Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234372e302f32342d3234203d3e20323132333336.roa
File:                     3139392e34382e3234372e302f32342d3234203d3e20323132333336.roa (raw, json)
Hash identifier:          jcNK3lTtEEhWFFDXZACd5o6fVGUeo25Jt9Jf/PXJQBU=
Subject key identifier:   29:16:27:2E:D6:E6:B3:E8:C9:B3:00:EA:9D:59:6D:38:F3:6E:A5:0F
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       478EA995AFBE646358FBF86CA5C32B2514C9CCD5
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234372e302f32342d3234203d3e20323132333336.roa
Signing time:             Thu 21 Aug 2025 08:17:51 +0000
ROA not before:           Thu 21 Aug 2025 08:12:51 +0000
ROA not after:            Thu 20 Aug 2026 08:17:51 +0000
asID:                     212336
IP address blocks:        199.48.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/b4586964-3c8b-4441-8b8a-b2d07721f346.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 01:58:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8e:a9:95:af:be:64:63:58:fb:f8:6c:a5:c3:2b:25:14:c9:cc:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: Aug 21 08:12:51 2025 GMT
            Not After : Aug 20 08:17:51 2026 GMT
        Subject: CN=2916272ED6E6B3E8C9B300EA9D596D38F36EA50F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:aa:de:af:1e:8e:b2:0f:95:1f:3f:98:b4:b6:
                    14:70:07:97:8c:35:25:2b:63:bb:f7:83:2c:33:cd:
                    de:04:40:d1:7a:81:27:16:58:45:2c:e1:18:2c:17:
                    68:cf:24:a1:c7:22:b2:ed:30:2a:c7:3c:77:d3:0b:
                    81:64:11:6e:03:ce:d3:c9:d7:64:da:9a:54:14:36:
                    9f:76:3d:1e:54:1a:c1:84:f0:e0:9c:c5:bf:be:12:
                    3c:51:f7:8e:b1:06:59:cc:9e:8e:f1:8f:fb:01:4f:
                    09:a6:02:67:ca:d1:36:41:77:80:9d:24:71:c5:e1:
                    02:98:38:67:8b:3e:aa:bb:39:b3:ef:22:90:3f:fd:
                    a5:ce:17:3b:f4:c3:00:b4:bc:9f:24:6d:9d:f9:86:
                    b3:ea:67:c9:ed:e8:0d:55:7c:fd:4e:c3:e7:de:78:
                    85:33:e7:de:9e:02:21:d9:5d:36:78:b7:08:f3:30:
                    31:77:e0:5b:94:c7:ff:99:b9:b7:94:34:a9:7a:36:
                    0b:b8:f9:fe:14:8c:78:2c:2c:26:25:a7:17:08:2a:
                    0b:10:46:32:6b:c9:fc:48:1a:93:66:47:c8:f5:ae:
                    ca:83:a8:7e:63:dd:72:7d:bd:3c:d5:8f:30:43:0f:
                    d6:2d:07:7d:25:01:dc:4f:c7:04:e3:96:28:85:d5:
                    5d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:16:27:2E:D6:E6:B3:E8:C9:B3:00:EA:9D:59:6D:38:F3:6E:A5:0F
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3139392e34382e3234372e302f32342d3234203d3e20323132333336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:75:c7:4e:da:7a:1d:e5:79:62:78:b6:9a:e0:2f:88:9d:48:
         7d:e5:c0:39:67:46:c5:54:01:ba:1b:32:9f:16:27:df:6b:b4:
         7f:5b:06:78:d1:05:f1:58:a5:1b:00:d8:b7:1b:30:b1:f3:a8:
         f0:65:cd:e8:72:9c:fb:86:e6:f0:18:9f:0a:d4:0a:9a:45:22:
         b3:f8:b5:b2:4e:5d:31:6e:27:7c:63:54:88:60:f1:15:11:8a:
         f7:c4:0f:9e:06:54:17:15:95:70:a2:df:95:2b:27:e0:20:9e:
         70:26:04:66:a6:71:b2:da:0c:19:3b:2e:fd:3f:d2:64:03:bc:
         18:24:96:b6:e8:4b:d3:a6:cb:6d:c3:54:e4:0c:c2:ec:c3:14:
         25:2b:f6:ea:10:5d:ff:43:94:89:fc:9c:c5:1b:f8:a7:bb:41:
         89:e3:d9:90:77:0d:df:37:5e:47:50:25:e3:37:1e:67:ea:cc:
         ed:ec:10:43:d7:df:84:33:7e:8b:f2:61:64:e5:69:fe:24:31:
         26:19:e7:d8:72:f3:ae:3c:6d:16:ca:83:c6:30:c5:dc:a9:be:
         51:76:31:ef:9c:0c:02:35:ee:eb:93:b0:d2:b7:c7:59:c8:7e:
         86:e0:35:76:f1:60:aa:d6:8d:62:58:57:7c:98:f4:81:f5:11:
         7f:ff:e2:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:23:37 2025 by rpki-client