Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e20333938333238.roa
File:                     3139322e302e31362e302f32342d3234203d3e20333938333238.roa (raw, json)
Hash identifier:          teRQth+CaxKai+K6w6TjaATUTiTMeq9lteIR08pygHI=
Subject key identifier:   9A:DD:9C:6E:16:DC:7E:29:6D:3E:2E:64:B2:FD:1C:EC:CB:FC:26:C3
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       2BCE0516C222C6600D583F2DC634EE448F52837E
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e20333938333238.roa
Signing time:             Mon 16 Jun 2025 04:55:53 +0000
ROA not before:           Mon 16 Jun 2025 04:50:53 +0000
ROA not after:            Mon 15 Jun 2026 04:55:53 +0000
asID:                     398328
IP address blocks:        192.0.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 05:23:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:ce:05:16:c2:22:c6:60:0d:58:3f:2d:c6:34:ee:44:8f:52:83:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun 16 04:50:53 2025 GMT
            Not After : Jun 15 04:55:53 2026 GMT
        Subject: CN=9ADD9C6E16DC7E296D3E2E64B2FD1CECCBFC26C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bf:2e:8d:6e:ce:5e:97:1d:e6:e7:fd:05:15:
                    83:ea:f5:ca:82:28:af:f2:a0:99:be:b5:ee:bc:b9:
                    71:22:08:ff:cd:81:59:c5:4a:f6:fa:a7:af:ed:74:
                    75:12:47:29:e1:da:0f:90:78:e4:c3:41:31:35:0c:
                    a5:35:0e:63:73:2c:2a:cd:1d:6e:85:cf:d7:2e:fc:
                    8d:bb:ce:e4:1f:88:e9:19:6b:a1:6c:fa:98:c6:88:
                    b7:6b:e0:48:71:6c:4c:d8:a3:e1:2f:20:86:7d:a6:
                    d8:dc:2a:78:d7:e7:6e:8f:5b:6f:fc:c6:2e:24:75:
                    71:e2:e6:bb:21:3e:a0:75:fb:b0:ba:0b:e4:ff:23:
                    9f:9a:ab:6c:f4:e0:0c:26:8c:25:90:0c:f2:ef:f5:
                    4e:2c:8c:e5:21:c4:5f:b7:1d:50:47:5a:35:1b:3a:
                    f1:a8:43:21:d6:df:80:64:c7:e8:f5:c8:d4:b1:91:
                    8c:b3:cc:94:b1:fc:54:14:2e:8e:c8:4d:a0:6d:c1:
                    a8:12:54:db:ff:fa:bd:db:52:4a:00:27:c5:d4:64:
                    7b:0d:fd:d4:37:da:03:2a:8c:1a:10:11:86:5d:9a:
                    f4:ae:20:f7:df:af:6b:4b:56:fb:00:7c:cb:01:ed:
                    e4:5c:a0:87:87:fa:f7:33:72:4b:db:42:af:7c:f3:
                    4e:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:DD:9C:6E:16:DC:7E:29:6D:3E:2E:64:B2:FD:1C:EC:CB:FC:26:C3
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31362e302f32342d3234203d3e20333938333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:92:4b:8e:3c:ff:09:be:df:8c:e3:0b:87:9b:81:2e:ae:16:
         fb:fb:46:29:ad:0b:37:96:19:c7:1f:4e:e7:8f:5e:87:87:2e:
         c3:92:55:73:2b:e7:6c:0c:13:b0:16:d4:fd:dd:63:44:88:f7:
         89:db:3d:91:99:b5:5b:63:bc:29:2d:22:54:75:1c:22:54:5d:
         95:08:f9:33:77:8d:3c:ad:b3:37:a9:9b:74:62:dc:59:d9:4c:
         03:27:b9:00:d3:37:b9:5b:bd:fc:86:0c:95:a2:35:f1:5b:94:
         32:10:44:50:1e:04:3f:f0:01:d9:47:aa:23:4d:a2:3d:4c:ee:
         cc:71:27:b2:3f:a3:f7:15:42:a9:5a:c8:c7:00:54:17:ba:de:
         52:ac:9c:f4:cc:5a:d5:2a:f4:1f:09:88:6a:24:4e:e6:7d:cd:
         33:2c:8f:c5:1e:62:2d:87:10:7e:03:b3:d7:50:f7:42:79:f5:
         1a:39:18:81:d1:58:19:24:31:d5:67:45:b8:0a:a3:a5:d1:c5:
         34:74:77:a7:cd:58:50:97:be:9b:f6:ff:14:a7:26:b7:f5:93:
         fc:0d:8d:39:c4:21:17:f3:83:df:2c:ff:7c:4e:49:99:ce:a4:
         df:df:d2:7b:29:ff:9b:71:67:83:ed:ef:11:7c:e9:7d:c8:6a:
         8f:e3:e1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:41:49 2025 by rpki-client