Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333335.roa
File:                     3231362e3135312e3136322e302f32342d3234203d3e20323132333335.roa (raw, json)
Hash identifier:          prI0cRKXhJCE4SoISFX4YmwkoNBT2jNoj8R6++oGlnE=
Subject key identifier:   DF:21:1E:D3:08:8A:8E:34:AB:21:51:23:94:E8:B0:E8:A4:B4:EB:02
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       79586204AB8329840AD5AC73240F9D81C3BAA5E4
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333335.roa
Signing time:             Wed 20 Aug 2025 07:47:24 +0000
ROA not before:           Wed 20 Aug 2025 07:42:24 +0000
ROA not after:            Wed 19 Aug 2026 07:47:24 +0000
asID:                     212335
IP address blocks:        216.151.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:58:62:04:ab:83:29:84:0a:d5:ac:73:24:0f:9d:81:c3:ba:a5:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Aug 20 07:42:24 2025 GMT
            Not After : Aug 19 07:47:24 2026 GMT
        Subject: CN=DF211ED3088A8E34AB21512394E8B0E8A4B4EB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:60:d6:93:26:2d:02:dc:65:25:6c:22:b6:6e:
                    6a:ef:09:97:9a:11:7a:1f:cf:22:d3:c1:b1:2b:55:
                    c1:ba:ed:c1:88:34:43:1f:ee:66:79:48:af:bd:10:
                    a1:bf:b4:49:41:d8:28:23:c9:5c:e7:f2:5f:0e:b5:
                    4a:fc:eb:75:94:a7:01:72:c6:59:60:5b:2d:61:ac:
                    37:05:3d:f9:e7:8c:1d:6a:ce:b2:06:b0:2e:ff:77:
                    36:78:dd:91:93:a0:b2:8e:f0:4a:a2:23:d4:6a:a5:
                    a8:76:83:3c:61:30:de:21:f0:a6:7c:84:a7:f9:5c:
                    3c:a3:22:ef:7b:50:88:ca:86:ba:02:1b:e1:ad:e6:
                    8b:e0:2a:2a:a9:d0:73:1e:ea:3c:02:a1:e7:5a:6b:
                    20:d9:90:ff:14:e6:4c:ee:9f:42:d6:18:01:ee:32:
                    de:43:47:8f:1b:18:3e:fa:75:82:30:01:6b:e2:e6:
                    8f:8d:91:d3:40:6f:56:4c:ed:25:84:93:9c:28:98:
                    58:3e:d0:9a:8b:cb:95:ef:e4:10:15:5e:62:21:84:
                    4e:58:91:fa:86:df:08:9d:ab:af:d9:e6:71:e9:02:
                    d2:a5:11:83:33:be:95:63:4c:4c:92:96:87:17:53:
                    b5:b2:b2:f6:26:6d:cd:45:e1:3c:28:2a:85:7b:0a:
                    1d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:21:1E:D3:08:8A:8E:34:AB:21:51:23:94:E8:B0:E8:A4:B4:EB:02
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:16:01:17:c3:f0:cf:47:7c:f3:86:98:0b:c9:e9:f8:78:ac:
         a9:e7:66:56:0a:ac:29:dc:b8:f5:67:7b:95:6f:a9:f3:18:c9:
         99:49:00:62:7c:3b:f9:cc:8f:cd:97:e0:00:a4:29:57:25:0b:
         9d:0d:23:9c:2d:23:67:1d:9f:e7:90:6b:82:df:25:60:7b:90:
         b7:2f:e7:b0:a6:95:1e:3f:23:fb:2e:32:db:cb:a3:f4:87:e8:
         41:08:50:32:59:f4:20:46:ad:e4:2e:30:08:ac:3a:22:76:3b:
         ad:33:c7:be:68:06:6d:95:af:a0:77:98:ed:36:2c:af:8b:75:
         11:30:15:37:a3:96:df:8a:3c:f1:58:f8:1e:70:56:09:35:ac:
         e4:bf:ed:54:8e:68:cb:8e:6d:45:7a:2c:b6:ed:37:df:03:2e:
         20:ac:08:02:fe:06:16:fd:74:4f:38:f2:7a:24:2c:77:1a:c9:
         e1:fa:7e:8d:33:0e:60:20:61:7f:16:1a:dc:e5:38:6b:db:b0:
         bc:74:88:03:c5:89:b7:ee:c7:93:b5:ad:65:83:6d:51:f0:84:
         10:2a:9f:48:16:e1:f7:0c:dd:c9:d9:23:2f:d3:52:51:92:64:
         7c:07:a8:75:75:f8:df:80:66:6f:b7:a3:30:72:43:9e:31:75:
         35:a5:15:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:45 2025 by rpki-client