Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e2039333034.roa
File:                     3136322e3231382e32362e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          QqSsklD6K4OU9bouuAXkwI0kejG0zOUDs0fH+41NKG8=
Subject key identifier:   01:EE:1D:2D:0F:39:3E:55:BA:5B:85:91:8E:CB:3D:1B:54:84:49:E2
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       4C406F2F0C1A05E42108170B03F20EA35F5892B4
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e2039333034.roa
Signing time:             Fri 15 Aug 2025 07:52:38 +0000
ROA not before:           Fri 15 Aug 2025 07:47:38 +0000
ROA not after:            Fri 14 Aug 2026 07:52:38 +0000
asID:                     9304
IP address blocks:        162.218.26.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:19:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:40:6f:2f:0c:1a:05:e4:21:08:17:0b:03:f2:0e:a3:5f:58:92:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Aug 15 07:47:38 2025 GMT
            Not After : Aug 14 07:52:38 2026 GMT
        Subject: CN=01EE1D2D0F393E55BA5B85918ECB3D1B548449E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6f:af:00:68:3d:05:42:89:03:e8:38:42:a7:
                    e6:4c:a4:49:6b:cf:14:55:2f:83:53:39:98:0a:61:
                    0c:8f:ca:9e:73:8f:f9:ba:50:ba:63:5f:aa:02:82:
                    82:e1:78:d6:53:c8:09:29:a9:a5:52:c3:c7:81:6a:
                    8f:32:aa:10:f8:83:cc:6d:9f:e4:ef:1d:f6:2f:9b:
                    ca:8c:8f:76:f3:56:7c:45:9a:cb:37:39:a9:50:72:
                    a4:df:5e:fd:38:25:44:b0:bb:11:fb:f7:58:9a:78:
                    b5:6d:66:98:b9:7a:b9:a0:f6:7f:34:f3:98:33:e7:
                    0a:91:87:73:cc:7b:36:32:c7:ce:29:41:00:34:1a:
                    0d:90:14:73:54:15:70:c1:8d:98:d3:44:b5:a7:a0:
                    f9:ed:8d:09:ee:71:4e:ae:c6:e2:96:88:7e:42:ca:
                    c0:0d:c8:57:19:45:ab:48:04:cf:f7:2a:e3:d3:75:
                    d8:f2:4d:f5:d9:7e:99:98:dd:b6:6e:dc:91:0c:d2:
                    58:17:92:6b:f1:59:fe:9f:6b:54:9c:1c:81:dd:c0:
                    b8:c0:21:c5:61:a6:b2:43:3a:dd:ea:8c:63:c3:ae:
                    43:ba:3b:0b:d9:43:b9:2f:bd:d0:96:ff:92:6e:d8:
                    29:97:66:73:5e:36:78:c9:b1:e6:b2:a6:6a:1e:67:
                    88:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:EE:1D:2D:0F:39:3E:55:BA:5B:85:91:8E:CB:3D:1B:54:84:49:E2
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32362e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:7c:1e:74:0b:38:1c:5b:ca:ba:f8:80:8c:3b:22:45:79:6b:
         1b:8d:47:a2:82:dc:7c:c0:d8:77:93:91:4a:d1:50:82:7d:76:
         68:b7:35:21:1a:5f:cd:e2:97:86:83:48:fb:2f:85:3f:29:36:
         19:c0:18:b4:8c:db:f8:63:87:b6:c0:67:a0:ff:c0:43:41:22:
         b9:23:d4:2d:03:7c:30:4a:6c:82:2a:8f:10:92:ae:cd:65:48:
         ba:c3:f5:dd:5b:f8:f1:99:f9:26:83:6f:44:b0:75:30:1b:e9:
         f4:cb:a7:2f:67:af:86:e6:04:68:07:fc:25:88:bd:a1:48:eb:
         d8:bd:d8:1d:89:d1:5b:4f:43:b1:55:f7:9f:f5:d6:1e:58:92:
         89:29:10:b0:48:12:b4:73:ae:de:ff:c5:3e:52:8f:a8:82:4b:
         39:5b:87:23:bf:cd:b4:89:c4:c1:4b:cb:51:78:cd:c8:b2:04:
         e0:29:0f:4a:e3:58:f5:28:16:34:74:d5:f7:d8:d4:21:fd:b6:
         a8:90:85:67:f1:48:32:2f:d7:e8:8a:84:8b:28:62:01:ea:3a:
         19:07:65:3f:19:da:38:0c:be:6e:5b:aa:55:50:f2:c5:bc:af:
         d0:e0:13:00:75:76:d1:31:50:eb:06:16:cb:79:e0:9d:36:2e:
         40:17:83:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:14:47 2025 by rpki-client