Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32352e302f32342d3234203d3e2037303239.roa
File:                     3136322e3231372e32352e302f32342d3234203d3e2037303239.roa (raw, json)
Hash identifier:          YY0xX+rbgUpBA0ufnDeLRva0Mxtv7q+l++ol4Cd4VYY=
Subject key identifier:   51:2F:C7:54:10:AB:67:1C:15:D1:16:31:C8:8D:5E:F4:DE:D2:96:DB
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       069B829118DE191BC3FEE9F4EF6D415976C0FCAE
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32352e302f32342d3234203d3e2037303239.roa
Signing time:             Thu 11 Sep 2025 07:29:45 +0000
ROA not before:           Thu 11 Sep 2025 07:24:45 +0000
ROA not after:            Thu 10 Sep 2026 07:29:45 +0000
asID:                     7029
IP address blocks:        162.217.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:9b:82:91:18:de:19:1b:c3:fe:e9:f4:ef:6d:41:59:76:c0:fc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Sep 11 07:24:45 2025 GMT
            Not After : Sep 10 07:29:45 2026 GMT
        Subject: CN=512FC75410AB671C15D11631C88D5EF4DED296DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:af:1d:3d:96:44:a3:03:19:91:3c:c6:a3:81:
                    1d:6e:8a:36:f4:f6:cc:87:38:e8:af:ad:0a:82:9d:
                    a1:5c:a2:26:d2:05:39:64:c8:78:33:11:50:08:5d:
                    d2:11:6d:f8:ab:8e:64:83:d4:f5:1e:79:e7:49:d7:
                    23:23:1c:8e:04:cd:e7:3f:a8:4d:0a:1b:3b:ab:e4:
                    46:2c:db:a1:e1:43:47:a6:af:46:2f:b8:fb:6d:da:
                    c3:39:b7:96:54:fe:19:88:b2:db:2e:a8:f9:c1:47:
                    1b:93:2f:a4:fc:8a:3b:ab:c1:e1:d5:9f:e3:3e:2c:
                    03:c5:88:61:f8:99:42:b0:fd:14:f9:1d:ef:e0:99:
                    79:ab:ee:ae:31:88:12:d4:20:f8:ba:29:2e:e6:a5:
                    6e:26:28:59:8b:51:98:e1:90:0e:d3:d7:4a:47:51:
                    2c:22:6b:a9:9f:59:08:08:3f:d8:e5:cf:9d:d7:46:
                    d0:55:8e:1f:07:6c:ef:3a:de:4a:02:d2:db:a0:af:
                    b3:7f:4d:e2:b5:9e:ee:75:d5:e0:f6:41:66:07:2d:
                    38:b8:e8:6a:44:41:03:b5:66:f6:ef:e5:9e:bd:4a:
                    b6:cf:2b:4b:fd:56:0e:be:9c:0f:46:24:30:c7:76:
                    70:2e:5f:be:e1:e3:43:96:5e:f7:05:e1:d7:29:09:
                    90:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:2F:C7:54:10:AB:67:1C:15:D1:16:31:C8:8D:5E:F4:DE:D2:96:DB
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e32352e302f32342d3234203d3e2037303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:6e:e3:f7:07:b6:9c:7d:75:fc:ae:fd:96:23:a6:a5:10:a2:
         8b:71:43:38:85:83:e1:6f:1f:49:27:48:39:23:83:8f:f8:00:
         a6:09:b5:2b:2d:ed:e7:f5:4e:88:06:45:45:25:d3:ca:64:1e:
         df:93:a3:c9:dd:75:97:54:8e:ba:b7:c0:cb:1e:e8:e5:2b:66:
         57:49:a9:25:86:77:84:6f:7b:36:c3:44:41:ac:8b:e7:92:04:
         96:2b:f1:39:dd:d0:79:cf:e2:43:2a:12:89:3c:a8:3a:fe:e5:
         5c:5c:80:82:6e:39:49:ae:fe:22:08:ca:10:ce:62:fb:29:1b:
         93:02:8e:27:5e:da:d0:a8:56:b2:2c:e8:5c:51:9e:00:e1:be:
         07:d1:67:ec:3a:1c:0c:e4:9e:82:63:20:5b:16:c0:47:34:78:
         0d:74:5f:b2:41:a3:30:43:5e:86:27:fb:df:91:2b:ed:7c:e0:
         d0:ea:fe:a1:6b:92:f2:97:99:f7:9b:25:55:05:b6:ce:f5:59:
         13:0d:34:92:f1:60:6a:b5:0a:df:91:e5:71:d3:89:39:d8:77:
         82:05:e6:1f:d9:99:b8:e8:77:9d:a8:45:f1:d9:08:89:7b:04:
         ac:fb:d8:2b:57:41:9c:a7:54:8d:84:9a:6b:1f:b3:60:85:11:
         ef:b7:a7:53
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUBpuCkRjeGRvD/un0721BWXbA/K4wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm
NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjUwOTExMDcyNDQ1WhcNMjYwOTEwMDcyOTQ1
WjAzMTEwLwYDVQQDEyg1MTJGQzc1NDEwQUI2NzFDMTVEMTE2MzFDODhENUVGNERF
RDI5NkRCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAma8dPZZEowMZ
kTzGo4Edboo29PbMhzjor60Kgp2hXKIm0gU5ZMh4MxFQCF3SEW34q45kg9T1Hnnn
SdcjIxyOBM3nP6hNChs7q+RGLNuh4UNHpq9GL7j7bdrDObeWVP4ZiLLbLqj5wUcb
ky+k/Io7q8Hh1Z/jPiwDxYhh+JlCsP0U+R3v4Jl5q+6uMYgS1CD4uiku5qVuJihZ
i1GY4ZAO09dKR1EsImupn1kICD/Y5c+d10bQVY4fB2zvOt5KAtLboK+zf03itZ7u
ddXg9kFmBy04uOhqREEDtWb27+WevUq2zytL/VYOvpwPRiQwx3ZwLl++4eNDll73
BeHXKQmQRQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFFEvx1QQq2ccFdEWMciNXvTe
0pbbMB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv
MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl
ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy
YzFiMTllMGM1ZS8wLzMxMzYzMjJlMzIzMTM3MmUzMjM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzczMDMyMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACi2RkwDQYJKoZIhvcNAQELBQAD
ggEBAExu4/cHtpx9dfyu/ZYjpqUQootxQziFg+FvH0knSDkjg4/4AKYJtSst7ef1
TogGRUUl08pkHt+To8nddZdUjrq3wMse6OUrZldJqSWGd4RvezbDREGsi+eSBJYr
8Tnd0HnP4kMqEok8qDr+5VxcgIJuOUmu/iIIyhDOYvspG5MCjide2tCoVrIs6FxR
ngDhvgfRZ+w6HAzknoJjIFsWwEc0eA10X7JBozBDXoYn+9+RK+184NDq/qFrkvKX
mfebJVUFts71WRMNNJLxYGq1Ct+R5XHTiTnYd4IF5h/Zmbjod52oRfHZCIl7BKz7
2CtXQZynVI2Emmsfs2CFEe+3p1M=
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:40:07 2025 by rpki-client