Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3232203d3e203333343930.roa
File:                     3231362e3132322e3132342e302f32322d3232203d3e203333343930.roa (raw, json)
Hash identifier:          XOGO+zcRTIMbGG5pgqnRupQAui+K7uUbqxnIHChNQsU=
Subject key identifier:   27:9E:09:84:D0:88:1C:65:9A:75:9A:BA:BF:EB:D8:18:6C:BE:ED:B1
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       5B7109D6D6E604E338A6E0E5B10B35195A2845E9
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3232203d3e203333343930.roa
Signing time:             Tue 24 Jun 2025 15:29:44 +0000
ROA not before:           Tue 24 Jun 2025 15:24:44 +0000
ROA not after:            Tue 23 Jun 2026 15:29:44 +0000
asID:                     33490
IP address blocks:        216.122.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 11:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:71:09:d6:d6:e6:04:e3:38:a6:e0:e5:b1:0b:35:19:5a:28:45:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun 24 15:24:44 2025 GMT
            Not After : Jun 23 15:29:44 2026 GMT
        Subject: CN=279E0984D0881C659A759ABABFEBD8186CBEEDB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:bb:28:ad:e0:52:9a:1b:9e:c0:3d:10:f3:22:
                    b3:7f:d3:b3:dc:c7:b8:56:64:8c:8e:85:b4:32:49:
                    0b:fb:72:75:ad:34:a9:24:10:77:2e:46:81:eb:b5:
                    9c:59:92:50:0f:58:70:18:54:8a:3e:59:51:ca:31:
                    00:e0:c1:f5:bf:98:89:63:ae:56:78:7a:b9:e4:9d:
                    cc:c9:2f:c2:56:45:f9:f1:5b:c5:1d:7d:c7:83:8e:
                    dd:ad:cd:f3:a4:d9:3b:24:3d:2c:61:47:5c:57:2e:
                    28:89:4f:bc:70:41:a3:00:af:b8:40:3c:00:5f:c1:
                    9f:bf:70:4a:34:bc:74:a7:c2:7f:2d:67:2e:4c:ed:
                    44:8f:7e:84:d1:f4:7b:47:df:61:ba:35:36:dc:f1:
                    13:3b:ae:36:8e:0f:6d:7e:b5:26:60:88:bc:94:ff:
                    ae:39:94:5c:60:84:f1:33:17:1a:63:b6:56:ef:70:
                    ac:68:94:ec:b6:ef:7d:4e:51:06:bf:36:ab:d1:cd:
                    5d:78:77:87:3f:d6:f9:fb:d2:8c:67:d4:08:c1:c2:
                    eb:88:50:ee:cb:e3:64:83:9a:32:65:a4:de:e0:76:
                    5e:54:61:05:79:0b:fe:1d:50:41:cf:7d:e8:06:06:
                    62:9f:c8:ff:af:46:ac:04:a3:07:87:54:cd:19:19:
                    b6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9E:09:84:D0:88:1C:65:9A:75:9A:BA:BF:EB:D8:18:6C:BE:ED:B1
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3132342e302f32322d3232203d3e203333343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         5d:86:d5:bd:da:ae:c4:79:d2:43:d5:b7:85:67:99:db:83:af:
         b2:12:2d:68:12:dc:ff:aa:9a:09:79:1b:56:e4:0c:a4:46:14:
         2e:15:b0:cf:bd:06:69:fb:ea:5a:aa:d3:4d:1b:95:58:d0:b9:
         42:96:09:e8:06:ef:1b:84:89:4e:9e:53:50:82:fe:81:e5:7d:
         07:bf:63:59:db:1f:ff:63:a8:3e:99:b8:52:71:4a:07:f7:17:
         69:df:6d:54:7d:d7:b9:c4:b9:42:f9:82:4c:8f:1d:28:4b:56:
         c9:d2:1a:eb:df:b5:de:ef:95:97:38:43:3b:cd:39:f1:6b:5f:
         bc:28:5b:5e:4f:a3:2c:7b:39:d0:9d:e1:a4:eb:23:1f:a9:f4:
         ad:25:ca:48:59:d9:ab:ba:be:f4:f9:c0:76:e8:d4:c3:99:c4:
         63:e4:bf:44:17:6d:18:c6:12:c5:7e:96:29:96:96:e9:1a:03:
         66:7f:8c:5f:f4:26:9f:36:3c:2f:67:57:d1:ce:2c:5e:8a:f5:
         fa:a5:a9:52:33:79:16:4f:3a:71:8f:c5:b1:ba:17:b9:0d:d2:
         15:10:20:7b:a6:b5:83:f4:31:98:29:86:22:48:bc:ee:4f:b8:
         5d:67:fd:fe:e1:31:91:f2:13:a7:86:c7:71:70:5f:e1:2c:2f:
         52:f2:f4:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 13:28:54 2025 by rpki-client