Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/9/32332e3134392e3234382e302f32342d3234203d3e2037323537.roa
File:                     32332e3134392e3234382e302f32342d3234203d3e2037323537.roa (raw, json)
Hash identifier:          EbpO7pVL1iIW09O4k8mzjbHHTaOKGwU2hR7yYlYWKIU=
Subject key identifier:   87:6A:05:FA:D5:33:D2:E3:97:B4:A5:6C:DB:F0:03:D3:0B:6F:6A:4B
Certificate issuer:       /CN=a3d7c4566ae4481347c0711d91f5ad8cbe66951ef5b91509f6
Certificate serial:       1D034AFC74889677F4DFEF5B5163A7AE90CC4E70
Authority key identifier: 7B:96:A0:B1:0C:32:47:61:62:1C:63:C5:B3:19:86:F0:72:17:EC:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ae4481347c0711d91f5ad8cbe66951ef5b91509f6.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/9/32332e3134392e3234382e302f32342d3234203d3e2037323537.roa
Signing time:             Mon 16 Jun 2025 21:40:12 +0000
ROA not before:           Mon 16 Jun 2025 21:35:12 +0000
ROA not after:            Mon 15 Jun 2026 21:40:12 +0000
asID:                     7257
IP address blocks:        23.149.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/9/7B96A0B10C324761621C63C5B31986F07217ECD8.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/9/7B96A0B10C324761621C63C5B31986F07217ECD8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ae4481347c0711d91f5ad8cbe66951ef5b91509f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:54:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:03:4a:fc:74:88:96:77:f4:df:ef:5b:51:63:a7:ae:90:cc:4e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3d7c4566ae4481347c0711d91f5ad8cbe66951ef5b91509f6
        Validity
            Not Before: Jun 16 21:35:12 2025 GMT
            Not After : Jun 15 21:40:12 2026 GMT
        Subject: CN=876A05FAD533D2E397B4A56CDBF003D30B6F6A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c3:7e:92:75:00:09:77:06:17:cf:b6:ce:05:
                    ac:e4:2d:33:aa:9a:3a:db:80:d8:e1:23:3d:42:34:
                    a8:f7:b5:73:68:1a:b0:93:9e:71:3e:f9:91:bb:5a:
                    9a:26:5e:8f:2d:88:6f:42:6d:96:3b:ba:b4:57:86:
                    aa:1f:c6:e6:06:2c:7f:30:70:43:e3:e8:bd:26:18:
                    41:71:2d:f1:99:ee:04:76:39:e1:3f:b4:33:a6:89:
                    7d:48:24:39:e5:a8:60:72:f4:ac:48:dd:e2:48:49:
                    c1:da:0a:c8:e2:7d:69:85:f9:3a:ba:7b:dc:74:7f:
                    8f:05:ed:f2:19:4a:1f:b5:3a:30:c7:42:b4:4e:eb:
                    f9:43:34:c2:0e:b9:d1:62:e1:42:6b:18:41:64:ed:
                    2c:66:33:dd:24:4c:b5:f5:1d:4b:7e:2c:98:f5:c3:
                    be:73:18:9b:d1:d0:e4:ff:79:8a:3e:ec:e1:2f:4e:
                    8b:fa:2e:a3:48:ed:f4:ca:8d:de:07:2e:ed:fd:78:
                    14:6c:54:3f:3a:17:f7:e1:f6:78:99:e1:95:cf:c1:
                    f0:df:d1:e5:87:e1:8f:05:bc:b4:a9:9e:ab:bd:5b:
                    30:a0:95:1d:7e:5e:54:96:04:d6:57:61:19:e0:75:
                    21:12:48:49:73:01:30:89:c7:09:9a:0f:cf:53:41:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:6A:05:FA:D5:33:D2:E3:97:B4:A5:6C:DB:F0:03:D3:0B:6F:6A:4B
            X509v3 Authority Key Identifier:
                keyid:7B:96:A0:B1:0C:32:47:61:62:1C:63:C5:B3:19:86:F0:72:17:EC:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/9/7B96A0B10C324761621C63C5B31986F07217ECD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d8ea1081-bccb-41d5-b0fe-1b9724cced3f/a3d7c4566ae4481347c0711d91f5ad8cbe66951ef5b91509f6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/9/32332e3134392e3234382e302f32342d3234203d3e2037323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.149.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:61:ff:8f:f8:d8:6e:95:5f:6d:7a:ee:cc:a5:df:4b:7a:7b:
         68:1d:cb:d7:59:86:45:1c:92:23:1b:53:cd:7b:46:62:ea:e2:
         33:1d:74:24:af:b5:c9:fd:61:da:44:c1:c7:f5:71:c9:00:69:
         40:17:96:41:e5:09:66:1d:84:0c:ef:5a:3f:ba:9a:01:60:d5:
         f2:2e:fa:6d:3d:06:ad:d2:54:35:32:e0:a9:5d:f9:79:31:55:
         fa:e8:82:da:55:6c:6a:80:ac:d8:ee:78:7d:94:81:71:3e:c6:
         17:fb:6a:0c:e3:b8:70:21:d6:cc:4c:53:44:85:22:c7:49:58:
         6c:e6:9f:8b:01:58:fe:50:a1:94:59:66:15:66:f6:1a:00:69:
         2f:66:29:5a:d6:0c:fc:2b:e0:66:83:00:3e:26:e2:bd:af:0c:
         97:66:d9:a1:28:cb:3b:db:f9:74:6f:a3:6f:71:34:f4:11:9e:
         95:6a:ca:43:76:9e:f9:a0:98:bd:f4:fc:b0:4c:18:bf:ad:19:
         98:aa:15:8d:6a:43:e9:e2:e8:72:35:73:5e:b3:65:4c:43:08:
         1c:84:c8:2d:83:8d:c3:f6:6f:92:09:4c:3d:c0:04:b4:f6:f8:
         9d:81:0e:bd:33:4a:a4:54:18:de:7b:12:29:32:5e:9d:74:b8:
         dc:0a:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 03:30:03 2025 by rpki-client