Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31382e302f32332d3234203d3e20383334.roa
File:                     3139322e302e31382e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          4y7oW/el5v35ZigAjMieykbHREGIHkJ/WXHde3AQ004=
Subject key identifier:   7F:8E:FE:69:27:E3:47:07:07:1F:30:30:07:65:9D:BF:76:66:C0:4D
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       68446620D1A0A1101C3EA7951C74AE00B53F6BD6
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31382e302f32332d3234203d3e20383334.roa
Signing time:             Mon 16 Jun 2025 04:56:45 +0000
ROA not before:           Mon 16 Jun 2025 04:51:45 +0000
ROA not after:            Mon 15 Jun 2026 04:56:45 +0000
asID:                     834
IP address blocks:        192.0.18.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:44:66:20:d1:a0:a1:10:1c:3e:a7:95:1c:74:ae:00:b5:3f:6b:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun 16 04:51:45 2025 GMT
            Not After : Jun 15 04:56:45 2026 GMT
        Subject: CN=7F8EFE6927E34707071F303007659DBF7666C04D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b0:9a:7f:7a:eb:52:16:f6:2f:3f:7b:e8:60:
                    77:00:04:57:a1:80:50:b9:74:b9:91:e2:31:6a:2b:
                    1a:cc:6e:c5:2b:e2:e4:08:e7:1e:a1:1b:39:77:4b:
                    88:34:61:e9:7d:37:bc:9b:d3:b6:48:5e:a6:a9:57:
                    2e:bf:07:47:09:06:cd:60:34:ff:8a:d4:70:d4:c3:
                    aa:fc:df:47:09:a8:aa:da:b3:3d:eb:27:8c:95:98:
                    b2:32:76:80:e3:3c:cc:86:76:f7:76:b8:31:2a:4a:
                    0d:16:ea:46:7b:0b:71:f7:40:0c:02:bf:5c:d4:c8:
                    ec:f1:87:7b:18:90:27:44:e1:e5:05:99:2a:8f:5d:
                    86:f8:0b:9c:a5:a4:ae:fa:eb:a4:7c:57:35:f9:63:
                    59:ae:b2:df:76:b0:5f:fa:fb:16:f5:94:83:0a:62:
                    ca:11:fa:01:95:b1:dc:4a:c7:89:bb:7a:34:a7:5c:
                    28:38:fa:e4:7d:f3:97:48:b0:c1:ef:5d:2c:1c:00:
                    46:2a:d8:d7:86:86:25:30:48:44:d9:92:0a:29:55:
                    71:cf:bb:be:d3:27:62:48:a5:8e:1c:40:55:63:0a:
                    b9:91:4c:62:80:74:cb:58:0d:f0:d0:4d:b4:91:69:
                    25:33:c3:1f:55:81:28:03:70:31:09:ba:38:95:0c:
                    36:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:8E:FE:69:27:E3:47:07:07:1F:30:30:07:65:9D:BF:76:66:C0:4D
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139322e302e31382e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:24:ab:dd:4e:29:fe:1b:ce:d8:91:e3:34:7c:ed:36:9c:92:
         95:67:a0:eb:fa:41:56:ec:8f:dc:f7:a4:96:33:fb:18:e8:b6:
         27:ad:42:bd:0b:dd:c2:ab:06:21:a4:b2:bd:71:12:fa:82:52:
         87:d3:00:b7:01:b6:63:42:d6:84:d9:fd:68:94:5d:88:d6:22:
         f5:16:b4:17:fc:e7:5c:43:b1:80:51:e9:aa:2e:a5:fc:0d:00:
         75:cb:2d:4e:66:2a:d9:e8:56:a4:1e:44:a8:f4:bb:27:98:8b:
         cd:9c:db:2e:33:b6:6b:21:70:a9:db:f2:1b:c9:d5:56:98:ae:
         87:35:8b:d6:c5:95:5a:d3:81:4d:ce:05:49:75:aa:c0:83:f4:
         ea:bf:c0:38:f4:c2:1d:41:0f:4c:82:49:fe:1e:24:87:83:06:
         c0:b8:7e:ba:2c:06:d8:95:18:91:87:28:44:71:17:35:73:e2:
         32:87:3a:2a:15:6e:2c:34:0e:72:f1:36:a3:58:26:5c:a5:6e:
         a8:23:23:c5:fe:c1:b9:89:8b:6b:c5:30:a8:9c:b3:48:e4:48:
         0c:47:0d:d2:f2:8a:65:c0:d8:13:95:7d:61:68:91:99:13:a0:
         62:4d:6f:c6:18:36:f8:ab:25:26:5f:35:6c:e6:1e:44:4f:12:
         34:48:54:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:45:11 2025 by rpki-client