Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32342d3234203d3e20383334.roa
File:                     3139382e3137372e36302e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          RDMWAQLD4yD88b18WTv9i8howrdCdcSffNix+faE834=
Subject key identifier:   1F:FC:9E:33:61:35:AA:58:E2:FD:99:9F:B3:20:45:DD:11:41:69:49
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       16F05EC18A2DBC89063CD2B1A4F66DAB7E89570F
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32342d3234203d3e20383334.roa
Signing time:             Tue 07 Oct 2025 00:01:07 +0000
ROA not before:           Mon 06 Oct 2025 23:56:07 +0000
ROA not after:            Tue 06 Oct 2026 00:01:07 +0000
asID:                     834
IP address blocks:        198.177.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f0:5e:c1:8a:2d:bc:89:06:3c:d2:b1:a4:f6:6d:ab:7e:89:57:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Oct  6 23:56:07 2025 GMT
            Not After : Oct  6 00:01:07 2026 GMT
        Subject: CN=1FFC9E336135AA58E2FD999FB32045DD11416949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1b:24:55:af:d7:ee:9c:34:ab:9a:b5:00:dc:
                    c3:22:8f:97:94:b9:f5:26:a2:d3:8d:eb:c6:77:b4:
                    38:ad:c1:85:e8:48:f0:7a:cf:de:23:6c:9f:db:58:
                    00:b4:0f:1e:68:d4:fd:91:17:2d:18:14:fd:23:cb:
                    d9:db:78:3e:35:a6:63:f8:2f:dd:ce:24:bb:b9:da:
                    93:a0:d8:93:2c:33:cd:bb:ff:15:5b:8a:50:12:bd:
                    f4:58:31:22:eb:f2:8b:e4:82:1c:65:5d:df:67:e9:
                    d7:7f:41:46:1f:3d:31:12:8e:df:85:a1:fa:7a:7f:
                    fd:65:42:09:d0:30:ff:38:7a:c8:bb:1b:9c:0c:56:
                    81:9c:59:84:77:23:1b:00:c3:51:dc:40:95:8d:e6:
                    57:76:f6:e8:73:b4:89:dc:8a:13:1e:ee:7f:55:99:
                    06:cb:f3:9f:02:fd:ac:e5:40:01:a1:0d:a6:2a:87:
                    6c:fd:7e:1f:f0:f7:e4:1c:e8:b3:8b:59:f3:e6:14:
                    1f:e1:f3:d3:48:ce:d2:0a:41:af:ce:f9:24:8d:e2:
                    ba:50:05:2b:18:ee:4b:7f:44:80:72:4d:28:c3:d4:
                    23:bb:45:86:d6:52:9c:d5:97:3b:f9:60:93:b8:e1:
                    b3:1e:28:47:3f:2b:f6:3e:37:01:99:c6:cb:d7:86:
                    a9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:FC:9E:33:61:35:AA:58:E2:FD:99:9F:B3:20:45:DD:11:41:69:49
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36302e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:e5:d7:8e:18:a4:c0:e2:da:0f:9f:2c:0f:7d:d1:90:34:7b:
         19:c8:7e:b1:3d:66:1a:29:53:f6:f7:a3:bb:56:c7:6a:15:ba:
         cd:7c:e1:07:63:5b:0f:d6:61:97:66:d9:35:f9:0b:93:8f:24:
         9f:47:f5:02:54:2f:8d:bd:e5:cd:fd:68:50:30:9b:44:3c:cf:
         c0:67:85:29:e4:24:73:dd:8a:03:be:81:a6:e9:01:52:6c:6c:
         2c:e7:87:20:88:75:81:ad:e2:b9:19:80:25:ea:41:b4:53:ea:
         c6:60:47:27:28:5f:4f:98:15:0b:62:87:7c:f0:50:bc:ed:60:
         e8:c2:3f:e8:87:3b:1b:59:51:13:38:db:b8:70:86:67:6c:1c:
         e3:be:b9:b7:43:11:2d:9a:99:0c:bf:79:d0:4f:ab:b5:af:ff:
         fe:7d:61:8b:5c:85:d2:c5:f4:bd:c6:48:cb:28:90:8c:63:5d:
         da:56:ed:1b:b3:fa:ff:74:a3:db:50:0d:84:d7:3a:d3:67:d4:
         93:84:93:6a:a0:d2:21:97:5c:5c:5d:2a:cc:95:5c:8d:f3:c5:
         41:ef:67:95:c6:e1:eb:15:b1:3d:a5:dc:e5:d9:6b:f8:a2:51:
         59:d3:99:c0:71:4c:4c:ec:19:32:a2:bf:bd:4b:5f:10:a4:8d:
         52:82:af:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 14:47:27 2025 by rpki-client