Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20343031383338.roa
File:                     3139352e37382e35372e302f32342d3234203d3e20343031383338.roa (raw, json)
Hash identifier:          q6XbYGILZYIZjfikTs20ETXLC+LoiStqM58H3WmYdWI=
Subject key identifier:   5B:3B:88:3E:BB:27:48:44:28:24:F1:D2:0D:A0:01:6E:2E:EB:0F:A2
Certificate issuer:       /CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
Certificate serial:       02D35D4526845D694CBF013F14587E6D5317CE5C
Authority key identifier: 62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20343031383338.roa
Signing time:             Wed 13 Aug 2025 05:14:22 +0000
ROA not before:           Wed 13 Aug 2025 05:09:22 +0000
ROA not after:            Wed 12 Aug 2026 05:14:22 +0000
asID:                     401838
IP address blocks:        195.78.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/e203869d-6b95-465f-b4dc-088a5a2103fc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:10:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d3:5d:45:26:84:5d:69:4c:bf:01:3f:14:58:7e:6d:53:17:ce:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4
        Validity
            Not Before: Aug 13 05:09:22 2025 GMT
            Not After : Aug 12 05:14:22 2026 GMT
        Subject: CN=5B3B883EBB2748442824F1D20DA0016E2EEB0FA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:25:36:3b:dc:0d:8f:57:6e:f2:f8:56:97:
                    94:f0:d6:03:c9:5e:04:a6:24:57:89:7f:5b:b7:9c:
                    54:55:02:84:75:1a:15:af:54:58:ff:1d:a4:b7:8f:
                    f1:c4:d1:be:20:8f:77:36:8c:47:f0:db:18:49:7e:
                    aa:05:19:af:15:d7:9e:0d:fe:da:13:4e:b1:1e:94:
                    8e:ac:6b:e9:fb:2a:b7:f2:82:28:7d:ee:4c:e8:45:
                    9a:b5:d7:b8:2b:f2:b7:2f:4e:50:fa:61:07:51:92:
                    67:c1:7e:2e:24:2a:65:cf:20:75:89:66:72:6a:c1:
                    ef:1e:39:2a:02:15:23:38:b8:fc:e9:80:e0:88:11:
                    c8:b0:a9:4b:26:01:8c:74:f6:d4:05:a9:e7:30:f9:
                    7d:44:94:67:e0:80:27:3c:53:37:58:13:5a:19:8e:
                    69:0a:fd:5c:63:ad:71:66:07:c0:a9:dc:23:b3:b0:
                    72:6c:11:74:27:ca:df:d7:79:0b:86:18:2c:12:e4:
                    31:af:24:7c:5b:e5:76:7d:ee:77:8b:a3:b6:72:cd:
                    9a:6b:5f:f3:69:43:fc:6d:14:3b:d4:9d:fb:b9:1e:
                    39:a3:94:11:0d:fc:35:fa:58:ec:2e:24:d2:b3:f4:
                    2d:4e:f5:e6:85:68:fa:b4:df:db:98:57:14:76:1f:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3B:88:3E:BB:27:48:44:28:24:F1:D2:0D:A0:01:6E:2E:EB:0F:A2
            X509v3 Authority Key Identifier:
                keyid:62:B4:B7:4D:88:69:4D:33:C8:10:6E:8A:33:BC:14:9E:B3:90:4F:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/62B4B74D88694D33C8106E8A33BC149EB3904FEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e203869d-6b95-465f-b4dc-088a5a2103fc/1f22cf07571ecbab6d460a1f3b6c5d6197d0983643a54d2ed4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620181ecd37dac72f1/1/3139352e37382e35372e302f32342d3234203d3e20343031383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.78.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:ba:14:a8:76:5b:3a:b2:d9:c7:64:6a:59:e8:a0:b4:ca:32:
         54:70:84:69:5e:92:d2:c4:1a:0c:eb:77:57:05:4f:dd:2b:3e:
         1b:ae:5f:3c:0c:c1:af:27:bf:7f:71:2e:f0:ab:f0:da:60:56:
         47:5f:b3:1c:a5:d7:b4:37:d2:cc:44:7d:e2:d0:35:74:82:10:
         43:c6:4f:cc:ba:4f:43:32:d0:24:45:eb:e1:59:12:89:df:f7:
         7d:43:d3:26:53:ec:3e:5f:1f:4c:4b:ed:c2:5a:82:e7:9b:c1:
         87:ca:21:7a:65:77:b0:03:e7:53:ed:43:24:a8:a0:f6:8a:08:
         6c:24:15:0a:06:d2:df:92:e8:37:59:cd:de:b1:d1:e8:cd:cf:
         6d:85:ab:31:2e:2d:fc:2f:9a:19:18:80:12:f6:e8:6d:9a:59:
         7b:78:f8:c9:ab:e6:91:2d:8f:43:b5:10:5b:06:9c:5c:a0:18:
         b0:69:44:95:3e:5a:29:d3:77:c5:85:08:d3:94:6f:bf:c5:f1:
         97:a1:ab:8e:8d:4b:e3:04:39:ab:0e:b4:66:d8:6f:1e:aa:91:
         85:09:88:87:90:4e:cf:70:68:3d:b2:9d:9e:1e:d2:d9:80:e8:
         fd:ce:81:a8:b0:88:79:1b:45:13:48:5a:36:72:0b:a6:56:f0:
         90:fa:4f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:11:17 2025 by rpki-client