Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e20343031383338.roa
File:                     3139322e37302e3137362e302f32342d3234203d3e20343031383338.roa (raw, json)
Hash identifier:          m6HPKpKd+qC3gQbPgxS1Ye4DUQlycjKH1I4v1FQVBjY=
Subject key identifier:   6C:F7:23:96:4E:9D:77:B0:1C:7A:38:AB:45:13:4B:A0:A9:13:89:EF
Certificate issuer:       /CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
Certificate serial:       55E1FF77AB2A3770578912EB58F8E53EF4427B9C
Authority key identifier: 66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e20343031383338.roa
Signing time:             Wed 13 Aug 2025 05:14:27 +0000
ROA not before:           Wed 13 Aug 2025 05:09:27 +0000
ROA not after:            Wed 12 Aug 2026 05:14:27 +0000
asID:                     401838
IP address blocks:        192.70.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/9612d9a4-803d-4413-aef7-b133b4ff80b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 05:05:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e1:ff:77:ab:2a:37:70:57:89:12:eb:58:f8:e5:3e:f4:42:7b:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7
        Validity
            Not Before: Aug 13 05:09:27 2025 GMT
            Not After : Aug 12 05:14:27 2026 GMT
        Subject: CN=6CF723964E9D77B01C7A38AB45134BA0A91389EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:86:3f:d4:e0:cd:21:27:1a:72:39:bd:33:f9:
                    2f:8e:1b:1b:7f:e8:07:15:2b:5c:a8:af:41:81:61:
                    0f:2d:80:20:73:8d:e9:7a:41:5c:fe:eb:7b:cc:5f:
                    20:6f:9b:85:43:03:a2:f0:fe:85:3e:b7:01:fd:28:
                    6f:44:79:e2:54:b4:dc:d9:9b:f2:7e:75:2f:52:91:
                    8d:20:46:4f:08:07:5d:85:95:4b:24:60:1f:0e:48:
                    03:b0:50:15:95:65:8d:d3:31:3e:1d:0b:55:97:b9:
                    1c:e2:d4:2f:b8:47:c3:0e:a8:e9:41:cd:7d:f5:10:
                    5b:c8:33:59:ed:12:d2:fc:5d:a2:81:ec:d8:f7:78:
                    c9:22:b9:e3:7d:d4:c6:92:e8:bc:95:d7:00:59:8c:
                    2b:b2:8e:6d:de:fb:40:30:c1:4a:3e:d1:2b:98:1a:
                    b6:f0:93:4b:ac:9f:f7:21:fb:22:6f:d9:ad:cd:78:
                    e1:d4:f1:11:e1:56:f0:27:f3:e6:bf:7f:98:5e:71:
                    1f:70:ec:21:c0:16:3e:ae:7f:80:61:77:eb:5c:9c:
                    4e:32:c3:95:d7:fc:15:47:70:e0:7b:69:81:8f:4a:
                    a4:22:3c:41:2b:52:c9:12:64:e9:b1:e0:2f:4a:99:
                    51:02:7b:c4:14:29:e0:c3:5a:18:50:6c:ae:1f:b9:
                    45:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F7:23:96:4E:9D:77:B0:1C:7A:38:AB:45:13:4B:A0:A9:13:89:EF
            X509v3 Authority Key Identifier:
                keyid:66:18:76:BF:25:91:B8:70:21:FA:45:24:F5:40:65:A1:18:C3:15:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/661876BF2591B87021FA4524F54065A118C31560.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9612d9a4-803d-4413-aef7-b133b4ff80b7/c487e481b4a0d3800626ef058f9b9ae9411745794ebeaa34b7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c01901783611738ff/0/3139322e37302e3137362e302f32342d3234203d3e20343031383338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.70.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:e5:d0:70:c6:0c:c9:8a:97:23:53:5a:91:d5:0c:c5:82:e6:
         38:02:74:28:e5:1b:99:9f:e4:fd:cb:3c:7c:0f:ce:70:0e:5c:
         cf:50:ea:3f:b3:e6:cb:61:90:3e:84:cc:08:cf:b3:7f:c8:d1:
         fc:fe:f9:83:ae:27:b1:19:f3:2c:90:22:3b:e3:17:a7:e5:7a:
         44:1a:ff:ee:41:32:73:b3:34:fd:ca:96:59:18:8c:f1:80:3b:
         92:4c:5f:17:04:7d:03:19:ec:bd:99:71:27:df:59:de:5c:67:
         41:4e:1e:37:8f:62:e9:ef:b5:28:c7:22:b8:10:fb:dc:d4:44:
         2d:c1:28:bd:ba:44:fa:f4:50:77:95:d2:26:71:db:65:49:30:
         91:e5:39:a2:58:e9:9a:7f:a1:02:9c:4e:7c:fb:28:e9:66:66:
         e4:59:e9:2b:38:10:a6:3c:f0:90:0f:32:cb:48:09:3a:c4:e2:
         56:5f:5d:5a:a6:55:1b:f2:cf:6c:81:10:3f:1f:e0:34:34:68:
         6f:3b:e5:a7:5f:54:03:a8:e0:91:03:24:de:85:39:9a:43:b1:
         e4:6f:c4:a6:fd:29:b2:d3:69:06:db:6a:70:eb:7e:a8:d3:8b:
         2e:3c:9a:88:01:e9:81:c4:55:42:f1:5e:03:0b:23:81:3e:5b:
         98:71:3e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:40:31 2025 by rpki-client