Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/3230362e3235312e35362e302f32322d3234203d3e203236353631.roa
File:                     3230362e3235312e35362e302f32322d3234203d3e203236353631.roa (raw, json)
Hash identifier:          117Pp5gIs3/yjsJJqH9D6G5RPZ++Fr3YjU2UsNf3kVU=
Subject key identifier:   78:5A:34:1A:85:51:C2:28:1D:05:35:08:6C:F1:35:A2:72:27:E9:E5
Certificate issuer:       /CN=d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a
Certificate serial:       3ADED03061518A6C2BB660A7398DDD24752464CA
Authority key identifier: B5:15:69:E8:20:07:DB:3B:9C:33:08:13:72:00:D2:4E:7F:00:68:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/3230362e3235312e35362e302f32322d3234203d3e203236353631.roa
Signing time:             Wed 08 Oct 2025 20:40:48 +0000
ROA not before:           Wed 08 Oct 2025 20:35:48 +0000
ROA not after:            Wed 07 Oct 2026 20:40:48 +0000
asID:                     26561
IP address blocks:        206.251.56.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/B51569E82007DB3B9C3308137200D24E7F006802.crl
                          rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/B51569E82007DB3B9C3308137200D24E7F006802.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/0ec17157-66de-4aab-85e7-28af4de430e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:de:d0:30:61:51:8a:6c:2b:b6:60:a7:39:8d:dd:24:75:24:64:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a
        Validity
            Not Before: Oct  8 20:35:48 2025 GMT
            Not After : Oct  7 20:40:48 2026 GMT
        Subject: CN=785A341A8551C2281D0535086CF135A27227E9E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f4:c0:8f:fc:f0:48:75:76:24:68:38:39:b2:
                    1d:ae:45:48:93:82:57:b0:51:13:9d:5d:7a:2c:ad:
                    0e:48:3c:36:c4:63:c3:b7:ee:0e:b4:82:2d:a6:ce:
                    eb:0c:75:71:df:f4:71:93:90:51:d4:49:55:74:46:
                    57:f1:19:52:5a:4f:31:13:78:32:dd:68:d5:e9:6f:
                    66:bc:8d:0e:a9:b8:2b:0e:37:88:10:78:54:4e:02:
                    af:1c:a8:bd:58:f3:ec:4f:55:58:2f:35:d1:12:20:
                    d8:db:59:34:d8:aa:97:d2:28:82:b1:02:b9:8d:30:
                    13:f1:bc:0b:27:31:91:51:f0:f3:68:21:e6:51:f9:
                    af:2b:0c:94:3d:c0:0b:8c:a3:bd:5a:6d:f6:76:14:
                    27:69:19:83:9c:a4:82:13:c1:a2:cd:4e:04:dc:1e:
                    1b:01:91:eb:7d:08:5e:4f:6e:1d:fb:6f:88:3f:80:
                    f7:70:1c:f1:12:96:e8:01:c0:5f:5a:58:a8:74:a0:
                    e5:35:25:b7:16:7e:c1:e8:4b:29:d0:bc:e7:97:ee:
                    af:15:33:dc:89:d4:1b:b8:43:77:a0:d3:fd:77:63:
                    d1:7e:b8:9d:57:e5:de:23:9e:c8:e3:0b:92:e3:d8:
                    91:4a:dd:c1:29:35:87:bc:0e:48:05:32:8e:3a:07:
                    cd:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:5A:34:1A:85:51:C2:28:1D:05:35:08:6C:F1:35:A2:72:27:E9:E5
            X509v3 Authority Key Identifier:
                keyid:B5:15:69:E8:20:07:DB:3B:9C:33:08:13:72:00:D2:4E:7F:00:68:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/B51569E82007DB3B9C3308137200D24E7F006802.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ec17157-66de-4aab-85e7-28af4de430e2/d90d8aba2a27e84909166f2fad7e505dc4bb5ef35aee2dd44a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/456f4b25d3d64a2083eaf332dcac4fae/0/3230362e3235312e35362e302f32322d3234203d3e203236353631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.251.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:8a:03:6a:f3:4c:29:5f:b7:b3:8f:9b:37:63:c3:57:6c:83:
         f0:14:53:72:24:e3:f7:d7:84:94:fe:cc:63:f6:46:28:0b:1b:
         ff:96:50:3b:d8:f5:59:01:c1:de:b8:6a:82:87:0c:1a:36:1a:
         bb:11:05:cd:64:da:12:4a:e2:a7:c1:37:90:e7:c6:41:67:e9:
         b7:d3:df:fc:65:95:ac:55:3a:eb:b8:a1:04:d6:0f:33:9c:8e:
         02:8c:2a:2f:8f:d6:02:7a:2a:56:b5:ce:17:ef:48:ea:ca:e1:
         52:1d:35:ae:80:ce:ab:66:a7:04:72:6a:29:b5:c6:83:2f:1d:
         c5:c7:ac:73:d0:fe:dc:59:99:34:f2:21:62:eb:61:80:bc:d8:
         e1:78:d7:0d:fe:01:e3:2a:f0:40:0a:3e:cf:fd:c9:69:c6:c6:
         36:f8:6f:c3:6b:f2:59:a9:89:e0:b2:b6:a6:ae:6c:0b:b5:9b:
         bc:29:5a:3f:9a:72:6d:ca:38:f0:c4:b3:42:1e:50:9a:b6:29:
         cd:bd:b6:9d:47:60:64:12:b0:75:39:16:63:dc:2e:50:04:b0:
         db:99:e1:98:a7:6e:db:96:63:a6:04:f6:cd:af:c4:8b:24:28:
         28:68:cd:cc:08:c9:06:14:e8:62:19:31:d3:f3:2e:51:95:98:
         76:24:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:55:57 2025 by rpki-client