Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e203134363138.roa
File:                     3139322e302e31362e302f32342d3234203d3e203134363138.roa (raw, json)
Hash identifier:          zl07zPXVK8aKBzgO8+hk/hx5jRNEBYJj5Dgm1deI56Q=
Subject key identifier:   FF:72:A3:21:2C:7C:F5:DB:03:09:27:EE:75:21:62:9A:FC:38:7B:6B
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       414A90B7AF03E3CFF578EB2CA39782A4DC7F34C2
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e203134363138.roa
Signing time:             Mon 16 Jun 2025 04:55:53 +0000
ROA not before:           Mon 16 Jun 2025 04:50:53 +0000
ROA not after:            Mon 15 Jun 2026 04:55:53 +0000
asID:                     14618
IP address blocks:        192.0.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:4a:90:b7:af:03:e3:cf:f5:78:eb:2c:a3:97:82:a4:dc:7f:34:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun 16 04:50:53 2025 GMT
            Not After : Jun 15 04:55:53 2026 GMT
        Subject: CN=FF72A3212C7CF5DB030927EE7521629AFC387B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6b:5d:de:62:16:28:ac:33:60:76:36:05:46:
                    cd:e2:83:69:8b:20:dd:78:fb:8a:0b:ca:d0:b0:5c:
                    6b:58:cf:ab:5b:71:1d:bf:ae:02:a4:c5:1b:b3:d3:
                    70:9a:26:c2:16:c5:05:0f:10:d9:0c:2d:80:47:40:
                    7a:97:e6:42:f9:9d:4c:a2:ab:b7:32:3f:c1:ca:30:
                    b4:26:68:b9:26:3a:f7:3a:79:98:56:48:ae:f3:66:
                    70:83:10:e2:20:fe:1c:72:51:0b:e4:5e:26:2d:7b:
                    a2:c2:84:3e:26:8c:7a:fc:b1:30:38:39:fd:0f:61:
                    23:e5:d1:21:30:ea:2f:21:2f:72:3b:03:1e:df:23:
                    6f:ad:63:e1:42:ed:14:bc:c3:90:f3:bc:3c:38:cd:
                    c0:e5:ba:ae:57:79:bf:b2:41:a3:33:52:2a:93:a8:
                    fb:5d:25:cc:94:7c:2a:23:58:87:4a:45:38:b3:da:
                    6f:3f:bf:d3:b7:23:dc:e4:08:78:72:8b:05:7d:b1:
                    6c:ee:0d:5b:53:0a:03:fe:86:09:e7:e0:e5:fd:38:
                    8f:9a:2c:a6:14:e5:a2:e2:ae:19:c3:42:4b:1b:6e:
                    2f:0c:ca:f9:8d:4c:a4:7d:5f:b4:34:1a:10:fd:c6:
                    48:bd:22:7e:9a:d3:55:d6:f1:4b:8e:30:c9:4e:62:
                    cb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:72:A3:21:2C:7C:F5:DB:03:09:27:EE:75:21:62:9A:FC:38:7B:6B
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e203134363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:a7:92:cc:76:90:78:db:5d:64:e0:5c:4f:a8:64:fd:10:10:
         d9:44:46:9c:a6:2f:f0:6f:c1:0a:87:42:f6:e2:fd:07:b9:8f:
         60:98:25:77:58:b9:f2:32:df:d5:f3:55:a1:48:cf:05:16:0a:
         c4:f1:44:92:25:8a:39:b5:52:26:72:57:a7:48:13:ae:98:14:
         be:f9:98:05:98:ac:56:cb:11:28:dd:33:68:cb:77:7f:bb:6c:
         2d:fb:87:24:78:a9:9f:fb:03:b5:6a:8b:73:68:2e:a6:ab:ba:
         e0:93:57:7b:30:7d:66:c7:c5:be:41:b4:d5:5f:78:e8:a2:6c:
         ba:8d:be:94:1c:3c:b6:df:a3:ec:f0:94:4f:ac:7d:2b:aa:d5:
         13:ea:89:e7:62:61:a1:10:2e:6b:76:41:53:c8:0c:2b:39:ed:
         e9:4e:ee:80:f9:a3:3f:48:d3:29:19:6f:1e:e0:2e:03:a0:7e:
         bd:da:28:2a:6f:94:cc:bf:00:73:bd:3d:75:c2:ed:e9:8a:e7:
         c3:74:03:72:fb:50:75:7d:21:01:45:39:c0:12:64:68:99:60:
         81:f9:5d:cd:d5:71:85:a0:2d:ea:5b:53:c7:70:c0:86:b9:33:
         00:0e:21:d6:9e:ae:87:2f:6a:7f:13:b5:d4:a6:13:0b:3f:08:
         f8:7e:0b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:33:53 2025 by rpki-client