Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa
File:                     3136322e3231372e33302e302f32342d3234203d3e203139303339.roa (raw, json)
Hash identifier:          Z4LcmtUKYlrMBdmtBXI79xB/9ZGg6rCqWjqg8rBi2GA=
Subject key identifier:   5E:0B:F9:CB:3A:CE:05:FA:39:9A:D3:B6:8E:72:AE:66:44:D3:1C:3B
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       6E44448F260501BB97AA901F9643959CBF4B0AA0
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa
Signing time:             Thu 11 Sep 2025 07:29:45 +0000
ROA not before:           Thu 11 Sep 2025 07:24:45 +0000
ROA not after:            Thu 10 Sep 2026 07:29:45 +0000
asID:                     19039
IP address blocks:        162.217.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:44:44:8f:26:05:01:bb:97:aa:90:1f:96:43:95:9c:bf:4b:0a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Sep 11 07:24:45 2025 GMT
            Not After : Sep 10 07:29:45 2026 GMT
        Subject: CN=5E0BF9CB3ACE05FA399AD3B68E72AE6644D31C3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6a:24:32:39:fd:02:a5:eb:10:b9:cf:b3:1a:
                    68:39:b3:1c:a4:ef:3d:60:78:e5:b0:8a:c1:4a:0b:
                    42:fc:5e:27:d9:92:ef:ba:b0:ef:fe:2f:f7:89:87:
                    6c:b8:5f:75:09:c6:c9:58:9c:aa:46:f6:2f:14:79:
                    51:d4:aa:8f:0b:3e:29:8f:a9:8d:b6:eb:98:00:e6:
                    7f:01:dd:3f:b2:59:de:2d:49:d4:e8:4e:90:44:fc:
                    5e:6d:bc:86:19:ab:46:8d:ae:36:0f:1c:7a:77:db:
                    59:07:d5:9c:fd:28:20:89:79:9b:11:d0:f9:21:97:
                    67:26:86:21:a7:c4:3c:01:85:a3:af:e1:8f:87:d0:
                    13:62:81:45:af:50:d4:d8:93:5d:06:d7:0b:b3:3e:
                    ab:21:c3:81:1c:0a:d8:7e:8c:09:4c:76:96:47:d1:
                    27:a7:14:84:46:f6:6b:80:8b:fe:c7:49:e8:fb:5c:
                    d2:14:44:11:fc:3a:fb:40:25:b0:f6:d3:c4:23:ca:
                    52:d4:71:5c:d7:0b:65:eb:d5:00:43:b5:52:bd:96:
                    42:08:3e:e9:ee:0b:d7:c0:c8:41:9b:87:ef:ee:8b:
                    64:d5:59:22:a6:88:2c:7c:e7:a3:b5:cd:19:53:a9:
                    06:94:fd:5f:28:db:70:15:f3:e0:77:cc:76:a7:ac:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:0B:F9:CB:3A:CE:05:FA:39:9A:D3:B6:8E:72:AE:66:44:D3:1C:3B
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33302e302f32342d3234203d3e203139303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:9a:ac:1d:fb:06:74:de:5d:89:17:c3:77:2c:03:90:ec:a9:
         35:cf:8d:7b:c3:99:66:ff:02:a6:ff:8a:b3:38:17:59:ff:0a:
         96:40:7a:44:16:b8:97:eb:85:12:b7:d8:5b:d2:22:4c:33:96:
         43:a2:0b:96:98:76:9d:48:2c:b4:1d:88:b8:e3:0c:63:54:1d:
         e5:37:4b:5c:58:11:bf:b4:08:94:47:44:14:dd:7a:fa:4d:2a:
         1f:53:54:25:12:11:90:f2:e2:b4:8d:f7:26:4e:d4:84:02:98:
         0d:5b:2a:60:64:d1:7a:7a:c4:b8:e6:15:78:cf:bc:f3:98:98:
         fe:ce:86:a1:2f:52:d0:57:78:3a:5f:a9:cc:03:2f:d3:cf:99:
         68:e2:84:f0:b1:69:89:e2:8e:35:e2:d5:29:44:53:58:c4:12:
         0a:df:34:3e:f2:98:30:fa:ba:1c:44:32:da:bb:dc:28:d8:7e:
         20:08:65:5c:d5:e1:73:e2:0f:d8:81:f0:dc:ae:4c:e6:00:71:
         bf:aa:87:3a:f1:e1:d8:c0:c0:50:b6:27:33:e7:fd:0a:ab:a4:
         2d:5c:e7:9b:8d:75:75:36:7e:30:27:e4:e5:8b:3c:6c:c7:71:
         52:36:4d:32:0c:4c:df:b6:2c:8b:62:87:4b:b0:1f:22:ec:ce:
         25:a4:b3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:34:20 2025 by rpki-client