Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e32382e302f32332d3234203d3e2037323537.roa
File:                     3231362e3134362e32382e302f32332d3234203d3e2037323537.roa (raw, json)
Hash identifier:          1MCbCWYRl40TqhC0UCj+ZJQ8lkNlY9J6w9yGZhOQJNA=
Subject key identifier:   A1:9A:A8:17:57:0C:F8:34:AF:33:0D:E6:73:8C:FB:CD:C7:E4:3B:C6
Certificate issuer:       /CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
Certificate serial:       7EB387623FF252EA146FFA395CE95E9BB7FAF265
Authority key identifier: 26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e32382e302f32332d3234203d3e2037323537.roa
Signing time:             Wed 18 Jun 2025 04:35:58 +0000
ROA not before:           Wed 18 Jun 2025 04:30:58 +0000
ROA not after:            Wed 17 Jun 2026 04:35:58 +0000
asID:                     7257
IP address blocks:        216.146.28.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 14:04:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:b3:87:62:3f:f2:52:ea:14:6f:fa:39:5c:e9:5e:9b:b7:fa:f2:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
        Validity
            Not Before: Jun 18 04:30:58 2025 GMT
            Not After : Jun 17 04:35:58 2026 GMT
        Subject: CN=A19AA817570CF834AF330DE6738CFBCDC7E43BC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ea:26:a2:99:19:09:fc:dd:54:f8:2a:4a:17:
                    cb:96:e6:a6:cd:26:6e:e8:e3:bd:72:11:a3:e5:46:
                    1f:68:71:04:f8:98:e6:f6:5f:b3:0d:98:b7:2f:a9:
                    29:68:a0:be:45:b9:1a:59:b7:8a:02:7c:1c:e8:8c:
                    b7:6c:4f:d6:75:c1:be:a9:ff:a3:a5:5e:88:df:a0:
                    c0:81:20:cc:2a:44:04:c0:d3:e6:66:b4:6d:cb:09:
                    d8:f1:9d:29:3c:51:24:d8:9d:15:e6:ea:00:87:a4:
                    cb:e5:e4:00:93:5a:c4:75:11:4e:ec:6e:0b:07:77:
                    14:72:a0:9d:f6:8c:5b:fb:7d:62:b3:79:27:3d:c8:
                    81:44:09:ab:c7:8c:e8:00:53:88:f8:b4:da:20:35:
                    e2:f4:bf:77:b2:4f:a5:b0:0d:c8:ca:44:62:9c:d3:
                    a1:dc:34:45:96:1c:09:62:12:fa:e7:28:f6:71:66:
                    ab:33:0f:8a:98:ca:6c:25:ce:0f:cd:cb:00:3a:cf:
                    ba:c9:9c:01:c2:1d:1f:df:43:9b:3c:45:ae:7e:43:
                    c9:d2:aa:9c:1c:d7:77:e5:ec:0b:f1:92:a7:35:31:
                    b1:b3:c6:43:43:52:77:3d:0a:68:81:2f:47:ad:44:
                    ce:3f:64:f8:ed:49:83:44:88:f4:f9:ae:1a:2c:a9:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9A:A8:17:57:0C:F8:34:AF:33:0D:E6:73:8C:FB:CD:C7:E4:3B:C6
            X509v3 Authority Key Identifier:
                keyid:26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e32382e302f32332d3234203d3e2037323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.28.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:9f:96:52:61:bc:7a:8a:69:15:de:67:45:af:0c:a3:8a:30:
         c8:8e:79:eb:d8:26:4b:d1:68:38:ec:10:76:36:66:02:a7:54:
         4b:7a:7b:65:90:58:46:15:06:1e:02:2e:b2:8a:48:eb:59:a1:
         f7:0e:0d:49:15:63:d7:0e:1f:b7:2c:fe:5f:f6:8f:2a:fa:ea:
         a4:42:ed:50:d6:10:a2:2e:fa:7f:9e:fc:3c:82:3f:19:f7:2c:
         d0:e0:f8:fe:11:76:5b:f3:d4:fd:90:7e:48:39:6b:bd:1a:c5:
         30:8e:55:00:fe:f4:50:6f:93:9b:1a:93:7b:20:78:58:06:d5:
         d3:d1:0e:c4:e3:2c:a5:10:87:2d:c1:9c:08:c8:5c:5d:e4:30:
         04:19:d6:07:fc:20:4b:78:4f:dc:9a:c5:17:8d:5b:12:88:0b:
         4d:f7:1d:92:7f:19:94:0a:59:42:a6:2b:c9:38:74:98:63:3d:
         b1:5a:24:2e:aa:14:c3:32:49:27:f6:9b:6c:0a:b0:0f:4a:e4:
         e0:15:ae:4e:95:22:5f:8d:86:79:ed:28:43:94:d0:00:2d:a3:
         45:64:3a:00:c1:30:e8:6a:fe:7c:a3:80:e3:e9:fe:4a:2b:2c:
         d4:0f:70:3b:7d:7f:60:5d:ce:e1:89:44:7a:8a:45:72:7e:a1:
         78:bd:40:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:21:08 2025 by rpki-client