Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa
File:                     3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa (raw, json)
Hash identifier:          r8zLR68UZfQ1OszykAiUcj98/QiptWP9N96JxXiE93s=
Subject key identifier:   7B:58:A3:4D:93:72:2F:F0:87:83:1C:22:A3:60:8E:58:04:3C:16:5D
Certificate issuer:       /CN=904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79
Certificate serial:       2CE10F840CF69D04D8FB8FD99727D6E7A961AC47
Authority key identifier: 75:30:F0:69:80:0B:DF:ED:65:48:7B:49:D2:4C:07:D7:DD:ED:9E:56
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa
Signing time:             Mon 11 Aug 2025 17:29:44 +0000
ROA not before:           Mon 11 Aug 2025 17:24:44 +0000
ROA not after:            Mon 10 Aug 2026 17:29:44 +0000
asID:                     211373
IP address blocks:        205.233.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/6f5f23ad-ba92-4342-9c5f-7645311a9589.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 11:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:e1:0f:84:0c:f6:9d:04:d8:fb:8f:d9:97:27:d6:e7:a9:61:ac:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79
        Validity
            Not Before: Aug 11 17:24:44 2025 GMT
            Not After : Aug 10 17:29:44 2026 GMT
        Subject: CN=7B58A34D93722FF087831C22A3608E58043C165D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:90:14:80:b9:24:a6:76:c5:68:15:10:c0:99:
                    b2:a3:a8:a9:69:b6:38:7c:f7:0e:55:bc:6e:9e:f6:
                    33:e6:f6:bd:5b:27:f6:bb:bd:82:9b:26:59:7c:8d:
                    3a:94:a3:50:81:c6:1b:db:ae:7d:d4:59:2b:26:93:
                    83:67:96:9c:56:a1:bb:60:e6:8f:7c:7f:ed:a0:f6:
                    cb:bf:fd:e2:cc:f2:64:a2:00:8d:47:43:d4:0b:9b:
                    9c:0b:4e:e4:6e:90:7a:1f:c2:ec:9d:09:b3:bc:1a:
                    68:72:3e:72:fd:ab:00:d0:4c:0b:71:fa:67:35:32:
                    31:27:e4:81:d4:63:4f:a3:3b:b8:93:70:a6:b9:e4:
                    8d:75:4c:19:c8:39:a0:86:87:ef:c5:e0:44:51:6a:
                    d0:2c:0b:2e:f9:53:ee:37:38:3c:54:1e:7d:26:70:
                    f2:54:62:f6:33:11:d9:48:55:60:61:68:a2:24:37:
                    27:ff:cd:84:1f:49:29:26:8b:54:ce:ef:9f:5c:2e:
                    af:e2:33:88:5e:4d:c8:15:22:98:5d:5a:02:0f:d0:
                    1f:27:20:51:33:79:59:e0:88:ef:56:da:a5:d0:16:
                    52:99:66:e0:75:c7:3c:b5:d0:27:19:16:c1:59:a1:
                    42:65:06:4f:aa:0e:aa:f0:4f:ff:d0:44:70:8b:2d:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:58:A3:4D:93:72:2F:F0:87:83:1C:22:A3:60:8E:58:04:3C:16:5D
            X509v3 Authority Key Identifier:
                keyid:75:30:F0:69:80:0B:DF:ED:65:48:7B:49:D2:4C:07:D7:DD:ED:9E:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/7530F069800BDFED65487B49D24C07D7DDED9E56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f5f23ad-ba92-4342-9c5f-7645311a9589/904d489a2dbd27553a164925cbbda5b551914c5797b4bdcf79.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8b15078d018b1529da02004a/0/3230352e3233332e3230312e302f32342d3234203d3e20323131333733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:f4:63:da:fd:ce:96:d1:e7:99:00:7a:b4:4b:12:cc:65:60:
         42:5d:61:b6:b1:77:67:56:2e:ff:6a:b8:39:a0:2f:0b:f8:0e:
         7a:0b:7f:b3:66:83:b3:f8:7f:a0:dc:ed:f4:0e:00:21:fc:e3:
         6f:2b:03:13:8a:9f:68:f7:76:52:06:d9:f9:7d:71:cd:e8:e6:
         16:96:3e:51:3b:69:6c:b3:9d:42:03:ae:b6:4f:cd:50:96:64:
         91:f6:66:f2:6d:e6:90:08:bc:bf:6a:a7:3b:13:90:1d:f6:ec:
         45:7a:da:99:92:f3:e6:f5:6d:1d:5b:82:9d:e8:04:d1:f0:41:
         8e:64:20:95:b0:5b:c6:a9:07:33:1d:c5:0c:69:45:66:ad:61:
         a1:85:9b:30:70:61:02:e2:6f:6e:c4:71:bd:c4:0b:23:72:e3:
         af:27:bf:ce:94:26:0b:9f:e6:14:01:e1:40:0f:31:5c:4e:34:
         60:3a:99:7c:c0:a8:06:11:05:55:72:b9:35:2a:e4:f1:65:4c:
         a4:8f:2e:e1:85:e7:a3:d8:5f:b1:65:4c:26:bd:4e:f4:54:fd:
         3b:b3:a9:6f:f4:38:a9:12:50:df:10:2b:ca:de:c9:ca:7e:e7:
         a0:02:fb:51:2b:6d:72:07:b9:91:aa:be:df:2d:e2:5f:89:27:
         4b:51:ea:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:24:15 2025 by rpki-client