Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa
File:                     3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa (raw, json)
Hash identifier:          +qDzz1CuVR2ZEE6nuG26JBjL7+yuy/Eej6wydxRtA0Y=
Subject key identifier:   A6:6E:C8:91:B8:E5:3C:30:9F:E6:3F:86:C8:1F:F3:50:F4:8E:B9:89
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       33E56FABBFFFD664CFDFC00C8BC7AAE58E1728E5
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa
Signing time:             Thu 21 Aug 2025 14:29:44 +0000
ROA not before:           Thu 21 Aug 2025 14:24:44 +0000
ROA not after:            Thu 20 Aug 2026 14:29:44 +0000
asID:                     9009
IP address blocks:        216.247.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e5:6f:ab:bf:ff:d6:64:cf:df:c0:0c:8b:c7:aa:e5:8e:17:28:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug 21 14:24:44 2025 GMT
            Not After : Aug 20 14:29:44 2026 GMT
        Subject: CN=A66EC891B8E53C309FE63F86C81FF350F48EB989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:91:cf:42:4d:bc:de:2a:a0:d6:ae:b1:7a:d8:
                    62:2b:ec:06:c5:18:97:36:74:5f:1e:92:42:8b:68:
                    b2:ee:6a:bb:87:81:a4:75:ff:fb:4a:4e:95:62:5d:
                    6b:12:95:d8:96:71:f7:1b:1a:dd:48:a3:cc:38:c7:
                    b7:f7:1c:aa:63:38:d3:93:32:ca:ce:f4:95:7a:b8:
                    6b:38:d2:92:cc:c0:96:7f:c2:f0:54:ee:56:d1:2d:
                    7e:79:c7:87:3d:c4:6d:23:9a:42:99:ba:93:22:4f:
                    18:ea:8d:da:b1:a5:bb:7b:2d:bd:df:ad:6f:17:14:
                    3b:7b:72:a7:d1:f1:bb:fb:cd:7b:8e:03:5d:61:f9:
                    47:c3:e3:c7:7c:53:08:76:b3:37:05:1f:e6:55:c5:
                    06:88:10:ff:2b:30:01:72:7d:82:5e:e5:fb:65:1a:
                    70:f2:0f:0b:05:25:63:2a:8e:54:0d:26:ec:ea:2e:
                    02:88:be:a9:79:01:f6:56:dd:3e:89:8a:ba:e2:29:
                    25:4d:7c:d6:ed:54:2a:fb:d8:60:ae:4d:46:e7:97:
                    42:97:cf:57:27:58:48:79:6d:89:17:83:ee:42:82:
                    9b:a8:30:b7:ef:ff:6e:1c:36:ef:9f:68:16:74:3e:
                    b2:3f:8e:68:ba:95:8d:db:c5:dc:a7:98:c2:ed:a3:
                    cb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:C8:91:B8:E5:3C:30:9F:E6:3F:86:C8:1F:F3:50:F4:8E:B9:89
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130362e302f32342d3234203d3e2039303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:2d:66:5d:ee:3c:02:17:de:0b:28:d5:5b:ac:ca:c7:28:95:
         21:db:8d:6a:17:09:00:7c:e6:4e:42:fc:e2:20:6e:00:db:62:
         45:69:b1:a6:53:21:db:38:ce:97:73:e6:ab:3a:d0:09:97:72:
         38:c2:64:0c:35:45:55:72:0f:04:7a:e1:5c:e3:7c:4e:e8:29:
         1a:72:03:71:a3:43:bb:ac:63:3a:db:91:4d:0e:28:70:a5:d6:
         ba:70:cf:a0:43:43:fc:f1:0e:54:84:bd:ef:9a:c8:a0:b9:51:
         8b:da:cf:12:69:e0:4f:9a:f8:12:22:8b:cd:e9:3c:43:21:de:
         7a:d9:c1:2d:4a:16:d4:ec:1f:b2:9b:1d:97:5f:4c:f5:56:dd:
         c2:d6:f5:c7:07:7d:ba:20:09:a9:d4:72:90:cb:e3:64:86:5c:
         af:ef:92:3e:dc:06:26:d3:66:72:39:4c:d0:1a:74:e9:38:b3:
         4b:ba:81:ba:0b:92:77:ed:49:84:b7:3c:9d:e6:41:4a:1f:38:
         5c:4d:f2:96:60:4d:c9:df:d6:cd:b8:dd:db:9f:0a:07:0c:c9:
         51:72:53:02:18:40:a0:bd:98:56:d3:db:7e:0d:fe:60:10:d4:
         07:68:4a:ef:27:75:e9:24:73:1a:ef:a2:63:ed:b9:18:48:8d:
         71:1a:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:18 2025 by rpki-client