Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20323131343834.roa
File:                     3139322e3230382e31312e302f32342d3234203d3e20323131343834.roa (raw, json)
Hash identifier:          +IhrDE3rcUWG3PB3RrWAxQftL6R8befinbjAzXewbJw=
Subject key identifier:   10:E8:52:34:07:F6:46:30:92:E0:54:A3:91:C2:65:06:E3:DB:01:15
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       21147ECC11197DD5BAE30D63D139FBC7F926CC1D
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20323131343834.roa
Signing time:             Fri 02 May 2025 11:51:23 +0000
ROA not before:           Fri 02 May 2025 11:46:23 +0000
ROA not after:            Fri 01 May 2026 11:51:23 +0000
asID:                     211484
IP address blocks:        192.208.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 07:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:14:7e:cc:11:19:7d:d5:ba:e3:0d:63:d1:39:fb:c7:f9:26:cc:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: May  2 11:46:23 2025 GMT
            Not After : May  1 11:51:23 2026 GMT
        Subject: CN=10E8523407F6463092E054A391C26506E3DB0115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:01:3a:25:ab:3c:4c:18:90:45:d4:55:d9:c5:
                    22:0d:1e:32:a1:be:f6:f9:e6:22:5a:5e:a8:bb:cc:
                    73:a3:66:3d:b8:cd:0d:4c:cb:04:9c:33:6d:b9:87:
                    42:bb:82:e1:22:48:1d:61:8a:31:cb:d9:7e:c0:13:
                    b8:d7:cd:4d:a0:22:4e:47:89:b0:59:5d:df:cb:a7:
                    99:bf:8d:91:a3:f4:55:89:3f:8a:3f:54:d6:7d:e6:
                    15:9a:04:90:15:1e:99:1d:15:9a:0c:50:7f:c6:97:
                    8a:4a:f7:af:92:1d:30:42:46:ad:91:31:a8:71:de:
                    4e:af:28:d0:34:3f:33:a7:b6:fe:45:16:9e:c7:f3:
                    14:b8:57:fb:1d:b6:96:1a:45:98:bb:b3:82:d3:3b:
                    1d:7e:5c:a1:f6:cb:96:14:01:6b:e3:2a:d9:25:88:
                    4c:c4:14:9d:0a:47:65:46:c2:dc:47:19:1a:1d:19:
                    19:38:ec:0f:01:e0:b2:b5:80:30:9c:99:34:7c:2c:
                    7d:05:75:81:bb:f9:f1:71:32:92:82:2a:f0:a8:e8:
                    e8:c7:74:20:dc:b8:bb:a4:be:59:d7:67:9d:c3:5f:
                    be:a5:33:62:36:ba:42:1f:cd:82:92:3e:74:88:a0:
                    c8:63:9d:e1:c5:37:fb:23:e0:a2:e3:24:a9:1c:ce:
                    7c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E8:52:34:07:F6:46:30:92:E0:54:A3:91:C2:65:06:E3:DB:01:15
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e31312e302f32342d3234203d3e20323131343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:3f:8a:f7:e3:ba:28:94:f3:27:b6:d8:3b:a6:11:e1:dc:72:
         d3:1e:b0:23:3e:e3:0b:70:09:f1:52:9b:ba:a1:47:c1:03:e1:
         db:d7:d1:03:c3:4f:44:13:78:8c:ca:7c:95:35:d3:a7:d8:33:
         91:00:98:82:3d:27:4b:ba:36:74:ae:54:b7:1f:96:06:8f:92:
         68:66:54:b6:89:9b:3c:65:2d:85:ec:cb:81:a3:13:d0:76:5b:
         05:04:da:2b:22:90:12:38:e2:80:14:ef:59:9c:7f:7d:72:1f:
         99:ef:f5:4b:eb:26:3f:1b:24:1b:ca:96:73:f0:e3:de:02:77:
         dc:c4:2e:5f:e3:3a:b5:8a:de:e5:63:41:9f:36:4d:e6:0e:2c:
         41:77:b3:f0:bb:22:7d:e6:f9:c0:04:99:44:09:71:ef:98:c8:
         e1:ed:c8:1e:d1:3d:18:e2:2e:94:e4:13:c1:85:58:55:ae:2c:
         e5:21:d5:a5:4b:53:ee:a7:b9:dd:db:04:7b:e2:24:4c:58:bd:
         b6:f3:3c:e4:a7:4b:97:14:80:7f:7f:bb:2c:d8:7a:4c:e1:4a:
         93:31:a4:71:a4:80:78:fb:77:3a:fd:39:7a:a0:07:4c:c5:7e:
         df:18:82:84:49:76:d0:99:70:9f:26:4f:7e:95:09:b3:14:50:
         6c:85:d3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:14:09 2025 by rpki-client