Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e20323035383836.roa
File:                     3139392e34382e3234322e302f32342d3234203d3e20323035383836.roa (raw, json)
Hash identifier:          yADTKpLRb8TNwT4OvL+GBHmlEum1nmeloTLjJ2xo4Pk=
Subject key identifier:   C1:4E:00:02:E0:05:A3:61:59:00:FF:A3:93:99:67:90:EA:D7:02:F3
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       1F14C2247818B006F3F517E22C58C4213F7AA9F1
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e20323035383836.roa
Signing time:             Tue 19 Aug 2025 11:36:28 +0000
ROA not before:           Tue 19 Aug 2025 11:31:28 +0000
ROA not after:            Tue 18 Aug 2026 11:36:28 +0000
asID:                     205886
IP address blocks:        199.48.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 20:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:14:c2:24:78:18:b0:06:f3:f5:17:e2:2c:58:c4:21:3f:7a:a9:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: Aug 19 11:31:28 2025 GMT
            Not After : Aug 18 11:36:28 2026 GMT
        Subject: CN=C14E0002E005A3615900FFA393996790EAD702F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cd:99:3e:c3:ef:69:50:ba:cd:1d:47:a1:3d:
                    37:81:49:cc:e2:99:0d:cc:94:fb:be:ae:09:02:47:
                    4e:0e:17:0d:1a:bd:bc:da:7e:ea:f2:45:be:64:97:
                    18:4c:11:0a:63:2e:e4:bb:53:5c:57:b0:22:07:9d:
                    30:ed:41:de:58:8b:d5:95:0b:21:0f:75:2b:c5:2d:
                    ba:f0:bf:b0:23:aa:66:57:33:f7:d6:18:72:7a:0b:
                    67:72:19:41:1e:dd:99:b6:7b:b4:87:cf:cc:e2:2c:
                    a0:cc:39:de:42:d3:4d:79:db:33:8d:b8:ba:60:8f:
                    d9:2b:36:4b:bc:f6:9a:9a:cd:1c:b0:22:51:1b:00:
                    92:9b:ff:86:9a:a1:aa:8a:3d:1a:29:f6:91:c5:22:
                    76:62:57:7c:c2:66:be:4f:2b:b6:7e:b1:d7:2a:0d:
                    31:b6:9d:fd:92:e8:a5:2b:28:ca:00:d2:07:92:40:
                    5b:8a:15:f2:bb:64:19:39:77:6f:bb:bd:92:da:c9:
                    fe:e4:15:dd:69:e8:b4:8b:1b:88:20:44:d6:a2:72:
                    74:17:c1:6e:7a:3a:40:2c:d3:28:9c:f1:65:e9:c3:
                    b0:5f:a9:5d:63:10:8b:43:58:a6:b6:bf:19:1c:e8:
                    47:63:86:ec:39:35:fb:53:aa:78:1b:13:96:96:d2:
                    7d:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4E:00:02:E0:05:A3:61:59:00:FF:A3:93:99:67:90:EA:D7:02:F3
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234322e302f32342d3234203d3e20323035383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:bf:7c:45:a4:e0:35:79:72:7b:95:26:b9:51:3b:be:41:5f:
         01:ba:f4:c7:cb:ff:4a:21:ff:c5:52:47:8c:8f:c0:c2:d2:92:
         ab:ec:90:be:fb:5c:81:60:0b:ca:f2:80:59:07:51:1b:97:dd:
         39:f0:cc:5d:3b:5c:71:fe:59:6f:52:0f:3a:6a:32:b9:3e:d9:
         74:51:99:b7:b5:cc:54:e6:b4:cd:d9:d9:61:cc:fd:f1:7c:2e:
         df:be:78:9f:0c:8a:09:71:8c:6d:0d:7c:80:f4:45:cf:2a:f1:
         8a:e6:e1:b7:1d:f5:7e:c0:d4:7f:d2:0b:a5:88:ff:cf:50:64:
         28:b6:50:fa:4f:6a:8e:7b:19:a8:49:b1:78:f6:42:69:10:25:
         8d:f6:21:e0:39:dc:7b:e3:67:a1:d3:85:55:73:c6:79:07:40:
         5f:d3:5d:12:cc:fc:fa:d8:6e:f7:92:33:74:48:f8:97:16:c6:
         bb:3d:d1:3c:1d:52:9c:a9:b3:72:04:5a:d3:2e:6e:98:13:6b:
         c1:60:f2:2e:dc:43:c0:56:4c:3b:4c:88:49:8b:a8:a2:f1:ef:
         fc:49:03:f2:4c:02:09:4a:fe:cd:78:ec:f8:76:76:b7:2e:f3:
         1c:3c:cc:1f:47:fd:5c:e6:fe:94:5e:6d:06:7f:81:91:d4:04:
         e5:24:d5:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 23:49:18 2025 by rpki-client