Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e203538323132.roa
File:                     3139332e382e3230332e302f32342d3234203d3e203538323132.roa (raw, json)
Hash identifier:          3u8v8R4LHU3DnqHVTvbNBNSXDaH/wyZpmgcPoVyUoDQ=
Subject key identifier:   19:52:B9:8B:35:8A:5F:71:D1:17:11:A1:BC:DD:80:A7:A9:D1:ED:60
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       6594CB3B42EA503AFE4B507DF7C6D3326C1C3CB0
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e203538323132.roa
Signing time:             Wed 25 Jun 2025 13:46:56 +0000
ROA not before:           Wed 25 Jun 2025 13:41:56 +0000
ROA not after:            Wed 24 Jun 2026 13:46:56 +0000
asID:                     58212
IP address blocks:        193.8.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 19:15:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:94:cb:3b:42:ea:50:3a:fe:4b:50:7d:f7:c6:d3:32:6c:1c:3c:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Jun 25 13:41:56 2025 GMT
            Not After : Jun 24 13:46:56 2026 GMT
        Subject: CN=1952B98B358A5F71D11711A1BCDD80A7A9D1ED60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:23:e4:52:26:dc:d9:18:ff:9f:91:75:24:99:
                    b8:24:f1:67:1d:b7:0b:00:aa:38:10:ea:3c:08:e2:
                    4c:0b:25:b0:59:7c:62:ee:b8:94:6d:c2:90:d9:e4:
                    3a:5c:e4:bc:a1:cd:c5:e1:4f:b5:82:46:d6:a2:d5:
                    c2:74:33:7f:f5:d5:df:d5:71:d4:8a:ee:e0:3f:43:
                    ab:39:9d:8a:50:be:50:b7:d1:cd:57:a2:bd:0f:5f:
                    ae:66:ae:02:f4:9a:7d:74:77:d6:0a:e2:9c:57:69:
                    ad:49:e1:1f:59:d0:5a:d1:09:61:73:b0:31:78:a7:
                    bd:64:7b:12:77:b0:ac:bf:d2:1b:9b:b4:c7:d8:1a:
                    6b:a4:23:ed:3d:e3:60:17:56:f8:82:04:fd:dc:cb:
                    62:b8:4e:57:c0:fe:01:80:52:56:4c:d3:a4:83:1b:
                    fb:83:7a:a2:74:8e:3d:8b:fa:23:2a:0c:bd:2e:80:
                    ab:5b:a3:b9:ea:5e:ac:38:f0:20:4a:8c:23:e9:c5:
                    44:97:59:d3:b7:4c:46:15:66:2c:39:e0:af:4a:8e:
                    f9:0f:5f:60:85:0b:f1:90:bc:b1:3a:6d:ea:2f:ce:
                    0a:fd:eb:63:99:8c:03:9e:ad:6c:f8:66:3e:4e:f2:
                    c5:67:bd:ab:44:fc:18:b0:3b:19:8c:2a:cb:b6:bb:
                    d6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:52:B9:8B:35:8A:5F:71:D1:17:11:A1:BC:DD:80:A7:A9:D1:ED:60
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139332e382e3230332e302f32342d3234203d3e203538323132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.8.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:e7:dd:c1:d3:36:7a:6a:f1:90:d3:ac:2e:1c:2a:aa:e8:99:
         ab:8e:d4:2a:e1:09:e6:77:5e:0a:82:35:d5:55:58:3d:8d:2f:
         99:0b:7a:b4:7f:5b:1b:72:e6:ed:76:80:31:6a:f3:23:ef:3d:
         ef:a4:35:27:0a:af:5a:90:ef:8c:d6:12:78:cf:54:bd:6e:19:
         33:74:10:45:db:14:33:7c:b8:a1:68:60:5a:e8:d3:94:8f:1c:
         cb:b3:6b:61:df:84:ec:f8:0f:79:2b:d4:be:1c:f6:a2:8e:19:
         6e:4a:95:41:cc:e8:a3:7d:fd:fd:c5:95:47:c5:c9:a9:ae:ad:
         cf:26:6f:02:f0:89:eb:37:e7:94:29:5d:95:20:f5:ae:aa:60:
         6c:ac:37:f8:c6:f1:d2:2f:eb:b6:d0:27:3b:ba:30:38:37:7b:
         44:e9:19:dc:1b:3b:d5:f4:ba:95:8c:8b:50:ca:91:40:60:99:
         79:25:46:c3:c2:dd:a8:d2:67:09:30:e2:e8:de:af:41:1a:af:
         71:fd:f7:78:81:c1:43:f4:9c:9d:be:1c:b5:e7:34:78:cf:24:
         24:36:32:00:25:2b:18:82:52:85:d7:e0:22:08:68:4b:49:47:
         04:70:22:63:43:85:cb:a0:5b:4c:b5:dd:65:0d:95:a7:e3:29:
         f3:52:d4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:03:33 2025 by rpki-client