Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20313437303033.roa
File:                     3231362e3234372e3130352e302f32342d3234203d3e20313437303033.roa (raw, json)
Hash identifier:          EdlXZ8mq3m0Cf86GrVo45Cs+TTxakzaxZX4RzTBSYMc=
Subject key identifier:   65:57:90:90:34:78:EE:58:18:44:EC:54:DD:CF:B2:A5:BF:2B:AD:2F
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2584DE72446C7E199409301A9AECE667AED25AC7
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20313437303033.roa
Signing time:             Sat 28 Jun 2025 16:49:53 +0000
ROA not before:           Sat 28 Jun 2025 16:44:53 +0000
ROA not after:            Sat 27 Jun 2026 16:49:53 +0000
asID:                     147003
IP address blocks:        216.247.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 22:14:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:84:de:72:44:6c:7e:19:94:09:30:1a:9a:ec:e6:67:ae:d2:5a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun 28 16:44:53 2025 GMT
            Not After : Jun 27 16:49:53 2026 GMT
        Subject: CN=655790903478EE581844EC54DDCFB2A5BF2BAD2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:45:68:ff:ee:ad:ae:b4:ab:7f:13:99:2d:af:
                    89:f9:12:de:dc:d2:bf:f6:7c:f9:26:14:53:26:27:
                    c5:67:66:89:8b:cc:30:9a:99:76:61:c7:2f:2d:75:
                    08:52:33:c0:e2:a2:0b:4f:86:d3:d5:c1:50:ff:71:
                    e7:78:1e:a2:fe:7e:d2:27:7e:73:5f:a9:6d:44:5c:
                    40:19:43:49:ed:ef:64:9d:d1:ea:d1:93:ae:88:6c:
                    d1:df:b1:ac:92:f9:38:ca:ef:67:8b:aa:45:27:a2:
                    82:1b:0e:ce:0f:10:60:1a:f3:9a:85:39:26:94:de:
                    60:18:e6:83:3a:b2:d2:19:33:cf:da:6e:93:07:b1:
                    a9:77:ae:24:9a:36:f7:51:2b:34:d0:d7:62:0a:91:
                    5a:6a:77:98:cd:2b:9f:20:d6:25:cf:11:39:c8:e4:
                    b7:90:c0:5b:9e:55:f7:db:e9:c4:a2:3f:01:bf:d6:
                    06:81:de:6e:0b:00:76:c7:01:77:76:81:58:5d:ea:
                    ce:97:5a:0f:9a:5c:3d:10:ab:9e:a3:1a:58:9a:52:
                    02:24:22:92:7e:39:c8:5f:8b:03:d0:e8:e5:8d:cc:
                    8a:81:19:d6:2e:e4:8d:b9:51:71:99:fd:de:2b:3a:
                    99:7a:a9:94:2b:1f:d6:0a:2e:e1:b8:8d:10:35:d5:
                    35:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:57:90:90:34:78:EE:58:18:44:EC:54:DD:CF:B2:A5:BF:2B:AD:2F
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130352e302f32342d3234203d3e20313437303033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:33:7d:77:7f:5e:78:29:f4:1b:5c:68:ba:5e:f4:65:25:cd:
         4c:c9:88:86:88:b0:dd:54:34:9c:4b:3e:4e:21:c2:cd:d6:0d:
         8b:d1:f5:39:b6:78:8f:9b:cb:9e:65:3d:5c:ba:8e:ae:80:9e:
         56:be:9f:12:2c:2a:97:1b:54:e2:b2:78:6f:50:1c:b6:49:5f:
         b0:8a:d4:96:ac:10:48:ec:d1:6c:5c:b5:8e:0c:98:c0:d3:d3:
         2c:9a:63:1e:26:00:ce:96:4a:be:9e:8c:6a:12:68:84:3d:eb:
         e8:73:d5:f0:0b:ed:c2:a8:d9:d4:a0:85:b0:7b:d4:bd:ec:f6:
         65:f9:40:05:2b:d5:d8:ab:17:7b:df:8b:c9:31:b3:7c:cb:29:
         25:b7:4f:08:ee:9d:72:e5:bc:24:2f:a3:de:ce:30:2c:a4:3f:
         9b:9d:dd:6d:92:57:51:17:b7:cf:15:97:fc:45:5c:ae:7a:98:
         f4:55:19:7e:fc:78:5e:4e:74:ba:ed:8a:29:dd:cf:03:57:89:
         75:97:d5:1d:50:02:c8:2d:e6:b9:4e:f5:24:f9:bd:9b:78:10:
         e8:ad:e3:77:6e:0c:82:c6:8e:72:5a:0d:39:1b:6d:49:e5:91:
         3a:8e:44:f5:32:92:cd:19:b0:4d:18:87:cb:ec:b2:7f:f4:67:
         7a:e8:f4:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 07:41:52 2025 by rpki-client