Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e20343031383338.roa
File:                     3139322e3230382e342e302f32342d3234203d3e20343031383338.roa (raw, json)
Hash identifier:          czFewWGGKBdobdYkFeil/xuBYw8lDfUoIYna2qscnjo=
Subject key identifier:   9B:D3:5D:3B:B0:70:3A:C0:55:D8:3F:3A:64:60:2E:87:A9:69:DA:02
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       2D9D74B54CA4845400EAE020BAF16574BE295D18
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e20343031383338.roa
Signing time:             Wed 13 Aug 2025 05:13:03 +0000
ROA not before:           Wed 13 Aug 2025 05:08:03 +0000
ROA not after:            Wed 12 Aug 2026 05:13:03 +0000
asID:                     401838
IP address blocks:        192.208.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:9d:74:b5:4c:a4:84:54:00:ea:e0:20:ba:f1:65:74:be:29:5d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Aug 13 05:08:03 2025 GMT
            Not After : Aug 12 05:13:03 2026 GMT
        Subject: CN=9BD35D3BB0703AC055D83F3A64602E87A969DA02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e7:19:67:2d:24:4f:fc:ab:b0:68:26:45:b4:
                    15:64:79:04:ac:c1:26:58:7c:e4:08:66:99:d2:e7:
                    47:da:cc:8e:8c:72:23:07:b5:14:32:de:c5:8c:4b:
                    b4:03:da:fc:46:03:39:6f:ce:65:1e:b2:8c:a2:55:
                    84:98:f1:81:74:26:fe:2d:95:28:c4:51:f2:4a:6c:
                    0b:4c:74:e1:9f:8b:85:fd:f5:d2:c4:c2:50:db:6c:
                    17:60:3e:56:97:66:c0:de:0d:a2:8f:cb:6d:f9:9a:
                    06:77:0d:87:14:d4:a7:e0:0a:bc:0e:4c:c1:96:f9:
                    aa:68:52:6d:af:bd:4c:96:f5:6e:e0:a6:7e:72:c7:
                    e2:a3:cd:26:d4:a8:87:6d:5b:8c:20:2a:8b:90:bb:
                    3d:92:16:d9:9e:7e:9a:39:ef:e4:2f:a2:d4:f7:94:
                    c9:f9:9d:f6:43:f2:ae:f5:43:d0:3e:09:dc:64:ad:
                    0d:14:d1:2f:ca:41:e2:c4:19:ef:33:10:2e:ec:a8:
                    72:30:83:b5:e0:6b:d1:e6:a6:83:fc:cd:10:04:be:
                    95:d7:07:60:4d:ff:fc:97:ed:68:ad:44:2e:98:7a:
                    cc:86:45:97:15:f3:36:f9:28:ca:98:54:83:e0:04:
                    b3:fd:89:d4:7e:3d:e9:98:df:e4:f0:52:9c:57:98:
                    5f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:D3:5D:3B:B0:70:3A:C0:55:D8:3F:3A:64:60:2E:87:A9:69:DA:02
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e342e302f32342d3234203d3e20343031383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:11:d2:38:3d:2d:cf:f7:97:19:c5:92:6d:3a:bf:64:ce:ab:
         61:af:f2:2a:44:1f:da:4a:1c:57:3f:3c:df:19:aa:8e:75:dd:
         f2:45:2d:05:20:30:7c:c6:cc:0f:f2:63:85:59:e7:58:e8:b9:
         43:81:f9:b4:9c:68:6f:e4:e5:44:64:4a:21:22:9d:b0:fe:2c:
         a0:30:ac:f5:50:c0:73:74:25:db:96:83:1b:e0:9a:9f:82:7d:
         77:af:f8:61:ab:52:1f:b1:e7:03:f2:72:c3:a1:72:6c:b2:00:
         00:b4:8d:4d:8e:da:05:e8:ee:5a:2c:d2:c6:57:07:e9:4f:66:
         fc:cd:6c:99:91:84:4c:63:32:4a:e0:41:5a:95:ae:74:d8:22:
         3e:10:ab:e3:5c:90:f9:59:27:20:5e:5c:0b:de:f2:0c:c9:53:
         f9:f0:46:23:d6:9a:b0:22:da:6f:86:23:ff:66:7a:73:a3:2f:
         4f:35:08:dc:d8:0b:ff:c8:0d:ec:d3:e1:0e:d2:e5:cb:5f:22:
         8f:b2:dc:88:c6:ef:4f:19:4e:e8:c8:b0:dc:e7:8b:d2:99:e3:
         5e:32:68:1c:c1:43:46:d2:96:89:88:20:1d:d3:b7:99:fe:6d:
         cc:18:e9:0f:ee:64:bd:72:da:17:1b:a6:da:4f:04:23:5a:88:
         98:8b:67:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:04 2025 by rpki-client