Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e20343031383338.roa
File:                     3139322e3230382e372e302f32342d3234203d3e20343031383338.roa (raw, json)
Hash identifier:          Y3B8v4A90hd6bLrpbfIuJ9kcE3dsgsAE1RpUnO3AnKQ=
Subject key identifier:   8D:BA:56:23:20:CB:D8:2F:EB:55:68:39:73:17:98:5B:9F:84:DB:D7
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       640A2986A6AEB8AFAE8D9E6F5A2B2A6832ECC480
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e20343031383338.roa
Signing time:             Wed 13 Aug 2025 05:13:04 +0000
ROA not before:           Wed 13 Aug 2025 05:08:04 +0000
ROA not after:            Wed 12 Aug 2026 05:13:04 +0000
asID:                     401838
IP address blocks:        192.208.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:0a:29:86:a6:ae:b8:af:ae:8d:9e:6f:5a:2b:2a:68:32:ec:c4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Aug 13 05:08:04 2025 GMT
            Not After : Aug 12 05:13:04 2026 GMT
        Subject: CN=8DBA562320CBD82FEB5568397317985B9F84DBD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ad:bf:76:a0:e9:eb:fd:58:6d:f7:8c:c5:3b:
                    ce:8e:02:28:aa:42:42:b2:4d:18:2b:77:c2:5b:ec:
                    12:34:96:1d:07:64:10:ec:e3:09:a7:fe:42:21:1b:
                    b9:74:3d:c9:77:bb:a4:ef:0e:fe:6b:08:7c:c8:4a:
                    cf:35:c3:b2:cd:d4:6d:79:ba:89:98:b8:b0:a1:cc:
                    73:50:ac:a7:25:27:a2:52:54:86:2b:cb:44:91:48:
                    7e:46:11:a6:7d:99:fb:b5:15:01:ef:0c:9e:11:0e:
                    68:b0:35:bb:41:f3:8a:55:6e:55:dd:73:ce:6b:4a:
                    1e:dd:4f:43:32:62:54:65:4c:f6:b2:3b:e6:c5:f5:
                    cd:32:70:c7:62:c9:3d:be:82:2a:7a:ed:75:0e:b3:
                    0e:fa:54:e5:34:7f:92:62:94:81:94:2d:c4:7d:5d:
                    ca:3d:40:56:89:50:37:de:41:6d:dd:3b:9e:ac:42:
                    cb:85:cb:45:c8:99:c2:07:dc:54:a1:4d:32:0d:10:
                    33:67:f5:0b:7e:21:dc:7a:71:b9:13:60:52:96:9f:
                    92:e6:a1:fd:99:95:63:30:12:a2:6d:f1:33:ef:a6:
                    03:84:b5:ba:ac:38:2b:ac:0c:03:a2:bb:d1:67:53:
                    0d:38:be:c0:16:28:dc:10:0f:f0:87:d3:a4:3c:14:
                    d1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BA:56:23:20:CB:D8:2F:EB:55:68:39:73:17:98:5B:9F:84:DB:D7
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e3230382e372e302f32342d3234203d3e20343031383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.208.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:f4:18:1f:e4:0b:90:7d:23:99:69:c9:c7:5b:98:fb:51:d5:
         9d:be:6a:a3:99:1d:da:33:e9:3c:eb:09:97:3b:87:f2:d8:a9:
         6a:d7:8a:e2:f2:66:71:a7:ba:ab:18:69:d8:b7:55:3c:3a:d3:
         0f:f7:42:41:a7:7a:e3:5f:3d:cd:f4:96:3f:fa:e7:7b:06:49:
         bf:bf:93:66:45:fc:99:84:ba:bb:3c:2d:07:0f:70:27:52:37:
         30:d1:7f:0b:85:6a:86:ef:80:f2:b9:35:8d:87:41:5f:23:1d:
         b2:a7:94:c7:da:73:be:9b:a2:09:ad:01:20:9a:5d:fd:e7:44:
         27:54:4b:2d:bd:cd:44:a6:32:20:25:eb:9f:45:13:6d:60:ec:
         29:60:b5:a8:5e:f9:e1:9d:44:67:88:c4:34:b6:81:47:0a:34:
         08:b9:fc:a8:9b:df:7d:7e:61:75:81:db:a5:65:3f:5e:63:93:
         27:5f:d5:74:9f:9d:dd:d7:a5:bf:fd:e2:79:78:c2:f5:42:c1:
         d1:1d:77:78:e2:9f:0a:4c:d2:72:12:b2:e7:fa:f8:ff:fb:2c:
         d1:c6:4d:1c:fd:ef:cc:99:5e:a5:ec:36:c0:71:20:72:2c:5b:
         64:ed:09:1d:ee:34:11:c3:e7:d5:53:2f:03:fd:1a:4b:62:ec:
         8d:4f:95:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:01:43 2025 by rpki-client