Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/3230362e3139372e3231312e302f32342d3234203d3e2036303739.roa
File:                     3230362e3139372e3231312e302f32342d3234203d3e2036303739.roa (raw, json)
Hash identifier:          JgOpGqDdVslVQcTJB2tnyJshVTeovT1TL1zS7lPNLQ4=
Subject key identifier:   8A:A2:96:76:A2:37:1D:11:DA:8B:F8:2E:A0:B2:07:86:7B:0E:66:1A
Certificate issuer:       /CN=eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44
Certificate serial:       2A073B01D7D5477A8D6F1590F20E7AE666610A82
Authority key identifier: FF:0F:EB:AB:1F:7D:98:37:33:BC:5E:C6:25:C2:3D:2F:AE:F7:B9:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/3230362e3139372e3231312e302f32342d3234203d3e2036303739.roa
Signing time:             Sun 17 Aug 2025 04:50:16 +0000
ROA not before:           Sun 17 Aug 2025 04:45:16 +0000
ROA not after:            Sun 16 Aug 2026 04:50:16 +0000
asID:                     6079
IP address blocks:        206.197.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 02:42:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:07:3b:01:d7:d5:47:7a:8d:6f:15:90:f2:0e:7a:e6:66:61:0a:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44
        Validity
            Not Before: Aug 17 04:45:16 2025 GMT
            Not After : Aug 16 04:50:16 2026 GMT
        Subject: CN=8AA29676A2371D11DA8BF82EA0B207867B0E661A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:e8:3d:eb:9f:8d:ce:ab:b4:05:8b:aa:e9:
                    78:78:1b:60:0e:a2:12:2f:66:74:45:d0:41:05:6b:
                    28:41:d2:8c:93:55:af:e7:ff:ae:50:41:ae:3d:66:
                    9d:fc:58:40:7e:fc:04:c6:12:ed:2f:f8:4d:ce:fc:
                    e7:44:e1:48:61:82:f0:7e:b9:64:b4:16:3d:20:b0:
                    67:91:8c:d8:75:de:6c:c0:6e:b3:93:06:c2:48:d0:
                    05:32:f6:d6:60:14:80:69:84:1b:1a:5d:97:fc:e7:
                    c4:d3:b0:80:ba:b1:8b:93:ca:74:3d:a2:91:7a:cc:
                    30:05:7c:7c:b5:b0:53:ff:0e:9d:2a:90:f5:5a:16:
                    20:7b:0f:03:b8:08:af:69:df:de:d9:b0:94:46:76:
                    8c:7b:be:cd:4c:30:48:9d:94:ed:78:e7:2c:5a:d0:
                    a4:dd:7e:ff:1b:e7:f6:76:65:79:63:de:86:a4:ac:
                    17:be:e4:a3:45:5d:ab:06:f8:d5:2e:b1:b1:be:45:
                    a6:a6:da:a9:43:7c:96:0e:a6:37:05:d1:43:61:b5:
                    51:78:ed:2b:0d:ad:da:51:05:1f:b1:36:07:5e:38:
                    5a:5e:67:e7:ae:9e:d8:69:43:f6:b6:53:31:5b:04:
                    01:55:20:eb:56:b8:c7:23:df:39:cf:03:44:c4:2c:
                    c1:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A2:96:76:A2:37:1D:11:DA:8B:F8:2E:A0:B2:07:86:7B:0E:66:1A
            X509v3 Authority Key Identifier:
                keyid:FF:0F:EB:AB:1F:7D:98:37:33:BC:5E:C6:25:C2:3D:2F:AE:F7:B9:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/FF0FEBAB1F7D983733BC5EC625C23D2FAEF7B9AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/df15a7a4-7ca1-4957-aad0-9d0af4a3484c/eb9f2c6fff8b7979038e6f55b688739b1e27d97c242ec72f44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8927b1d8018954fb9b0c2587/0/3230362e3139372e3231312e302f32342d3234203d3e2036303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.197.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:f8:e0:d8:6c:47:ea:0a:ae:73:f5:02:af:ff:f3:94:f5:fc:
         f0:fb:ac:7a:e2:35:5b:a3:27:80:12:a1:d5:03:36:f5:9d:bc:
         f9:15:74:27:ce:2a:e3:b1:51:d3:dc:db:fe:99:8f:fa:da:d8:
         87:02:18:0a:ce:6b:8e:3a:6b:82:88:fe:9d:5f:da:f2:a5:c5:
         b1:d2:7e:59:2b:57:22:b0:13:0f:d1:da:46:04:d8:ee:fb:60:
         87:af:c6:02:94:fd:92:13:6b:cd:0b:35:72:a1:05:c0:1b:6b:
         5c:0e:c8:6e:c3:e6:b5:03:db:00:f6:b2:a3:13:a4:cf:a0:22:
         91:9b:0a:02:a6:52:06:34:ce:5c:c1:b2:6b:4b:c2:0f:00:df:
         5a:da:a7:c0:d6:30:21:fd:ca:aa:b9:7c:a9:e8:c3:c6:7f:df:
         10:6d:87:82:4c:04:55:6d:39:39:81:02:be:94:63:99:ff:51:
         31:87:a1:de:1d:e8:a4:9b:03:20:ea:c5:d6:03:9e:a3:07:29:
         cf:95:b2:41:6a:88:34:d0:84:95:0d:db:7e:5c:c4:7a:f5:a6:
         fb:97:94:73:e1:ba:48:15:25:5b:91:ec:2c:79:33:13:96:06:
         72:bb:f3:98:2c:2f:ba:fe:ba:19:44:36:71:33:c6:d0:ea:22:
         4e:f9:76:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:37:43 2025 by rpki-client