Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32322d3232203d3e203333343930.roa
File:                     3231362e3132322e3132302e302f32322d3232203d3e203333343930.roa (raw, json)
Hash identifier:          PaqtekYKcxm4S7raCcAHywdu0WEbuB3F01BvwnJMhu0=
Subject key identifier:   67:FE:8C:4C:22:FE:AB:E6:43:43:31:68:A4:B6:34:2C:C0:0E:05:3F
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       239BBB7EF0B951E551E55EDC9883A42463E04B2A
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32322d3232203d3e203333343930.roa
Signing time:             Tue 24 Jun 2025 15:29:44 +0000
ROA not before:           Tue 24 Jun 2025 15:24:44 +0000
ROA not after:            Tue 23 Jun 2026 15:29:44 +0000
asID:                     33490
IP address blocks:        216.122.120.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:9b:bb:7e:f0:b9:51:e5:51:e5:5e:dc:98:83:a4:24:63:e0:4b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun 24 15:24:44 2025 GMT
            Not After : Jun 23 15:29:44 2026 GMT
        Subject: CN=67FE8C4C22FEABE643433168A4B6342CC00E053F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:77:38:3a:e5:d2:55:fe:9e:a4:74:a5:80:be:
                    2a:13:11:60:2b:5c:d8:30:1b:ef:25:14:68:0a:b3:
                    a3:45:95:26:26:30:50:e8:6b:0d:1c:90:6c:00:c6:
                    ce:41:ef:4f:59:b8:56:32:8a:13:10:b6:c9:f2:00:
                    61:c0:ea:28:55:b2:7e:53:30:00:25:f1:d9:19:4a:
                    81:1e:86:72:1a:4e:3c:39:ea:df:7f:6d:dc:1e:03:
                    bc:ad:b0:ef:21:ca:a9:20:53:77:f0:e1:d7:1f:1d:
                    66:32:17:49:79:dd:46:65:82:4c:da:b3:9e:d6:93:
                    47:e8:31:bf:86:a2:50:50:5f:14:e5:d8:f6:be:3f:
                    d5:e1:5a:5d:aa:c9:8d:d8:ad:e5:9a:7d:47:32:80:
                    19:9e:5f:e4:5d:63:a3:45:b6:53:4e:73:1c:ac:47:
                    74:a1:04:a2:05:e7:b7:8f:1b:34:e3:9e:93:0d:30:
                    76:ab:5e:b3:70:a6:8f:6f:f1:64:e4:8a:f2:50:b9:
                    1e:d2:f0:7f:cc:9f:a3:3f:3f:cb:e4:0b:9c:35:56:
                    92:1b:c8:fd:be:74:b9:38:ff:64:51:87:94:19:fe:
                    26:fb:c9:6a:b7:d8:dd:0c:a5:99:a6:a1:e0:16:ce:
                    14:88:be:59:b3:f0:5e:a8:e2:17:a0:ef:c1:36:00:
                    2b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:FE:8C:4C:22:FE:AB:E6:43:43:31:68:A4:B6:34:2C:C0:0E:05:3F
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132302e302f32322d3232203d3e203333343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5b:a8:80:dc:9c:dd:3f:7c:b4:f3:a9:89:c1:d6:90:80:f0:b0:
         8e:8b:4c:ec:5f:b3:1b:5a:d4:7a:20:f1:c7:aa:32:03:69:60:
         cb:eb:df:4f:d5:03:bc:95:1a:ba:1f:a0:ba:1d:ad:11:9b:9d:
         ad:8f:cc:3c:1a:54:de:f6:4e:83:f1:a4:00:d7:03:38:4f:42:
         27:c2:c8:25:f0:71:b8:b5:c1:79:14:e2:f6:b6:ba:cb:97:a1:
         c8:96:8d:07:41:aa:e3:fb:9f:7c:8e:c5:08:2c:a3:81:b6:05:
         9d:5a:8a:ac:18:87:44:b0:a0:04:1a:a5:e5:27:8b:8c:56:d2:
         ea:56:f8:3c:f2:00:c4:37:aa:23:d1:b7:af:f8:11:4b:a7:37:
         65:01:06:7e:24:92:c8:38:05:d9:d8:e6:79:bd:ba:95:86:05:
         73:56:f8:a1:ee:e6:24:e1:0b:8d:c0:66:ab:20:aa:a9:f4:27:
         d5:0b:c1:3e:5d:4a:8a:fb:9a:ca:e9:84:33:c8:09:7f:b6:b4:
         a2:39:04:3d:91:5a:0c:cd:9c:12:89:61:e2:8e:a9:a0:6e:f4:
         3b:52:f8:f9:2f:20:95:c0:a0:27:a9:88:d1:29:6c:6a:47:fa:
         45:0e:2d:23:b6:2d:1a:cb:b6:b7:1f:b6:95:4b:7d:83:5e:90:
         e4:38:77:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 19:25:16 2025 by rpki-client