:66:31:6d:68:5e:2e:3e:8b:2c:15:0b:17:92:0f:2f:
         39:fa:fe:32:e8:47:b0:d9:03:41:8f:9a:16:a3:d9:3a:d9:d8:
         26:68:e3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:10:39 2025 by rpki-client