Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33312e302f32342d3234203d3e203139303339.roa
File:                     3136322e3231372e33312e302f32342d3234203d3e203139303339.roa (raw, json)
Hash identifier:          uLBYBp02eq/NtCzJehZWfjmO68RWgvr78m2X+ujhcOg=
Subject key identifier:   C8:A1:B9:46:FE:08:67:2C:39:7C:D8:46:67:13:31:F1:F7:0D:C1:D1
Certificate issuer:       /CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
Certificate serial:       624C95881A470A76A6BB7BA499A269C6C017D4F9
Authority key identifier: 10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33312e302f32342d3234203d3e203139303339.roa
Signing time:             Thu 11 Sep 2025 07:29:45 +0000
ROA not before:           Thu 11 Sep 2025 07:24:45 +0000
ROA not after:            Thu 10 Sep 2026 07:29:45 +0000
asID:                     19039
IP address blocks:        162.217.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/d7058b26-d77c-4005-8cb8-f5876d4c0d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 04:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4c:95:88:1a:47:0a:76:a6:bb:7b:a4:99:a2:69:c6:c0:17:d4:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a
        Validity
            Not Before: Sep 11 07:24:45 2025 GMT
            Not After : Sep 10 07:29:45 2026 GMT
        Subject: CN=C8A1B946FE08672C397CD846671331F1F70DC1D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3e:97:2b:7a:ef:0d:30:d6:30:dd:78:55:fd:
                    ed:11:e0:e6:6d:48:c1:3a:3b:86:48:99:da:a8:dd:
                    87:8e:2f:36:95:03:f1:0d:00:87:4d:c8:37:0f:00:
                    95:bc:31:e1:2a:31:1c:0f:c8:f8:23:20:b6:fc:a0:
                    e3:e4:71:2c:d5:6d:78:8e:4a:74:e0:cd:df:50:ca:
                    99:e2:e5:3e:1b:1a:96:15:d4:35:b3:dc:25:88:dd:
                    9f:c0:0c:0b:f0:9a:16:a0:8d:ad:7a:7d:b5:75:e1:
                    9e:a2:ef:d6:aa:2f:50:f4:cd:8b:04:5f:6b:5a:06:
                    69:37:e5:4e:eb:13:67:ba:fa:97:8a:db:90:29:13:
                    4e:bd:32:ab:26:91:87:45:11:95:7c:be:b3:58:27:
                    e9:3a:11:d3:6f:21:67:7b:ac:f1:2a:90:27:bc:a1:
                    33:e7:74:07:99:83:09:16:b1:82:67:4e:a4:a4:a1:
                    e9:6d:a5:a3:70:98:71:a6:1a:7d:dd:f8:c7:0b:fa:
                    84:5c:41:bb:b3:db:21:45:56:d0:62:1c:f0:c0:ec:
                    d4:f2:f3:28:a7:60:c1:36:47:b0:69:9b:bf:ef:65:
                    c3:6b:5a:da:27:a3:1e:d6:a5:8a:ab:98:1f:c8:eb:
                    0e:34:9f:0a:e8:52:5d:e8:1c:7d:e5:4a:37:0a:be:
                    0c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A1:B9:46:FE:08:67:2C:39:7C:D8:46:67:13:31:F1:F7:0D:C1:D1
            X509v3 Authority Key Identifier:
                keyid:10:87:0E:4C:11:D9:CA:AE:10:65:BF:FB:2A:E0:D9:CF:45:5C:1C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/10870E4C11D9CAAE1065BFFB2AE0D9CF455C1CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d7058b26-d77c-4005-8cb8-f5876d4c0d15/351eed99ff4398ae146cfa3319c768c0f7700db77f30196f6a.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8baa579c018bb2c1b19e0c5e/0/3136322e3231372e33312e302f32342d3234203d3e203139303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.217.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:7e:f5:5c:3b:79:2f:df:0a:74:56:91:63:45:d8:f6:6e:4a:
         a9:df:e3:ec:30:3e:a2:01:4e:e3:dc:26:d1:6d:aa:b5:48:df:
         c8:2b:b6:53:1f:78:77:72:8d:f0:3e:05:ac:e7:99:42:01:b7:
         61:00:2f:f8:ec:45:65:c6:dc:e2:08:e6:25:2c:80:7e:18:01:
         80:6a:71:68:16:04:e0:10:b6:d6:85:70:b4:05:89:ec:00:c4:
         fb:85:e0:2f:4f:03:7f:83:1b:95:bf:19:e4:42:b8:79:86:25:
         6c:eb:8f:14:ea:26:b2:69:59:5a:02:a1:b7:6a:eb:c3:d4:52:
         a6:e1:d2:be:20:7f:31:1f:88:cc:6c:2b:29:e7:dc:7c:06:8e:
         1c:21:d9:0b:08:09:c7:70:90:c7:6c:41:f1:bc:b5:7a:03:93:
         c2:ef:88:d2:a7:15:a2:a0:9b:80:eb:a7:ca:10:6c:6e:37:a8:
         c0:bb:6c:18:75:1a:6f:13:91:b9:5d:d0:c5:42:e6:58:d1:e8:
         b4:c9:62:c1:25:3d:29:60:d0:95:a7:d7:09:e6:de:ad:b8:c5:
         1c:c4:9c:b2:91:c5:8c:12:90:ec:9e:87:f1:09:1c:dd:fd:ec:
         c3:3b:f7:4c:81:77:37:b8:e8:ed:56:83:f3:b4:84:de:82:fc:
         2b:57:d2:72
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUYkyViBpHCnamu3ukmaJpxsAX1PkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMzUxZWVkOTlmZjQzOThhZTE0NmNmYTMzMTljNzY4YzBm
NzcwMGRiNzdmMzAxOTZmNmEwHhcNMjUwOTExMDcyNDQ1WhcNMjYwOTEwMDcyOTQ1
WjAzMTEwLwYDVQQDEyhDOEExQjk0NkZFMDg2NzJDMzk3Q0Q4NDY2NzEzMzFGMUY3
MERDMUQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT6XK3rvDTDW
MN14Vf3tEeDmbUjBOjuGSJnaqN2Hji82lQPxDQCHTcg3DwCVvDHhKjEcD8j4IyC2
/KDj5HEs1W14jkp04M3fUMqZ4uU+GxqWFdQ1s9wliN2fwAwL8JoWoI2ten21deGe
ou/Wqi9Q9M2LBF9rWgZpN+VO6xNnuvqXituQKRNOvTKrJpGHRRGVfL6zWCfpOhHT
byFne6zxKpAnvKEz53QHmYMJFrGCZ06kpKHpbaWjcJhxphp93fjHC/qEXEG7s9sh
RVbQYhzwwOzU8vMop2DBNkewaZu/72XDa1raJ6Me1qWKq5gfyOsONJ8K6FJd6Bx9
5Uo3Cr4MJQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMihuUb+CGcsOXzYRmcTMfH3
DcHRMB8GA1UdIwQYMBaAFBCHDkwR2cquEGW/+yrg2c9FXBzbMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGJhYTU3OWMwMThiYjJjMWIxOWUwYzVlLzAv
MTA4NzBFNEMxMUQ5Q0FBRTEwNjVCRkZCMkFFMEQ5Q0Y0NTVDMUNEQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvODcxZGE0MGYtNzkzYS00YTQ1LWEwYTktOTc4MTQ4
MzIxYTA3L2Q3MDU4YjI2LWQ3N2MtNDAwNS04Y2I4LWY1ODc2ZDRjMGQxNS8zNTFl
ZWQ5OWZmNDM5OGFlMTQ2Y2ZhMzMxOWM3NjhjMGY3NzAwZGI3N2YzMDE5NmY2YS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThiYWE1NzljMDE4YmIy
YzFiMTllMGM1ZS8wLzMxMzYzMjJlMzIzMTM3MmUzMzMxMmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzOTMwMzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAKLZHzANBgkqhkiG9w0BAQsF
AAOCAQEAhH71XDt5L98KdFaRY0XY9m5Kqd/j7DA+ogFO49wm0W2qtUjfyCu2Ux94
d3KN8D4FrOeZQgG3YQAv+OxFZcbc4gjmJSyAfhgBgGpxaBYE4BC21oVwtAWJ7ADE
+4XgL08Df4Mblb8Z5EK4eYYlbOuPFOomsmlZWgKht2rrw9RSpuHSviB/MR+IzGwr
KefcfAaOHCHZCwgJx3CQx2xB8by1egOTwu+I0qcVoqCbgOunyhBsbjeowLtsGHUa
bxORuV3QxULmWNHotMliwSU9KWDQlafXCeberbjFHMScspHFjBKQ7J6H8Qkc3f3s
wzv3TIF3N7jo7VaD87SE3oL8K1fScg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 10:29:20 2025 by rpki-client