Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203632353533.roa
File:                     3137322e38322e38382e302f32342d3234203d3e203632353533.roa (raw, json)
Hash identifier:          UBLoViXsG6cF0/1aqJZNfiSMjhdYYYYdAXc22WhrzGk=
Subject key identifier:   7E:88:97:C0:9E:4D:0C:21:E3:90:FA:62:C2:43:71:A8:F9:84:D9:EE
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       4433FED94E7CC7EB0393F2972F0334CA15793E81
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203632353533.roa
Signing time:             Sun 05 Oct 2025 10:05:59 +0000
ROA not before:           Sun 05 Oct 2025 10:00:59 +0000
ROA not after:            Sun 04 Oct 2026 10:05:59 +0000
asID:                     62553
IP address blocks:        172.82.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:23:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:33:fe:d9:4e:7c:c7:eb:03:93:f2:97:2f:03:34:ca:15:79:3e:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Oct  5 10:00:59 2025 GMT
            Not After : Oct  4 10:05:59 2026 GMT
        Subject: CN=7E8897C09E4D0C21E390FA62C24371A8F984D9EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:63:36:aa:70:d2:1e:7d:09:1d:97:55:c8:34:
                    c6:3a:48:46:56:4e:37:41:3e:62:eb:37:0c:68:d4:
                    4b:b6:22:d8:94:7b:ee:b3:a0:54:50:b4:7e:3c:b7:
                    68:cb:12:31:51:5f:e0:1e:11:fc:d1:54:59:b1:21:
                    b5:34:f1:a1:2e:93:06:cd:a0:1a:7d:4e:20:21:f1:
                    14:3a:24:f1:7e:9c:19:65:9d:11:2b:b0:54:73:ab:
                    16:c7:ff:b5:8f:3d:45:27:93:df:e6:a8:37:ef:ad:
                    88:de:01:8b:1c:c1:42:d9:27:7d:e7:22:5b:fe:80:
                    d8:2a:5d:6b:54:2e:71:2d:0a:f2:77:41:43:92:5b:
                    33:36:dc:fd:45:b1:40:4b:9c:32:58:60:bf:f5:5f:
                    6b:17:03:17:81:46:c6:c7:5b:b6:e9:52:ce:68:da:
                    46:2e:99:53:f8:3b:36:39:3d:9b:c3:78:c5:df:7f:
                    f7:fa:ec:63:2b:7e:c2:01:08:4f:57:f0:e9:e9:44:
                    c1:3d:db:60:9b:79:70:dc:6d:05:61:8b:d5:0d:f8:
                    33:d3:73:b4:19:9a:f3:11:70:55:f2:7f:5f:46:59:
                    8b:af:15:00:47:c0:73:f7:f1:a1:0d:a1:48:44:a0:
                    a6:9a:d3:2d:09:97:a7:0f:f9:ae:f4:b8:47:65:48:
                    dc:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:88:97:C0:9E:4D:0C:21:E3:90:FA:62:C2:43:71:A8:F9:84:D9:EE
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203632353533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:43:cf:40:b3:1d:b2:4b:2e:47:6c:7b:7a:f6:b8:cb:89:c6:
         3e:8f:9d:8f:d3:71:65:3a:d8:cf:db:f7:ae:41:21:de:20:d9:
         77:e8:38:0c:f3:7c:ba:e7:3e:aa:00:f5:da:4e:81:bc:72:9c:
         82:6c:d6:22:8e:70:7b:11:f7:c5:6c:94:3e:b2:71:6b:1d:a1:
         11:68:e8:c9:b9:fc:3a:f2:3b:6e:20:0c:af:eb:34:a8:cf:d5:
         0b:48:1c:46:5e:09:07:f8:11:39:77:3d:66:40:4f:d4:3c:2b:
         1b:f5:1c:1c:6f:65:e3:5e:d2:4b:1e:45:41:56:26:3e:f3:10:
         b5:20:82:30:78:3d:bf:61:bd:bd:39:28:ac:6a:82:3e:5a:36:
         93:5c:64:be:8f:c1:15:bd:fc:2f:8b:f4:55:6b:71:4b:3e:ff:
         5a:a7:c0:b1:63:ba:99:91:67:5f:6d:84:d5:ff:1e:22:dd:b6:
         a3:18:b0:9a:97:cb:b7:6b:61:bf:fe:da:21:c3:fc:cf:a4:36:
         81:85:6d:a6:98:aa:5a:4c:96:bb:94:53:1a:d6:e8:33:b3:39:
         f4:c9:e7:d1:c9:47:49:80:0c:62:5c:df:50:65:4f:72:3f:c6:
         67:2a:fb:99:c3:84:e7:92:61:b0:6b:f7:7f:bb:40:18:9c:c4:
         b9:7b:d8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:06:14 2025 by rpki-client