Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e33302e302f32342d3234203d3e20313532383733.roa
File:                     3231362e3134362e33302e302f32342d3234203d3e20313532383733.roa (raw, json)
Hash identifier:          gkr5sOEAQROOMBPx8GRXip+F/gWA2AdnmHS1L10tdY4=
Subject key identifier:   19:33:0A:43:D7:0F:DD:5D:5C:F0:09:F5:29:63:D6:3A:52:6A:74:29
Certificate issuer:       /CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
Certificate serial:       071D6CE2EE2162D89EBA15FD3CC4B7D8CD439593
Authority key identifier: 26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e33302e302f32342d3234203d3e20313532383733.roa
Signing time:             Wed 15 Oct 2025 22:10:37 +0000
ROA not before:           Wed 15 Oct 2025 22:05:37 +0000
ROA not after:            Wed 14 Oct 2026 22:10:37 +0000
asID:                     152873
IP address blocks:        216.146.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 13:52:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:1d:6c:e2:ee:21:62:d8:9e:ba:15:fd:3c:c4:b7:d8:cd:43:95:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
        Validity
            Not Before: Oct 15 22:05:37 2025 GMT
            Not After : Oct 14 22:10:37 2026 GMT
        Subject: CN=19330A43D70FDD5D5CF009F52963D63A526A7429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4d:28:2e:45:8f:33:02:33:c8:70:60:17:01:
                    6a:c9:71:0d:59:58:03:5b:87:80:a0:bf:c0:ed:60:
                    6e:d5:37:eb:8e:4d:e5:a9:11:05:6a:17:9c:4e:b9:
                    62:80:25:f2:6b:5d:8a:16:b7:d4:32:b3:7c:f9:f3:
                    b3:d6:2f:e0:ed:3e:25:da:0a:ef:3e:01:b3:03:4d:
                    3a:c3:aa:a8:c6:cb:36:3c:87:05:9f:20:b8:6b:fe:
                    db:32:bc:b6:ca:c3:87:c7:e1:1e:96:b7:e8:41:54:
                    78:8a:cf:d8:9c:f8:74:a4:ce:89:a4:49:f0:3e:13:
                    dd:a3:a2:a1:8b:0e:5f:4b:85:8c:be:aa:6a:66:d4:
                    48:16:72:f0:c5:73:a5:cc:5c:06:b2:c1:0a:10:f4:
                    1b:39:fe:ff:b5:b8:3c:d4:c0:ba:79:35:08:3d:1c:
                    78:47:76:6c:2c:6b:e2:08:5c:18:b1:88:2b:57:ea:
                    b2:42:01:3b:d1:6f:c3:a6:2d:14:6c:a6:9c:4d:f3:
                    91:73:0a:da:23:c2:8f:10:86:44:e5:dd:ef:66:98:
                    d2:0a:a4:8d:6f:c2:11:ba:ef:58:06:69:cc:c5:f7:
                    aa:1b:0f:8f:2e:41:40:1f:7f:ac:3a:49:ad:5a:0a:
                    ec:31:2f:32:b2:e4:41:b5:27:cf:3c:56:f8:d0:86:
                    f3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:33:0A:43:D7:0F:DD:5D:5C:F0:09:F5:29:63:D6:3A:52:6A:74:29
            X509v3 Authority Key Identifier:
                keyid:26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e33302e302f32342d3234203d3e20313532383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:57:9c:27:82:c2:1d:5c:07:79:02:83:78:02:28:2d:e2:69:
         82:94:b3:db:d6:b9:8a:3e:e4:5c:33:0a:4e:f6:b6:ad:9f:b6:
         28:69:e3:66:a9:6e:9b:72:6c:21:97:ac:c4:72:56:96:cb:67:
         cd:20:82:c2:02:e9:5e:f7:dc:9a:20:db:ae:6e:dc:6b:a5:16:
         09:e4:7e:b9:d2:a5:21:8d:46:61:bf:4e:42:4f:fb:69:9b:83:
         db:66:c1:2c:6d:ca:89:94:ca:f6:12:6e:d2:8f:8d:52:1b:93:
         a6:cd:8e:4c:b7:32:fd:62:96:3a:49:8d:7d:86:65:14:c0:8b:
         3e:cf:78:e1:d4:1b:a3:fe:f2:6b:5a:81:c6:ab:b7:2f:4c:f0:
         57:fe:c4:49:d2:60:3d:f3:41:32:b1:1e:29:44:40:db:69:3e:
         84:ad:12:9d:a4:ba:a8:04:eb:3b:61:f3:82:2c:1e:6e:fa:b1:
         31:d3:ef:d6:97:07:7b:6a:76:58:7d:f9:42:86:e2:fa:af:bd:
         e1:6a:b7:52:2f:cc:21:b2:98:32:33:77:58:56:be:75:c8:bb:
         01:9f:26:b6:1a:dd:8d:78:23:2a:f3:52:e5:c2:65:7b:a2:4f:
         c9:65:1e:7a:d2:e9:db:c2:06:44:67:02:55:15:ac:52:7a:bc:
         e5:85:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 18:32:11 2025 by rpki-client