Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32342d3234203d3e203632363130.roa
File:                     3139382e3137372e35382e302f32342d3234203d3e203632363130.roa (raw, json)
Hash identifier:          hDpZtYq1SXZ1e0M86JNb/ZMxdJfMSrMPyufoXcfhps8=
Subject key identifier:   C9:7E:BA:80:28:8A:04:AC:02:A9:53:4F:47:81:0D:98:A9:2F:3C:0A
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       74E91B5E54BC16DE1ABE4C7C5F948D69CF877CFD
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32342d3234203d3e203632363130.roa
Signing time:             Thu 17 Apr 2025 04:38:57 +0000
ROA not before:           Thu 17 Apr 2025 04:33:57 +0000
ROA not after:            Thu 16 Apr 2026 04:38:57 +0000
asID:                     62610
IP address blocks:        198.177.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 20:42:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:e9:1b:5e:54:bc:16:de:1a:be:4c:7c:5f:94:8d:69:cf:87:7c:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Apr 17 04:33:57 2025 GMT
            Not After : Apr 16 04:38:57 2026 GMT
        Subject: CN=C97EBA80288A04AC02A9534F47810D98A92F3C0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:0b:cd:eb:01:93:64:a5:50:49:e7:a7:52:
                    73:d4:27:5d:45:66:b0:23:e6:f1:9a:73:14:d8:48:
                    4f:2d:cc:d0:94:be:38:ed:1c:05:08:d7:ac:9c:df:
                    fd:0e:ce:cc:dc:b1:7c:66:b1:93:9d:5d:12:d3:32:
                    76:07:33:df:4a:ec:72:d4:df:4b:f0:24:87:8f:05:
                    4f:1a:b8:c4:80:5c:09:d9:0e:93:3b:cf:8f:03:19:
                    c6:69:3b:a6:dc:a7:3d:c5:08:48:65:c1:4b:c0:6e:
                    ab:97:52:4a:bc:ab:00:3d:e1:52:bb:2f:af:6d:13:
                    e4:91:d1:33:c4:fa:ee:1b:a8:cd:84:4c:f5:e0:c4:
                    fc:4d:37:40:85:59:7f:a7:45:99:a7:21:e8:ad:d1:
                    d0:22:34:bd:f4:20:5f:d3:fb:a2:07:7a:77:60:16:
                    8f:7b:20:c3:45:0e:57:ca:87:ed:8a:60:fa:de:8d:
                    26:76:df:b5:82:c0:ba:35:03:fa:30:75:2f:3d:fd:
                    83:33:0f:44:b3:70:f6:78:9e:bc:e5:2f:9b:06:f9:
                    68:e1:20:df:45:75:b8:2a:1f:5a:de:c4:08:39:0f:
                    03:fd:41:b0:b0:b9:63:f3:58:d3:49:7a:29:cc:e8:
                    de:87:b3:bf:33:61:96:53:03:80:c1:d0:55:28:b9:
                    3b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:7E:BA:80:28:8A:04:AC:02:A9:53:4F:47:81:0D:98:A9:2F:3C:0A
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e35382e302f32342d3234203d3e203632363130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:ef:79:83:e6:80:30:4e:cb:3c:4d:fa:b6:3f:11:4a:47:24:
         93:fd:ca:d4:06:ca:c5:cb:50:0d:4c:ae:2a:13:06:c6:38:70:
         8d:54:2a:4e:e5:d1:c4:a1:46:be:2a:e9:5b:86:4b:34:b9:49:
         f2:3c:4b:84:54:c3:f3:d6:9c:97:98:5f:5b:7c:ed:67:16:ac:
         01:b4:de:70:b1:06:02:ca:ab:30:d9:f0:2d:0b:e6:e4:8c:d3:
         a2:ee:68:ba:96:02:79:e8:33:25:21:11:08:00:74:f2:e0:fe:
         75:4d:b9:ca:07:44:2c:0d:2c:19:00:b0:ab:19:bd:31:27:44:
         0e:69:43:cd:a9:f5:78:4f:69:ac:2c:91:22:89:e5:54:69:41:
         c7:f4:ae:98:72:7b:6c:6e:93:8d:ad:ee:5e:1d:40:99:77:50:
         13:45:58:e4:43:55:54:7c:cb:1f:be:61:c5:5e:da:1e:8d:2c:
         90:68:cd:97:ba:5e:bd:be:fc:66:ff:af:5c:44:83:29:b8:4e:
         41:17:f1:61:a9:2c:0f:55:44:63:71:8c:32:10:a0:d5:6d:c3:
         d6:cd:06:11:f4:e1:83:be:d6:b6:e6:45:12:f5:ed:fc:c9:a6:
         27:e3:31:75:03:3e:bd:68:b8:d0:56:6f:d4:cd:ab:3b:20:49:
         20:97:ea:ab
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUdOkbXlS8Ft4avkx8X5SNac+HfP0wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUwNDE3MDQzMzU3WhcNMjYwNDE2MDQzODU3
WjAzMTEwLwYDVQQDEyhDOTdFQkE4MDI4OEEwNEFDMDJBOTUzNEY0NzgxMEQ5OEE5
MkYzQzBBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3YLzesBk2Sl
UEnnp1Jz1CddRWawI+bxmnMU2EhPLczQlL447RwFCNesnN/9Ds7M3LF8ZrGTnV0S
0zJ2BzPfSuxy1N9L8CSHjwVPGrjEgFwJ2Q6TO8+PAxnGaTum3Kc9xQhIZcFLwG6r
l1JKvKsAPeFSuy+vbRPkkdEzxPruG6jNhEz14MT8TTdAhVl/p0WZpyHordHQIjS9
9CBf0/uiB3p3YBaPeyDDRQ5XyoftimD63o0mdt+1gsC6NQP6MHUvPf2DMw9Es3D2
eJ685S+bBvlo4SDfRXW4Kh9a3sQIOQ8D/UGwsLlj81jTSXopzOjeh7O/M2GWUwOA
wdBVKLk7nQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMl+uoAoigSsAqlTT0eBDZip
LzwKMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0
MjhlYTliNzI2Ny8wLzMxMzkzODJlMzEzNzM3MmUzNTM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMjM2MzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMaxOjANBgkqhkiG9w0BAQsF
AAOCAQEAte95g+aAME7LPE36tj8RSkckk/3K1AbKxctQDUyuKhMGxjhwjVQqTuXR
xKFGvirpW4ZLNLlJ8jxLhFTD89acl5hfW3ztZxasAbTecLEGAsqrMNnwLQvm5IzT
ou5oupYCeegzJSERCAB08uD+dU25ygdELA0sGQCwqxm9MSdEDmlDzan1eE9prCyR
IonlVGlBx/SumHJ7bG6Tja3uXh1AmXdQE0VY5ENVVHzLH75hxV7aHo0skGjNl7pe
vb78Zv+vXESDKbhOQRfxYaksD1VEY3GMMhCg1W3D1s0GEfThg77WtuZFEvXt/Mmm
J+MxdQM+vWi40FZv1M2rOyBJIJfqqw==
-----END CERTIFICATE-----
Generated at Sat May 10 09:51:58 2025 by rpki-client