Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e203535323835.roa
File:                     3137322e38322e38392e302f32342d3234203d3e203535323835.roa (raw, json)
Hash identifier:          f19MCnpMZfLD3ScebS+fW9/BQvpp+B188x2vFOLBZ7M=
Subject key identifier:   FB:4B:6C:90:E0:66:02:CE:09:B1:CB:13:AE:E7:D1:7E:67:E2:45:F4
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       024A4C269ECEE50458376DC4251C7553E6A79B86
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e203535323835.roa
Signing time:             Fri 09 May 2025 18:37:15 +0000
ROA not before:           Fri 09 May 2025 18:32:15 +0000
ROA not after:            Fri 08 May 2026 18:37:15 +0000
asID:                     55285
IP address blocks:        172.82.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 21:08:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4a:4c:26:9e:ce:e5:04:58:37:6d:c4:25:1c:75:53:e6:a7:9b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: May  9 18:32:15 2025 GMT
            Not After : May  8 18:37:15 2026 GMT
        Subject: CN=FB4B6C90E06602CE09B1CB13AEE7D17E67E245F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d8:f7:09:01:9f:ab:06:e6:51:2e:e3:66:6d:
                    e6:1e:0c:67:ff:ea:d9:56:10:3a:0e:d3:dc:5a:77:
                    b4:d1:c3:7c:f3:6a:5d:73:9e:e9:0f:3e:51:4b:ee:
                    5f:47:9f:42:be:9c:93:1f:71:14:f6:0e:3a:5b:35:
                    a9:59:46:81:cc:03:ac:1e:44:0d:82:3f:b8:31:0a:
                    4b:5d:46:63:e6:d7:45:78:83:24:07:ad:96:53:b3:
                    ac:5a:9b:a1:95:72:ec:99:a5:49:6d:37:2e:c8:ad:
                    50:27:3e:46:31:bc:65:17:bb:73:12:ee:3d:38:10:
                    bd:18:ab:a9:90:b5:9d:bf:ce:fc:3f:7b:fe:93:74:
                    ff:3c:70:8d:11:13:64:49:a4:92:56:cc:91:36:10:
                    11:97:12:dc:cb:c7:84:d5:92:c5:a4:ab:b2:02:59:
                    80:15:25:78:4c:23:c2:97:ce:8b:6b:00:83:15:94:
                    94:6a:dc:61:e2:75:98:dc:f2:23:00:c5:95:d5:7b:
                    aa:36:35:ee:01:f9:47:07:94:a8:43:e9:f6:60:6e:
                    68:b7:40:ac:37:d2:ee:6b:d2:ec:74:ab:09:16:d0:
                    d1:9a:78:89:0e:1b:71:df:aa:35:f2:80:4a:4d:40:
                    eb:2e:6c:ec:5d:62:e6:5a:1b:21:a5:04:08:51:20:
                    fa:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:4B:6C:90:E0:66:02:CE:09:B1:CB:13:AE:E7:D1:7E:67:E2:45:F4
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38392e302f32342d3234203d3e203535323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:85:a9:8c:e0:dc:e5:db:0c:c8:5f:0c:76:1e:13:de:bb:09:
         67:d5:19:7e:32:75:32:ad:56:e4:7e:ed:02:ad:c2:75:e3:67:
         29:8e:7a:51:1d:c1:17:c5:ed:11:9e:8c:54:28:35:8a:ca:f3:
         82:cc:6f:70:f3:cb:50:e0:37:49:2b:05:00:42:e0:5b:44:d7:
         5e:fc:e4:97:09:22:36:34:a2:69:c8:c5:f6:2c:15:da:18:dd:
         f7:b9:39:61:72:97:38:ef:62:75:9e:3d:d3:8a:bf:ee:5b:c0:
         75:a1:41:6c:4c:ef:af:f7:bc:f2:1d:51:94:ae:c3:df:66:a7:
         63:59:c3:52:ae:a9:c5:1a:2d:74:17:64:9f:31:f5:18:ff:e4:
         eb:c9:29:1a:0e:7b:27:b8:d8:73:41:ca:05:51:d1:6f:c4:63:
         9c:cf:2e:b3:47:79:c7:4a:c6:7d:c0:f7:d9:ee:ed:82:96:51:
         25:e2:47:e2:4d:54:ff:2f:8a:0f:ea:45:ce:7b:88:93:25:81:
         a2:ab:8f:bc:61:19:42:0e:b1:61:c3:92:ca:71:f8:90:ff:cd:
         f8:e1:d1:6b:b0:a8:bd:80:8a:e6:b0:ef:56:c7:f3:79:fd:83:
         5f:21:76:48:71:30:75:ad:f3:49:51:c6:00:d3:b7:f9:2a:a1:
         d2:68:f4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 03:41:38 2025 by rpki-client