Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e2039333034.roa
File:                     3139392e3233312e36372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          6V/AZL5K8e6+3NdOWefyTeG1OnngjhuCeK4QU5wNB1E=
Subject key identifier:   6F:E2:69:E9:0A:FF:1D:F3:3D:89:43:54:53:46:DF:44:BE:2C:08:6F
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       697494E4D97000AF6F6FF8B617223BE7D1C6EB16
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e2039333034.roa
Signing time:             Mon 16 Jun 2025 10:55:03 +0000
ROA not before:           Mon 16 Jun 2025 10:50:03 +0000
ROA not after:            Mon 15 Jun 2026 10:55:03 +0000
asID:                     9304
IP address blocks:        199.231.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:13:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:74:94:e4:d9:70:00:af:6f:6f:f8:b6:17:22:3b:e7:d1:c6:eb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Jun 16 10:50:03 2025 GMT
            Not After : Jun 15 10:55:03 2026 GMT
        Subject: CN=6FE269E90AFF1DF33D8943545346DF44BE2C086F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ff:1d:b1:d4:00:83:b1:68:4a:b7:28:c7:d0:
                    1e:d8:6a:27:e7:73:36:19:62:36:a7:d3:4a:62:32:
                    bf:05:7f:56:7e:c3:5d:7b:4f:59:16:be:3e:e0:02:
                    83:c7:ba:d1:7b:1f:4e:f9:3a:f6:f1:2e:f5:fd:04:
                    9a:ca:2c:b3:b8:7b:0b:a2:6e:04:f9:2c:31:20:f7:
                    8a:1f:93:04:fc:b5:d3:b2:29:d9:d0:60:f6:57:14:
                    4d:98:6f:f3:02:3f:bc:61:a3:87:e4:6b:36:dd:9f:
                    0e:4e:76:5d:f8:ba:ba:8a:8e:65:ca:fa:db:6f:62:
                    7a:5f:88:06:78:2c:66:5e:a2:b7:93:a2:73:d3:ab:
                    d5:e2:f6:78:b4:42:75:1f:b9:f3:a1:c4:c1:a9:d3:
                    50:88:97:3f:75:12:49:4a:c0:6e:6e:73:00:42:5e:
                    bd:82:b6:4a:6a:26:be:1a:63:78:0c:d3:cd:6a:27:
                    c5:af:2f:c7:57:de:6a:58:7a:a8:3a:d6:78:ba:73:
                    0a:81:d6:9b:04:4a:53:57:35:02:38:55:e9:a7:4c:
                    13:7c:e3:8c:e3:d2:c3:5e:91:50:9b:f4:ca:a3:dd:
                    fd:72:d3:4d:e9:fc:e1:45:65:2e:c9:d6:fa:3e:ff:
                    d6:af:7d:db:39:62:44:ea:5d:38:af:02:42:28:1f:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:E2:69:E9:0A:FF:1D:F3:3D:89:43:54:53:46:DF:44:BE:2C:08:6F
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36372e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:c9:e5:86:d3:0d:a1:25:d9:86:19:7e:d9:b6:c3:6a:9e:cb:
         3f:46:01:8a:b9:3e:3d:a0:26:a2:4b:eb:72:8e:46:fe:d0:bb:
         28:be:d3:c1:d4:5e:34:3e:94:3e:2c:6e:25:f3:ad:52:30:b5:
         22:8c:8b:82:f9:5f:af:cc:03:3c:64:b8:4d:33:76:85:20:49:
         6e:2a:94:4d:d1:a1:a3:8d:2b:9b:09:4f:8d:88:49:e9:55:c4:
         2a:2a:34:0d:37:20:6a:93:00:83:b3:41:7a:02:e2:1e:db:09:
         5f:d9:1b:d5:03:e0:9d:1c:38:00:0a:3c:2f:b6:e3:d2:96:0d:
         4c:40:36:b4:0e:5c:98:73:38:22:04:f6:0a:22:f1:68:28:ab:
         f5:29:e2:5c:d8:f1:d5:f1:5c:d2:eb:12:8c:14:81:26:8b:95:
         5d:46:53:e8:87:42:cb:fd:46:48:7d:cd:51:1e:d4:ae:e2:71:
         0c:c8:36:4c:63:a2:24:56:c2:b8:77:ab:b4:92:27:e1:d5:b0:
         cb:5a:79:8d:37:04:d1:f9:22:e3:cf:d3:4e:c9:21:a2:e2:26:
         d3:56:ac:3e:20:81:47:b8:a2:f0:44:c3:07:1f:eb:ac:53:fc:
         1f:16:da:ea:3c:55:91:06:e3:92:0d:27:8c:15:35:60:a4:51:
         e0:7f:43:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:48:02 2025 by rpki-client