Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e20343030353336.roa
File:                     3137322e38322e39302e302f32342d3234203d3e20343030353336.roa (raw, json)
Hash identifier:          HMXUwviDuGRrvzacV5IiSwHgdqrHwCsJgtkQaGHfSFQ=
Subject key identifier:   A0:6F:60:3D:F5:79:A9:22:12:81:43:DD:00:A9:28:84:F4:45:96:90
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       16FAF2E8BAFCA5EE721373D94CACA35BEADBF6AA
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e20343030353336.roa
Signing time:             Mon 02 Jun 2025 16:15:13 +0000
ROA not before:           Mon 02 Jun 2025 16:10:13 +0000
ROA not after:            Mon 01 Jun 2026 16:15:13 +0000
asID:                     400536
IP address blocks:        172.82.90.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 09:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:fa:f2:e8:ba:fc:a5:ee:72:13:73:d9:4c:ac:a3:5b:ea:db:f6:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jun  2 16:10:13 2025 GMT
            Not After : Jun  1 16:15:13 2026 GMT
        Subject: CN=A06F603DF579A922128143DD00A92884F4459690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:c6:90:2a:84:fd:c5:2d:ef:2c:91:29:50:
                    0a:9c:0e:ed:5c:d9:45:8b:3e:94:9a:51:92:8f:8e:
                    95:7f:b8:6c:a2:b8:1e:7b:58:98:ce:b1:05:09:60:
                    2d:69:b1:ea:ff:7e:35:ed:dd:6a:8b:20:9a:a7:3d:
                    1e:79:1f:b8:a2:5b:c5:c2:ab:3c:20:e2:e4:b3:38:
                    80:ee:c7:13:bb:54:66:25:60:0f:39:44:9a:5c:71:
                    dc:1c:a8:be:14:d1:c7:15:ab:7d:92:25:17:ed:72:
                    7c:dc:5d:ea:91:49:9e:f3:2c:dc:7e:d6:7e:31:67:
                    44:d5:08:02:28:0e:d7:88:f8:78:f9:f1:a2:54:08:
                    30:84:04:02:21:f0:12:35:95:71:96:82:18:1d:95:
                    38:bc:2a:24:2d:68:1a:29:47:12:ef:07:54:82:65:
                    b7:18:4a:6a:f7:f0:97:1b:ed:81:89:33:ef:55:f4:
                    10:48:9f:7e:8a:89:8e:b3:79:9f:21:ea:fe:e0:f1:
                    34:67:0f:e1:62:12:ad:cd:c0:9b:0a:98:e7:33:26:
                    49:42:43:b0:ff:03:72:28:3b:97:b3:e2:6e:c5:00:
                    9f:fb:5c:e1:cf:54:65:80:95:67:88:e6:7a:f3:77:
                    90:42:96:4e:1e:7a:77:fa:1b:ba:c7:0b:46:37:e8:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:6F:60:3D:F5:79:A9:22:12:81:43:DD:00:A9:28:84:F4:45:96:90
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e39302e302f32342d3234203d3e20343030353336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:0a:4a:b0:c6:5c:8d:2c:78:7b:aa:d6:5f:94:c4:15:55:b1:
         44:73:a4:88:1f:ea:46:b3:df:74:04:4b:de:6a:5f:e8:12:4d:
         37:3a:6e:1c:44:d1:a6:10:32:65:34:74:54:bc:d3:96:dc:a9:
         c2:c8:7f:a4:ae:e9:25:b2:27:fe:f0:e4:93:70:7d:c8:a4:08:
         d3:86:f0:31:3a:78:0f:2f:ea:ba:a6:e2:b8:fa:17:84:d4:73:
         3b:1c:d9:cb:d8:aa:2a:57:79:c9:37:a8:2e:d8:a0:f0:35:11:
         16:29:c3:b1:9e:72:6c:82:4a:72:d2:bb:7a:cd:b6:a5:19:57:
         e5:aa:a9:ce:a7:e3:47:7d:11:a7:4b:ab:49:5c:46:06:a2:5b:
         92:66:d6:bc:4f:7c:40:8f:2b:07:ee:84:28:c2:0c:61:c9:dd:
         ae:f2:93:42:6b:85:b3:55:0d:ec:bb:21:fd:70:09:ae:85:42:
         88:e2:b4:cb:bc:29:ae:30:bf:2a:37:c4:dc:40:bb:e7:c2:fe:
         3d:50:11:46:64:0c:92:d1:d9:4c:e1:d7:50:a6:44:2e:4c:b5:
         82:b7:15:93:c4:df:5e:37:e0:94:11:05:51:2b:eb:37:70:32:
         79:ec:55:a0:73:3c:c2:fb:4d:a7:29:eb:fa:2a:a3:ec:a7:e6:
         2f:f0:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 01:15:41 2025 by rpki-client