Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e203230343534.roa
File:                     3231362e3234372e3131312e302f32342d3234203d3e203230343534.roa (raw, json)
Hash identifier:          886IumZzjliNpRjfiwjuh282nECT5+UiSQq+98uckQc=
Subject key identifier:   44:6B:2B:9B:B0:D2:68:A2:A2:78:15:FB:D7:5C:2D:4A:C0:CF:79:27
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       30428A867CEAFE85E0A39B97E78472961084FD7B
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e203230343534.roa
Signing time:             Wed 06 Aug 2025 21:29:44 +0000
ROA not before:           Wed 06 Aug 2025 21:24:44 +0000
ROA not after:            Wed 05 Aug 2026 21:29:44 +0000
asID:                     20454
IP address blocks:        216.247.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 07:41:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:42:8a:86:7c:ea:fe:85:e0:a3:9b:97:e7:84:72:96:10:84:fd:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug  6 21:24:44 2025 GMT
            Not After : Aug  5 21:29:44 2026 GMT
        Subject: CN=446B2B9BB0D268A2A27815FBD75C2D4AC0CF7927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:d6:34:58:b6:65:fc:d1:13:6e:b7:db:20:27:
                    f6:fd:71:7c:86:ce:42:e7:09:e3:8f:b7:0d:29:02:
                    eb:c8:36:93:d8:dd:db:07:01:9c:ef:61:60:26:d6:
                    eb:9a:ac:b8:4d:9f:3c:15:8b:92:d5:02:b6:eb:5b:
                    f4:b3:b7:e7:2d:69:5a:76:c1:e0:d0:a7:46:97:b3:
                    f2:58:0f:ec:19:07:b2:d9:a2:89:ad:1a:bd:19:ce:
                    ff:2e:1b:e2:5d:4a:c4:15:4d:15:4c:06:1b:13:05:
                    11:b9:5a:94:9c:c9:e9:0c:21:44:e4:80:d9:bc:4f:
                    7c:d7:7a:40:16:35:83:ce:7d:b4:8b:d0:b8:6e:b3:
                    bc:ab:13:f0:50:92:5e:3c:a2:05:f0:0f:fc:72:fc:
                    6e:10:2e:fd:99:85:67:54:27:ed:8a:60:11:c5:72:
                    77:a0:79:62:8f:96:49:61:35:0c:05:d0:5b:28:93:
                    d0:34:bd:09:7c:6c:f9:44:52:f8:7b:8b:a3:5b:6e:
                    39:1d:da:1c:30:2f:d3:9a:b6:7b:41:77:ff:d1:5c:
                    c1:9d:ba:d0:f9:49:a0:b1:79:8b:87:a4:5c:17:45:
                    78:54:9a:73:1c:83:8d:c1:75:59:88:b2:14:ac:ef:
                    86:c9:a3:b0:00:98:96:9a:39:d3:c0:2e:31:78:45:
                    7d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:6B:2B:9B:B0:D2:68:A2:A2:78:15:FB:D7:5C:2D:4A:C0:CF:79:27
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3131312e302f32342d3234203d3e203230343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:47:f5:b0:06:79:a8:df:c5:6d:1d:69:8b:0c:03:1d:ea:f0:
         a5:80:24:66:8c:0f:aa:00:34:40:45:ef:05:33:19:51:e0:a5:
         e3:4d:ac:75:d8:51:66:7d:7e:d8:5d:23:1e:26:49:9d:c9:1d:
         69:7d:1f:bb:6b:8d:72:a8:ee:26:d9:2d:23:03:d9:7f:34:45:
         5b:0e:f6:3a:f1:84:3b:0f:a1:e9:de:6d:33:26:47:c7:cf:a1:
         f3:e6:23:f7:a1:9e:80:94:f4:fc:96:c4:2e:ce:ee:be:06:6d:
         25:95:63:c5:97:7c:5a:2b:8d:97:b8:1e:fa:a8:0d:d6:f9:97:
         e7:8f:55:05:53:9f:9f:db:d8:d4:62:ae:46:cf:fd:22:f3:ca:
         81:fe:3a:e1:70:8a:ca:e3:1e:41:eb:fe:ad:85:37:62:3d:49:
         49:23:5a:a0:37:c1:c9:1c:42:d2:1c:8f:32:7b:7b:a4:fe:da:
         53:35:96:02:41:5f:78:4f:d2:08:02:fe:1d:16:02:fd:a7:be:
         20:dc:2f:0f:05:ef:f5:48:d3:d7:c5:e1:61:51:d1:08:e0:73:
         ca:36:a8:91:ac:11:95:1d:f4:1e:c5:29:70:fb:c8:93:5f:65:
         c8:e7:ac:86:1a:13:e1:94:34:db:7b:2c:9a:23:1f:a6:61:bd:
         9d:63:2c:5f
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUMEKKhnzq/oXgo5uX54RylhCE/XswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNzE4NjI2ZWFiNzM1OTZmNDcyZGZiMDIwYTljMGYzYjcx
YWQ5ZGQ0ZmVmOTk0N2U5MWMwHhcNMjUwODA2MjEyNDQ0WhcNMjYwODA1MjEyOTQ0
WjAzMTEwLwYDVQQDEyg0NDZCMkI5QkIwRDI2OEEyQTI3ODE1RkJENzVDMkQ0QUMw
Q0Y3OTI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09Y0WLZl/NET
brfbICf2/XF8hs5C5wnjj7cNKQLryDaT2N3bBwGc72FgJtbrmqy4TZ88FYuS1QK2
61v0s7fnLWladsHg0KdGl7PyWA/sGQey2aKJrRq9Gc7/LhviXUrEFU0VTAYbEwUR
uVqUnMnpDCFE5IDZvE9813pAFjWDzn20i9C4brO8qxPwUJJePKIF8A/8cvxuEC79
mYVnVCftimARxXJ3oHlij5ZJYTUMBdBbKJPQNL0JfGz5RFL4e4ujW245HdocMC/T
mrZ7QXf/0VzBnbrQ+UmgsXmLh6RcF0V4VJpzHIONwXVZiLIUrO+GyaOwAJiWmjnT
wC4xeEV9CQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFERrK5uw0miiongV+9dcLUrA
z3knMB8GA1UdIwQYMBaAFB0d682fLoISIhU6ye9QN2oxWcuQMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlODBmMWE4MGEwMTgxZjBmMTc1NDE2NjdmLzEv
MUQxREVCQ0Q5RjJFODIxMjIyMTUzQUM5RUY1MDM3NkEzMTU5Q0I5MC5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1L2YwYjFiNDM2LTE5M2MtNDIwOS1hNjk1LWYxNjhmOWYyYjNiMC83MTg2
MjZlYWI3MzU5NmY0NzJkZmIwMjBhOWMwZjNiNzFhZDlkZDRmZWY5OTQ3ZTkxYy5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTgwZjFhODBhMDE4MWYw
ZjE3NTQxNjY3Zi8xLzMyMzEzNjJlMzIzNDM3MmUzMTMxMzEyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMjMwMzQzNTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2PdvMA0GCSqGSIb3DQEB
CwUAA4IBAQBjR/WwBnmo38VtHWmLDAMd6vClgCRmjA+qADRARe8FMxlR4KXjTax1
2FFmfX7YXSMeJkmdyR1pfR+7a41yqO4m2S0jA9l/NEVbDvY68YQ7D6Hp3m0zJkfH
z6Hz5iP3oZ6AlPT8lsQuzu6+Bm0llWPFl3xaK42XuB76qA3W+Zfnj1UFU5+f29jU
Yq5Gz/0i88qB/jrhcIrK4x5B6/6thTdiPUlJI1qgN8HJHELSHI8ye3uk/tpTNZYC
QV94T9IIAv4dFgL9p74g3C8PBe/1SNPXxeFhUdEI4HPKNqiRrBGVHfQexSlw+8iT
X2XI56yGGhPhlDTbeyyaIx+mYb2dYyxf
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:25:17 2025 by rpki-client