Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203634323637.roa
File:                     3139392e3233312e36382e302f32342d3234203d3e203634323637.roa (raw, json)
Hash identifier:          dLUYA1BYaAGj3wpnWyZ3a/U6sACbdOL5uz8xy1lyI3I=
Subject key identifier:   5F:FC:A4:F1:2C:60:35:14:9A:8F:16:1E:1B:0B:91:10:B4:47:82:D7
Certificate issuer:       /CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
Certificate serial:       34C826254C894B8E6AF0860A689871FD442524BF
Authority key identifier: 3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203634323637.roa
Signing time:             Fri 10 Oct 2025 12:26:37 +0000
ROA not before:           Fri 10 Oct 2025 12:21:37 +0000
ROA not after:            Fri 09 Oct 2026 12:26:37 +0000
asID:                     64267
IP address blocks:        199.231.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/c576135d-7a7b-4781-acb2-21a0d33eb1d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 14:21:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:c8:26:25:4c:89:4b:8e:6a:f0:86:0a:68:98:71:fd:44:25:24:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575
        Validity
            Not Before: Oct 10 12:21:37 2025 GMT
            Not After : Oct  9 12:26:37 2026 GMT
        Subject: CN=5FFCA4F12C6035149A8F161E1B0B9110B44782D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:98:b4:4d:20:51:6f:7a:30:4b:63:79:74:f7:
                    69:73:ab:2e:85:98:29:c3:94:b8:47:41:45:ab:00:
                    b6:7c:5b:6a:73:ba:af:f9:43:38:68:e3:21:81:d0:
                    c1:81:94:6d:54:78:5a:fd:f1:bf:03:78:cc:d0:41:
                    de:7b:46:bb:ae:95:ef:2a:32:e2:0c:0a:c9:c2:23:
                    11:67:58:0d:05:4e:34:2c:b6:ba:17:f8:51:2c:04:
                    cf:48:cc:22:1a:46:d8:97:a9:48:b6:6f:b7:27:1f:
                    e7:7f:87:ac:7c:50:d7:0b:c4:19:9d:92:49:17:13:
                    93:82:73:ed:3b:62:00:14:1a:92:64:da:2b:72:d9:
                    51:11:fd:ed:cb:79:a7:3a:a8:4f:5d:98:1d:39:1f:
                    02:e9:2a:8a:03:73:78:4f:8c:03:ce:fc:85:b4:77:
                    f2:a3:3a:05:fd:b5:c6:b8:b9:71:c8:d4:62:ef:9e:
                    0e:f9:f2:5b:ed:28:c2:fe:45:f4:a7:7d:f1:55:61:
                    a5:e6:ba:ee:2b:e8:46:5b:df:01:1c:56:57:52:4d:
                    9e:c4:c7:34:8d:75:57:c3:94:97:d9:06:68:f0:40:
                    71:b7:0e:df:dd:a3:bd:14:3a:5d:f0:84:4c:68:4c:
                    f6:fe:7e:95:43:28:15:45:3a:b6:4e:ac:93:55:c2:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FC:A4:F1:2C:60:35:14:9A:8F:16:1E:1B:0B:91:10:B4:47:82:D7
            X509v3 Authority Key Identifier:
                keyid:3C:ED:31:28:6B:CC:04:65:F8:DE:63:0A:45:22:05:FC:FD:28:FF:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3CED31286BCC0465F8DE630A452205FCFD28FF06.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c576135d-7a7b-4781-acb2-21a0d33eb1d1/aca05308ac79d5a62b497d6b883f9f59fb22d14583f00be575.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf92ee4d840193f428ea9b7267/0/3139392e3233312e36382e302f32342d3234203d3e203634323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.68.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:b5:9d:1a:a2:f8:21:0b:71:dc:17:72:6e:8c:ef:41:f6:ab:
         7b:98:0f:a6:a6:48:3d:7c:7e:3e:8f:35:aa:04:59:6c:7b:ba:
         a0:fe:df:13:d5:2a:4d:18:f2:82:14:53:4e:1c:bc:37:36:1b:
         d1:6d:23:b8:e0:43:37:43:53:b8:f9:8e:0d:ad:7d:6e:16:b5:
         e4:b8:a8:b8:f7:43:d0:83:0e:e6:91:df:75:c5:99:dc:c4:09:
         e7:2e:0e:16:ff:9a:f8:35:c8:02:e7:7d:22:84:91:86:d4:24:
         d4:f8:c0:8e:bd:00:a7:c3:7e:28:0c:cd:b8:13:6c:67:27:59:
         f9:b9:1a:62:50:bd:5d:69:06:f7:2b:2b:a8:3c:1c:6b:d4:a7:
         d0:61:8a:2b:ea:22:f2:68:73:e1:1e:d8:84:7f:97:24:63:5d:
         02:35:83:8f:50:69:ff:80:21:dc:80:30:6f:b3:96:21:9e:88:
         fd:2a:7a:2a:01:b8:fb:d7:3d:2e:8c:49:e9:13:57:be:04:8e:
         e8:16:e2:43:ce:5b:29:f7:67:3b:16:a5:0d:a2:81:c6:17:19:
         69:6d:58:db:e8:ef:31:5e:e7:26:e1:1f:87:29:34:2f:97:83:
         2e:76:00:16:e9:4b:b2:6d:29:3d:9c:02:bc:b7:1d:9c:a0:a0:
         15:2d:d9:08
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUNMgmJUyJS45q8IYKaJhx/UQlJL8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYWNhMDUzMDhhYzc5ZDVhNjJiNDk3ZDZiODgzZjlmNTlm
YjIyZDE0NTgzZjAwYmU1NzUwHhcNMjUxMDEwMTIyMTM3WhcNMjYxMDA5MTIyNjM3
WjAzMTEwLwYDVQQDEyg1RkZDQTRGMTJDNjAzNTE0OUE4RjE2MUUxQjBCOTExMEI0
NDc4MkQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Zi0TSBRb3ow
S2N5dPdpc6suhZgpw5S4R0FFqwC2fFtqc7qv+UM4aOMhgdDBgZRtVHha/fG/A3jM
0EHee0a7rpXvKjLiDArJwiMRZ1gNBU40LLa6F/hRLATPSMwiGkbYl6lItm+3Jx/n
f4esfFDXC8QZnZJJFxOTgnPtO2IAFBqSZNorctlREf3ty3mnOqhPXZgdOR8C6SqK
A3N4T4wDzvyFtHfyozoF/bXGuLlxyNRi754O+fJb7SjC/kX0p33xVWGl5rruK+hG
W98BHFZXUk2exMc0jXVXw5SX2QZo8EBxtw7f3aO9FDpd8IRMaEz2/n6VQygVRTq2
TqyTVcKwkQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFF/8pPEsYDUUmo8WHhsLkRC0
R4LXMB8GA1UdIwQYMBaAFDztMShrzARl+N5jCkUiBfz9KP8GMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOTJlZTRkODQwMTkzZjQyOGVhOWI3MjY3LzAv
M0NFRDMxMjg2QkNDMDQ2NUY4REU2MzBBNDUyMjA1RkNGRDI4RkYwNi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZDlkMTU3MmYtNmNiYi00Y2Y3LWI1OTktZTlkMGU5
ODFkOWJmL2M1NzYxMzVkLTdhN2ItNDc4MS1hY2IyLTIxYTBkMzNlYjFkMS9hY2Ew
NTMwOGFjNzlkNWE2MmI0OTdkNmI4ODNmOWY1OWZiMjJkMTQ1ODNmMDBiZTU3NS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjkyZWU0ZDg0MDE5M2Y0
MjhlYTliNzI2Ny8wLzMxMzkzOTJlMzIzMzMxMmUzNjM4MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzNDMyMzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMfnRDANBgkqhkiG9w0BAQsF
AAOCAQEAYbWdGqL4IQtx3BdybozvQfare5gPpqZIPXx+Po81qgRZbHu6oP7fE9Uq
TRjyghRTThy8NzYb0W0juOBDN0NTuPmODa19bha15LiouPdD0IMO5pHfdcWZ3MQJ
5y4OFv+a+DXIAud9IoSRhtQk1PjAjr0Ap8N+KAzNuBNsZydZ+bkaYlC9XWkG9ysr
qDwca9Sn0GGKK+oi8mhz4R7YhH+XJGNdAjWDj1Bp/4Ah3IAwb7OWIZ6I/Sp6KgG4
+9c9LoxJ6RNXvgSO6BbiQ85bKfdnOxalDaKBxhcZaW1Y2+jvMV7nJuEfhyk0L5eD
LnYAFulLsm0pPZwCvLcdnKCgFS3ZCA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:30:06 2025 by rpki-client