Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136382e302f32342d3234203d3e20323133393930.roa
File:                     3139382e3137352e3136382e302f32342d3234203d3e20323133393930.roa (raw, json)
Hash identifier:          I2yNuW49WnCT4zyVwl7PDdwzpRhpvZPLDik+4viNY08=
Subject key identifier:   39:E5:A0:AA:02:5A:20:A3:89:07:71:A5:86:DF:7A:AA:8E:09:36:32
Certificate issuer:       /CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
Certificate serial:       7D07E437C74551BB834E691CC52E84F7ED774AAF
Authority key identifier: 1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136382e302f32342d3234203d3e20323133393930.roa
Signing time:             Tue 30 Sep 2025 09:30:03 +0000
ROA not before:           Tue 30 Sep 2025 09:25:03 +0000
ROA not after:            Tue 29 Sep 2026 09:30:03 +0000
asID:                     213990
IP address blocks:        198.175.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/14cc8f83-07a3-438f-8c3d-046fdc6f7861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 04:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:07:e4:37:c7:45:51:bb:83:4e:69:1c:c5:2e:84:f7:ed:77:4a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6
        Validity
            Not Before: Sep 30 09:25:03 2025 GMT
            Not After : Sep 29 09:30:03 2026 GMT
        Subject: CN=39E5A0AA025A20A3890771A586DF7AAA8E093632
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bf:0f:03:80:97:84:40:ae:88:4b:5a:e7:a8:
                    d5:ad:6e:cd:12:9f:0c:8b:af:2e:88:4b:4a:3b:90:
                    b9:5f:79:7d:43:d9:29:b5:f8:8c:96:6c:97:8e:94:
                    65:aa:54:22:28:57:a2:a2:96:b1:ec:53:07:ac:93:
                    18:5d:13:83:d8:fc:39:da:4c:c0:1f:58:94:4c:28:
                    45:9a:0e:a4:46:e6:cd:59:c2:15:ea:27:b0:8e:81:
                    e6:5c:49:74:b2:b2:1d:9d:d8:a5:a4:e0:98:01:46:
                    1f:d5:01:83:bb:19:be:54:35:6c:3b:0c:d5:69:03:
                    e2:50:f0:40:20:44:ad:ca:f0:b6:8b:e4:e5:76:ef:
                    0f:e7:3d:da:c1:4f:61:1b:d3:56:56:04:79:3d:7c:
                    61:6d:82:86:0f:74:b2:4f:c0:9a:33:ad:e2:a4:d2:
                    88:03:9e:5e:65:4c:0d:6f:00:8c:85:55:b5:3d:69:
                    50:a4:73:d5:3c:90:51:ce:b0:0b:25:b3:0a:b7:34:
                    32:31:f3:f1:e3:95:92:22:b0:92:31:ec:9f:dd:a2:
                    33:85:60:2e:ea:73:92:91:18:2d:c2:48:0d:aa:9f:
                    ad:8d:a2:79:f7:a3:9f:85:14:53:d7:c8:64:04:8b:
                    5a:0e:de:8a:3f:9c:d7:73:5e:1a:15:1c:85:b3:3e:
                    be:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E5:A0:AA:02:5A:20:A3:89:07:71:A5:86:DF:7A:AA:8E:09:36:32
            X509v3 Authority Key Identifier:
                keyid:1F:EA:38:F4:99:69:C1:A2:23:C0:B0:77:5E:64:FF:9C:4F:E5:04:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/1FEA38F49969C1A223C0B0775E64FF9C4FE504E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/14cc8f83-07a3-438f-8c3d-046fdc6f7861/215c6e6aaf9507c6d72a63f2edad9200a43dffd19007c125b6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf91fb4c970192d786cefb171a/0/3139382e3137352e3136382e302f32342d3234203d3e20323133393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.175.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:00:df:2a:94:da:36:fc:50:c1:6d:cf:9c:87:ba:92:7e:0e:
         54:63:d8:76:c8:ee:a7:09:64:a2:20:13:ea:a0:7e:dc:62:e3:
         3f:5d:86:54:59:99:41:13:70:c5:21:fa:f5:60:7e:41:3b:38:
         b9:28:5d:3c:1c:24:36:ff:d1:9d:e7:5b:72:a5:7e:13:a4:2a:
         b3:a5:c0:89:fc:94:3d:77:27:ef:34:df:f5:93:92:38:b5:87:
         70:8f:a8:35:ef:6a:89:e6:61:c4:a4:08:d3:c9:c7:ab:d3:9b:
         bd:65:aa:2a:de:23:91:82:43:08:5e:91:d8:c6:e2:3f:05:93:
         9c:d4:7b:bd:4c:11:3f:0f:62:3a:ff:71:46:f8:ef:ee:10:34:
         5b:bb:05:04:69:bb:a3:5b:c7:4f:f4:d4:fa:e6:30:a3:dd:50:
         9f:5a:65:c3:64:11:58:41:86:66:15:6e:7e:4d:b4:ae:ed:93:
         b1:fe:2a:e0:ae:11:ca:37:80:17:07:35:18:8e:d6:22:18:8c:
         4b:65:c9:98:35:6e:50:2a:eb:4c:c1:33:98:b4:82:62:e5:38:
         71:65:1b:8e:4c:cf:87:5c:b1:63:ee:86:a7:45:34:54:27:83:
         8c:6b:26:93:34:6b:ab:d4:90:85:7a:74:40:5f:72:1f:61:f7:
         aa:44:73:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:35:31 2025 by rpki-client