Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e2039333034.roa
File:                     3139382e3137372e36332e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          kfsRpT+qFxfmAAjVLOpQnS8FSHx0rmdlDtDln/uOtHU=
Subject key identifier:   D3:0D:B6:B3:6A:B1:1C:01:18:B6:01:65:9D:55:81:3B:3A:02:35:76
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       48E6DE12D4875FA6858F648637EDF201D44EE33E
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 21 Sep 2025 15:15:35 +0000
ROA not before:           Sun 21 Sep 2025 15:10:35 +0000
ROA not after:            Sun 20 Sep 2026 15:15:35 +0000
asID:                     9304
IP address blocks:        198.177.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:e6:de:12:d4:87:5f:a6:85:8f:64:86:37:ed:f2:01:d4:4e:e3:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Sep 21 15:10:35 2025 GMT
            Not After : Sep 20 15:15:35 2026 GMT
        Subject: CN=D30DB6B36AB11C0118B601659D55813B3A023576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:29:5a:f0:d2:37:9c:2f:e3:21:66:48:35:
                    3d:db:58:b3:29:15:43:5b:9c:63:36:21:1a:eb:60:
                    68:d5:4c:26:e3:f8:dd:a4:83:19:31:42:cd:d7:4c:
                    71:0c:74:c2:b3:9b:46:b3:46:88:51:59:ed:3c:67:
                    77:ed:d8:c2:dc:c9:18:2f:c3:4e:94:d9:11:b3:de:
                    ad:dc:db:0b:c3:53:8f:9c:d5:e3:6c:89:98:e2:78:
                    76:24:f5:3f:38:35:8e:bd:55:72:32:9d:38:e2:00:
                    e4:fa:6d:c2:db:59:1f:f7:b2:44:b6:81:e5:2d:bc:
                    7f:a9:03:a6:31:6f:5a:7b:af:c4:1c:f7:66:22:a9:
                    f8:a8:7c:2b:bb:86:1a:99:7b:34:60:4b:e7:07:d3:
                    eb:4e:cb:1a:c4:7f:f0:8a:80:8a:7f:05:f2:99:6c:
                    4d:b3:5a:7e:f9:34:43:ab:2d:bc:a9:79:19:2e:8d:
                    95:c6:19:cf:42:86:2d:24:04:2c:ed:a9:94:ae:58:
                    cb:cb:5d:e3:87:ec:76:84:b3:fd:35:36:28:ae:ef:
                    b6:9a:c9:f3:17:2c:57:52:55:c1:be:ee:22:e0:72:
                    e4:77:8c:2b:89:ca:f8:8e:ea:c2:30:7a:64:f7:d5:
                    57:9d:51:03:b0:ec:b1:1f:92:4b:f1:98:be:8a:49:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0D:B6:B3:6A:B1:1C:01:18:B6:01:65:9D:55:81:3B:3A:02:35:76
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139382e3137372e36332e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:36:58:71:4e:01:e3:2c:cb:31:f1:f5:a9:4e:8d:ce:e4:a7:
         60:52:d8:5f:14:9c:e2:83:2f:fe:16:94:25:20:b4:9c:91:1a:
         7a:06:3e:15:1e:83:9e:fb:8f:34:ec:73:95:75:ad:b5:67:ef:
         e7:2b:0c:20:9e:00:d0:03:e9:92:83:42:2d:99:28:6a:2b:11:
         91:41:67:b0:f1:81:18:0f:b9:f9:49:86:cc:52:fe:db:1d:b3:
         6f:7d:c7:fd:b5:20:12:dd:3d:24:1e:23:db:34:4d:cc:f4:c7:
         c6:48:f1:05:1b:12:3f:61:6a:f1:0d:eb:d2:6b:ba:0f:6c:91:
         0c:e3:46:05:8b:c9:fd:7b:8b:95:85:8f:8d:b6:ca:34:be:ba:
         29:87:7b:e1:da:95:9a:eb:7a:bc:2f:c1:c6:4f:0f:5d:da:0f:
         6f:19:77:39:4b:79:49:5b:98:34:1e:8b:ae:df:41:da:b9:35:
         14:b5:e7:27:28:37:ce:10:7e:b2:2b:7e:30:6c:81:41:de:d4:
         f8:2e:f5:65:bb:6d:c1:c3:d0:99:33:5d:b9:87:38:34:2c:21:
         a0:56:55:1a:bc:03:cc:94:47:06:cd:9f:82:22:23:28:ed:8f:
         11:27:0b:a4:c3:41:ef:d5:bf:41:06:2a:bc:1e:f3:7d:1d:44:
         2f:1d:c5:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:54:39 2025 by rpki-client