Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132352e302f32342d3234203d3e2039303039.roa
File:                     3139332e3232372e3132352e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          RFFdM+IFoQG0W9Y8NkOq97K0nAmsgLxxVDtO5QlGCOQ=
Subject key identifier:   8F:00:B9:FE:7E:2A:A8:0D:20:75:B0:B5:AC:05:28:25:B6:AE:D9:4B
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       52050D566B72D1937856F425B40E360EAE7F71F7
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132352e302f32342d3234203d3e2039303039.roa
Signing time:             Wed 18 Jun 2025 14:29:44 +0000
ROA not before:           Wed 18 Jun 2025 14:24:44 +0000
ROA not after:            Wed 17 Jun 2026 14:29:44 +0000
asID:                     9009
IP address blocks:        193.227.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 06:46:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:05:0d:56:6b:72:d1:93:78:56:f4:25:b4:0e:36:0e:ae:7f:71:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun 18 14:24:44 2025 GMT
            Not After : Jun 17 14:29:44 2026 GMT
        Subject: CN=8F00B9FE7E2AA80D2075B0B5AC052825B6AED94B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:24:34:74:ac:bc:4e:fe:37:c5:be:de:57:71:
                    0c:cf:05:fd:61:51:33:69:00:a8:91:4e:41:3c:2c:
                    ef:54:fd:0f:20:e4:a2:73:2a:70:88:1e:06:8f:67:
                    49:8e:9c:4f:cc:61:79:9b:a9:ec:5f:6b:51:7d:5e:
                    ec:ce:28:4a:0b:7b:e3:55:cf:ce:77:28:20:57:18:
                    2f:3f:29:65:8d:00:0c:8b:2b:b3:35:fc:4b:33:f7:
                    63:e4:98:e9:24:57:fe:9e:5b:b5:5b:84:ca:c2:87:
                    f3:f1:b4:be:4f:79:0b:af:39:59:3a:8b:69:1b:98:
                    07:8d:da:78:dd:8d:f9:d5:6f:ec:ea:a0:c5:89:6f:
                    25:2d:2f:0d:a3:72:e7:c3:89:73:47:11:bc:b5:af:
                    a9:64:df:3d:fe:26:7b:f0:f9:e6:07:a8:f7:72:ad:
                    80:42:75:10:f2:e4:5b:5c:ba:e0:2c:8e:bb:b9:67:
                    af:3c:56:57:50:6b:85:98:5c:ec:4d:18:32:0c:61:
                    ec:9e:e4:03:46:f8:48:c1:4c:42:36:1f:fb:75:19:
                    77:93:9d:7f:8e:c1:a9:49:7d:87:fa:84:14:41:6b:
                    a4:23:8f:a1:8c:2a:b0:5a:19:3c:56:74:9a:13:22:
                    29:5e:f3:09:7c:99:b2:01:01:50:5f:c3:ba:73:41:
                    8d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:00:B9:FE:7E:2A:A8:0D:20:75:B0:B5:AC:05:28:25:B6:AE:D9:4B
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e3232372e3132352e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.227.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:31:31:89:6b:e7:e1:c3:b2:16:12:37:2b:42:d6:d8:b8:
         b8:ad:43:d1:2d:c5:58:eb:63:b9:c6:95:a0:95:bd:59:28:9c:
         1e:98:9e:c0:05:76:46:55:8c:f7:8c:0f:ff:5c:ea:b6:be:f8:
         0d:2f:63:f8:c8:d6:34:c3:76:cb:05:94:e3:e5:f6:99:1b:e2:
         02:66:02:9e:d4:c7:0b:9f:63:6f:ed:7f:3e:21:7c:e7:d5:e7:
         56:e2:fe:a1:26:a6:57:be:c6:ca:7b:65:09:91:c6:55:32:b0:
         20:6f:60:ec:fc:53:8c:d1:72:ba:e9:df:9e:1e:de:d4:1c:f7:
         54:85:c2:4b:17:f5:fd:9b:96:86:37:45:34:ba:31:85:92:49:
         aa:6d:f3:41:48:3f:92:04:51:67:77:ef:fd:02:4e:fa:9f:83:
         e9:f1:1a:4f:2e:0e:f6:d3:59:12:b4:47:f2:e3:a6:42:82:39:
         5c:58:fd:25:81:5e:76:6f:da:4f:0f:eb:5f:e4:cd:28:85:b7:
         0d:2a:ab:1b:6d:1a:7b:52:a4:6a:87:32:3a:48:f2:4f:d3:5e:
         05:da:08:87:46:6b:5f:42:37:82:23:f5:f6:c9:2d:a8:4d:a7:
         c5:4a:14:ad:8d:76:3e:4c:c7:1f:25:1b:d5:c4:3c:ee:1b:16:
         68:e1:94:91
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUUgUNVmty0ZN4VvQltA42Dq5/cfcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMWYyMmNmMDc1NzFlY2JhYjZkNDYwYTFmM2I2YzVkNjE5
N2QwOTgzNjQzYTU0ZDJlZDQwHhcNMjUwNjE4MTQyNDQ0WhcNMjYwNjE3MTQyOTQ0
WjAzMTEwLwYDVQQDEyg4RjAwQjlGRTdFMkFBODBEMjA3NUIwQjVBQzA1MjgyNUI2
QUVEOTRCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CQ0dKy8Tv43
xb7eV3EMzwX9YVEzaQCokU5BPCzvVP0PIOSicypwiB4Gj2dJjpxPzGF5m6nsX2tR
fV7szihKC3vjVc/OdyggVxgvPylljQAMiyuzNfxLM/dj5JjpJFf+nlu1W4TKwofz
8bS+T3kLrzlZOotpG5gHjdp43Y351W/s6qDFiW8lLS8No3Lnw4lzRxG8ta+pZN89
/iZ78PnmB6j3cq2AQnUQ8uRbXLrgLI67uWevPFZXUGuFmFzsTRgyDGHsnuQDRvhI
wUxCNh/7dRl3k51/jsGpSX2H+oQUQWukI4+hjCqwWhk8VnSaEyIpXvMJfJmyAQFQ
X8O6c0GN1QIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFI8Auf5+KqgNIHWwtawFKCW2
rtlLMB8GA1UdIwQYMBaAFGK0t02IaU0zyBBuijO8FJ6zkE/rMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODE0M2JmNjIwMTgxZWNkMzdkYWM3MmYxLzEv
NjJCNEI3NEQ4ODY5NEQzM0M4MTA2RThBMzNCQzE0OUVCMzkwNEZFQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2UyMDM4NjlkLTZiOTUtNDY1Zi1iNGRjLTA4OGE1YTIxMDNmYy8xZjIy
Y2YwNzU3MWVjYmFiNmQ0NjBhMWYzYjZjNWQ2MTk3ZDA5ODM2NDNhNTRkMmVkNC5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjgxNDNiZjYyMDE4MWVj
ZDM3ZGFjNzJmMS8xLzMxMzkzMzJlMzIzMjM3MmUzMTMyMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzOTMwMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHjfTANBgkqhkiG9w0BAQsF
AAOCAQEAoMkxMYlr5+HDshYSNytC1ti4uK1D0S3FWOtjucaVoJW9WSicHpiewAV2
RlWM94wP/1zqtr74DS9j+MjWNMN2ywWU4+X2mRviAmYCntTHC59jb+1/PiF859Xn
VuL+oSamV77GyntlCZHGVTKwIG9g7PxTjNFyuunfnh7e1Bz3VIXCSxf1/ZuWhjdF
NLoxhZJJqm3zQUg/kgRRZ3fv/QJO+p+D6fEaTy4O9tNZErRH8uOmQoI5XFj9JYFe
dm/aTw/rX+TNKIW3DSqrG20ae1KkaocyOkjyT9NeBdoIh0ZrX0I3giP19sktqE2n
xUoUrY12PkzHHyUb1cQ87hsWaOGUkQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:49:51 2025 by rpki-client