Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203534323532.roa
File:                     3139392e3233312e36382e302f32342d3234203d3e203534323532.roa (raw, json)
Hash identifier:          t8RROkX90H8dBSJV6MmNdmS68OD6uprbn4q47SDdsqg=
Subject key identifier:   23:D8:74:88:23:8E:EA:6F:11:88:9A:B2:DA:D2:EF:8E:B6:A7:C9:C7
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       3C7566830E5ECFA5FE92E5BE65A02947725F4139
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203534323532.roa
Signing time:             Fri 10 Oct 2025 12:26:37 +0000
ROA not before:           Fri 10 Oct 2025 12:21:37 +0000
ROA not after:            Fri 09 Oct 2026 12:26:37 +0000
asID:                     54252
IP address blocks:        199.231.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:75:66:83:0e:5e:cf:a5:fe:92:e5:be:65:a0:29:47:72:5f:41:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Oct 10 12:21:37 2025 GMT
            Not After : Oct  9 12:26:37 2026 GMT
        Subject: CN=23D87488238EEA6F11889AB2DAD2EF8EB6A7C9C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:ed:82:61:78:c6:5b:3b:84:5c:a0:ac:14:
                    56:c0:4a:ba:33:ed:5c:49:93:a4:b4:23:96:c4:dc:
                    9f:82:a0:4b:3e:23:fc:32:91:db:44:b2:e6:f9:44:
                    0d:a8:cf:d5:2b:e1:ca:78:7f:b7:19:64:69:c7:d4:
                    4b:ad:64:4e:78:43:ed:78:7e:88:a3:ed:0e:9f:e1:
                    42:f5:b9:15:8e:b7:bd:24:50:09:bb:9b:d0:10:d0:
                    34:3b:c3:0f:c2:a6:fc:7f:e0:e1:89:af:e7:c2:fb:
                    e1:03:e9:65:5e:82:5e:d7:b6:0a:29:09:d1:33:53:
                    73:b2:fd:27:45:c2:07:c2:87:7b:a5:8a:d6:95:bc:
                    75:1d:a5:57:34:be:fd:31:68:c3:70:13:9a:63:d9:
                    13:e0:4c:0e:b1:93:ed:82:96:de:29:48:49:5b:dd:
                    4c:a0:ca:94:6f:79:69:1d:d0:ab:55:23:dd:91:22:
                    1d:3e:2b:65:51:e7:58:d2:42:cb:0f:4f:94:5a:b3:
                    87:ed:d5:5d:ef:d3:b7:9a:8a:27:4f:c7:ab:1d:ee:
                    c8:c2:40:3a:fc:02:fe:15:01:71:a3:7d:f8:3a:91:
                    6b:92:92:72:ad:30:58:d4:99:dd:a2:34:31:95:cd:
                    96:42:2a:f1:18:f2:58:b9:cc:e5:49:da:96:4c:4f:
                    f5:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:D8:74:88:23:8E:EA:6F:11:88:9A:B2:DA:D2:EF:8E:B6:A7:C9:C7
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203534323532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:db:cd:f6:ea:18:d4:51:f5:a6:ee:09:f0:b7:14:b6:b4:16:
         8c:db:3e:60:44:ae:4d:87:ed:c7:b0:d6:dd:26:9f:94:6f:5d:
         3b:04:bf:8b:c0:57:b8:00:e8:2c:ae:4b:48:b4:1f:24:fc:cc:
         e5:37:2f:7c:67:0f:a2:df:55:32:e6:f4:90:fe:5b:b1:0f:3b:
         a4:35:c8:25:8b:18:4a:12:ae:5a:af:89:53:ca:36:a1:69:b8:
         b8:7a:a7:ba:d8:c4:d2:95:2f:3d:d6:e0:3a:54:99:9f:e4:2c:
         b4:26:4c:2c:d2:b3:50:d0:10:90:0c:a8:1b:74:b1:01:3f:f4:
         33:1b:cb:c6:37:5c:43:23:4d:2b:cc:40:e7:66:7e:a4:e7:7f:
         65:7c:fd:c3:85:02:d4:32:44:eb:9e:c8:07:0a:16:7d:05:3a:
         08:c4:2f:46:08:15:ad:53:3b:93:7f:65:90:3c:50:8d:ac:33:
         a7:97:67:e5:82:38:6d:51:d5:d1:3e:28:f1:d2:bf:42:f0:98:
         ae:a0:18:55:39:97:ba:40:9d:28:9a:17:e4:2c:a3:39:3b:3c:
         4f:53:19:be:a3:17:79:eb:73:d2:68:ca:27:3a:c0:0d:26:95:
         8e:70:fe:a4:54:a4:8c:d3:77:d5:b2:9f:e6:1f:01:e0:8b:63:
         46:d0:f7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:05 2025 by rpki-client