Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e362e302f32342d3234203d3e20343031383338.roa
File:                     3139322e3230382e362e302f32342d3234203d3e20343031383338.roa (raw, json)
Hash identifier:          de3AptgBEdWqZ5W2gNUGtMmLsxlNImpRxzw1Q8DokuM=
Subject key identifier:   76:3C:96:4E:81:58:CE:10:DA:7D:52:DC:46:28:4F:BB:A5:05:4F:C8
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       300CCD9DD6328A2CB7B185FF040CA8535A1FC65E
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e362e302f32342d3234203d3e20343031383338.roa
Signing time:             Wed 13 Aug 2025 05:13:03 +0000
ROA not before:           Wed 13 Aug 2025 05:08:03 +0000
ROA not after:            Wed 12 Aug 2026 05:13:03 +0000
asID:                     401838
IP address blocks:        192.208.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0c:cd:9d:d6:32:8a:2c:b7:b1:85:ff:04:0c:a8:53:5a:1f:c6:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Aug 13 05:08:03 2025 GMT
            Not After : Aug 12 05:13:03 2026 GMT
        Subject: CN=763C964E8158CE10DA7D52DC46284FBBA5054FC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:51:ba:a0:23:d5:0f:30:b6:0a:a7:3a:cf:
                    77:54:ed:6b:c8:b0:30:a3:39:46:8d:6d:fe:23:45:
                    27:3d:e9:79:a6:80:4e:ab:8e:cb:f0:da:94:19:8a:
                    49:3b:d2:d0:a9:eb:67:d1:c4:0b:be:80:ae:3b:cf:
                    2f:93:e3:93:dc:79:d5:6d:b3:65:34:10:21:9e:2b:
                    34:f1:ae:e0:25:14:5a:a6:51:a9:14:17:16:fd:fa:
                    66:4f:f3:d1:b7:6e:ea:fd:e5:84:a8:27:3d:52:2f:
                    ce:2e:66:f9:f3:3b:44:e6:20:f8:47:37:03:2f:ac:
                    b9:a6:2c:cf:dc:46:ae:f3:bb:a4:69:70:20:5e:92:
                    d0:4e:7e:e0:73:d8:05:24:f0:23:47:d2:92:b9:0c:
                    8d:a0:a3:b5:1b:d0:89:a8:5b:9f:b0:e1:c4:ad:ec:
                    07:0c:88:c6:44:82:b9:16:0a:2f:c3:b4:52:40:8d:
                    f9:51:7f:8d:80:81:af:e1:0b:82:e3:93:16:69:74:
                    b0:ed:bf:b4:fc:34:8f:59:36:1b:43:89:ce:cb:f4:
                    0f:2f:b9:7c:ee:10:13:77:44:d6:0d:7f:4f:13:83:
                    2b:5a:44:71:3e:ca:13:d2:bf:e9:50:5c:f7:be:db:
                    ab:1b:8e:d2:3c:a3:4d:a8:72:03:70:e6:6d:34:a9:
                    85:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3C:96:4E:81:58:CE:10:DA:7D:52:DC:46:28:4F:BB:A5:05:4F:C8
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e362e302f32342d3234203d3e20343031383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:d8:9d:59:3e:9c:10:67:e6:ca:aa:04:72:29:3c:71:76:09:
         34:a6:a1:d3:3c:f7:0e:83:9a:a5:43:8e:04:53:1e:1d:cf:f3:
         3f:e2:06:cf:57:18:a9:a6:ec:21:c2:60:df:05:af:bb:16:6f:
         b2:4f:32:41:b3:b0:4f:72:8c:d2:e1:b0:d2:b6:2e:76:88:6a:
         ff:d5:7f:e4:a0:e8:f1:58:70:5d:ed:b0:be:60:d6:97:68:19:
         82:3a:a4:34:f1:20:15:ac:2b:dd:06:3c:f5:cd:d6:f7:32:50:
         c5:ed:ca:10:8c:86:f3:89:1f:e1:cf:08:88:a7:8a:49:cf:f0:
         10:1c:fa:2b:4a:37:28:52:f2:18:7d:59:06:c5:71:a6:30:72:
         a3:8a:38:40:1a:38:30:f0:34:ec:ca:4b:18:53:a7:2f:de:92:
         0c:b5:12:2e:df:a8:c1:b9:c0:48:15:74:d6:56:08:c0:08:e6:
         ea:bd:83:4d:3b:be:83:5c:11:12:fc:d4:99:8f:fa:19:7a:a6:
         60:49:1e:33:74:87:14:e6:86:e8:0e:0b:1d:8d:c6:3e:16:bf:
         6b:52:c0:35:6d:13:0e:63:39:e4:d0:21:56:7c:6c:7c:1f:a5:
         43:2f:25:2f:1a:49:6a:38:09:7b:ac:c2:ac:4f:38:af:82:77:
         47:b8:90:a1
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUMAzNndYyiiy3sYX/BAyoU1ofxl4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzQ4N2U0ODFiNGEwZDM4MDA2MjZlZjA1OGY5YjlhZTk0
MTE3NDU3OTRlYmVhYTM0YjcwHhcNMjUwODEzMDUwODAzWhcNMjYwODEyMDUxMzAz
WjAzMTEwLwYDVQQDEyg3NjNDOTY0RTgxNThDRTEwREE3RDUyREM0NjI4NEZCQkE1
MDU0RkM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgRRuqAj1Q8w
tgqnOs93VO1ryLAwozlGjW3+I0UnPel5poBOq47L8NqUGYpJO9LQqetn0cQLvoCu
O88vk+OT3HnVbbNlNBAhnis08a7gJRRaplGpFBcW/fpmT/PRt27q/eWEqCc9Ui/O
Lmb58ztE5iD4RzcDL6y5pizP3Eau87ukaXAgXpLQTn7gc9gFJPAjR9KSuQyNoKO1
G9CJqFufsOHErewHDIjGRIK5Fgovw7RSQI35UX+NgIGv4QuC45MWaXSw7b+0/DSP
WTYbQ4nOy/QPL7l87hATd0TWDX9PE4MrWkRxPsoT0r/pUFz3vturG47SPKNNqHID
cOZtNKmFVwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHY8lk6BWM4Q2n1S3EYoT7ul
BU/IMB8GA1UdIwQYMBaAFGYYdr8lkbhwIfpFJPVAZaEYwxVgMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGZkZWVjMGMwMTkwMTc4MzYxMTczOGZmLzAv
NjYxODc2QkYyNTkxQjg3MDIxRkE0NTI0RjU0MDY1QTExOEMzMTU2MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1Lzk2MTJkOWE0LTgwM2QtNDQxMy1hZWY3LWIxMzNiNGZmODBiNy9jNDg3
ZTQ4MWI0YTBkMzgwMDYyNmVmMDU4ZjliOWFlOTQxMTc0NTc5NGViZWFhMzRiNy5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDE3
ODM2MTE3MzhmZi8wLzMxMzkzMjJlMzIzMDM4MmUzNjJlMzAyZjMyMzQyZDMyMzQy
MDNkM2UyMDM0MzAzMTM4MzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMDQBjANBgkqhkiG9w0BAQsF
AAOCAQEAHNidWT6cEGfmyqoEcik8cXYJNKah0zz3DoOapUOOBFMeHc/zP+IGz1cY
qabsIcJg3wWvuxZvsk8yQbOwT3KM0uGw0rYudohq/9V/5KDo8VhwXe2wvmDWl2gZ
gjqkNPEgFawr3QY89c3W9zJQxe3KEIyG84kf4c8IiKeKSc/wEBz6K0o3KFLyGH1Z
BsVxpjByo4o4QBo4MPA07MpLGFOnL96SDLUSLt+owbnASBV01lYIwAjm6r2DTTu+
g1wREvzUmY/6GXqmYEkeM3SHFOaG6A4LHY3GPha/a1LANW0TDmM55NAhVnxsfB+l
Qy8lLxpJajgJe6zCrE84r4J3R7iQoQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:01:21 2025 by rpki-client