Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36352e302f32342d3234203d3e203136353039.roa
File:                     3139392e3233312e36352e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          o0DrVleD3RT41AK315/nzPDR7ZekDBuU4RDG5qzVaXw=
Subject key identifier:   14:5B:41:25:CF:ED:F0:E4:4B:D1:3B:90:70:39:86:F4:72:F0:9A:94
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       793F416DACE731A6439ABEDC8586A6C481F8C071
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36352e302f32342d3234203d3e203136353039.roa
Signing time:             Fri 02 May 2025 16:40:50 +0000
ROA not before:           Fri 02 May 2025 16:35:50 +0000
ROA not after:            Fri 01 May 2026 16:40:50 +0000
asID:                     16509
IP address blocks:        199.231.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 09:37:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:3f:41:6d:ac:e7:31:a6:43:9a:be:dc:85:86:a6:c4:81:f8:c0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: May  2 16:35:50 2025 GMT
            Not After : May  1 16:40:50 2026 GMT
        Subject: CN=145B4125CFEDF0E44BD13B90703986F472F09A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c4:01:45:8c:72:62:b8:16:b8:b2:b7:cf:a1:
                    96:98:50:44:4f:db:6b:99:15:25:7e:c6:75:45:3d:
                    67:39:91:4d:fa:21:dd:94:6d:42:57:16:78:74:37:
                    47:ad:ed:ec:a8:f0:c3:34:a5:66:43:ea:9e:3c:95:
                    4e:99:ef:e1:a8:a4:5d:80:6c:84:fb:ca:09:a0:49:
                    d9:25:31:d9:11:7c:a6:da:c9:6f:2b:6b:ce:23:e3:
                    30:3d:d0:c4:16:08:47:71:eb:e9:be:1e:f6:68:c5:
                    fe:fc:44:bb:31:ec:94:c0:a8:29:74:a3:9d:07:88:
                    f4:c1:97:0b:c1:09:01:3d:5c:06:e0:6b:24:0b:03:
                    bd:90:de:79:17:4e:3e:6b:53:3d:e8:bc:05:38:16:
                    c3:47:05:5f:ff:79:91:51:e3:01:cf:10:1a:90:6c:
                    96:de:a1:a1:66:47:6d:11:2a:02:53:1c:d5:7f:c2:
                    ce:3a:8e:3b:4b:95:d8:0c:6b:28:b6:ea:1a:06:2d:
                    e1:eb:62:7c:ba:70:02:68:de:58:e4:65:e6:e1:42:
                    e3:30:cf:5a:10:37:44:7a:e4:64:d5:2b:ab:a2:59:
                    89:82:08:74:d2:d3:f2:7d:1a:83:32:ec:d8:a0:1a:
                    07:ac:af:8c:76:c2:cc:52:05:1c:47:ab:eb:d6:41:
                    0b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5B:41:25:CF:ED:F0:E4:4B:D1:3B:90:70:39:86:F4:72:F0:9A:94
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36352e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:aa:de:cd:95:d5:15:9f:eb:b6:0f:c2:5d:c9:1a:20:d8:3c:
         99:d4:81:54:c1:71:fa:b9:19:de:d8:42:0a:0e:62:92:e4:1c:
         27:3b:e2:39:bb:da:4e:fa:f1:9b:b9:59:ab:8a:6f:e6:3f:99:
         d0:49:a9:74:cf:e6:3c:d7:7f:c6:a4:77:e7:ca:00:01:b1:6c:
         a5:f1:ee:dc:42:51:d9:4e:84:ca:21:b0:c1:33:f8:8e:2b:20:
         42:dd:ac:14:51:74:1e:5a:2e:26:12:be:98:8c:ac:6a:04:0f:
         b7:6d:3b:c8:e1:76:87:c2:d2:fc:65:26:38:ec:d2:56:11:98:
         a1:63:7d:9d:bc:29:d0:b0:29:26:43:45:2e:23:fa:c1:37:6a:
         1b:33:5e:38:88:eb:84:54:62:29:d1:97:42:dd:05:92:c1:83:
         c2:45:3e:88:4a:8e:17:26:1c:3b:fe:6d:f2:34:6e:75:4d:d6:
         5e:97:58:5a:60:6c:b0:d9:57:e4:74:4d:43:7d:b2:97:36:85:
         f6:e2:cb:5c:af:d0:a2:00:5e:d5:8b:99:6b:d4:61:aa:d6:32:
         02:92:f5:89:24:5f:25:ae:be:70:8b:38:f9:04:c4:da:c4:de:
         22:15:66:70:db:9a:d3:ce:8a:77:14:9d:7e:70:e6:7e:2c:d8:
         63:69:68:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 16:50:24 2025 by rpki-client