Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333937323833.roa
File:                     3231362e3135312e3136342e302f32332d3233203d3e20333937323833.roa (raw, json)
Hash identifier:          gHAp8Fike5skvuWT3D/Fgu0idivPIpxJQO7Ylcf7esM=
Subject key identifier:   CB:EF:1A:B6:73:C6:96:2B:97:DF:48:B1:EC:36:DA:6D:3F:15:0F:5D
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       0B134C2FB78A097E9FA9FB4CBF74BA22EDC0C9A8
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333937323833.roa
Signing time:             Wed 13 Aug 2025 10:29:44 +0000
ROA not before:           Wed 13 Aug 2025 10:24:44 +0000
ROA not after:            Wed 12 Aug 2026 10:29:44 +0000
asID:                     397283
IP address blocks:        216.151.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 08:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:13:4c:2f:b7:8a:09:7e:9f:a9:fb:4c:bf:74:ba:22:ed:c0:c9:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Aug 13 10:24:44 2025 GMT
            Not After : Aug 12 10:29:44 2026 GMT
        Subject: CN=CBEF1AB673C6962B97DF48B1EC36DA6D3F150F5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:c1:f7:df:cc:80:02:ce:5c:27:c3:24:8c:
                    c4:bf:e7:1b:db:fd:3a:00:26:25:65:58:3e:e2:fd:
                    17:6d:ae:26:66:10:22:9f:d3:8c:33:8d:84:52:36:
                    7a:8e:a5:f7:44:be:9e:d5:13:2d:2e:20:9a:83:6a:
                    d8:e3:c3:63:99:22:16:de:89:7f:e7:9d:46:09:7e:
                    61:3b:2c:35:82:a4:c9:0b:c0:a3:a4:b8:aa:02:6b:
                    8c:dd:a2:b2:e2:05:c7:d2:2e:b4:5c:c2:b0:c3:7f:
                    99:90:a7:7b:1a:2d:93:5c:bd:cd:88:ee:64:c1:c1:
                    ae:41:04:df:03:5f:26:19:78:74:4e:da:8d:91:36:
                    32:20:1c:17:23:0b:d3:3e:e8:d9:53:8f:48:1b:3b:
                    fc:87:72:01:50:98:2e:1c:fd:ee:c5:12:86:bf:f1:
                    73:35:d0:ff:6c:3f:d1:0f:41:37:45:7e:23:74:6e:
                    c2:c3:1a:2f:c5:0e:42:fd:33:91:42:9c:96:7d:9e:
                    ca:eb:fa:bb:34:12:f9:08:f3:52:d4:f2:84:32:70:
                    96:56:5a:80:fd:d4:1a:35:f6:49:03:7e:f4:ae:f4:
                    5b:f7:fe:27:93:ff:08:db:ac:0e:45:eb:1f:9e:7d:
                    d3:3b:dd:b5:8a:2c:b1:97:b5:b4:64:ff:b3:4e:82:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:EF:1A:B6:73:C6:96:2B:97:DF:48:B1:EC:36:DA:6D:3F:15:0F:5D
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333937323833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:3d:ab:5d:f3:fd:53:80:e9:21:9b:b4:81:61:86:21:3b:85:
         6f:a8:5a:21:88:8e:31:1f:bf:34:fe:9e:76:a9:cf:4a:f0:04:
         36:af:51:8c:f0:0d:3c:81:81:a8:2d:58:47:7b:9a:75:6f:1f:
         fe:3a:cc:6a:9e:c4:12:5d:31:ce:fe:ee:ae:4a:73:30:cc:40:
         71:d8:39:be:ec:6d:e3:38:35:8f:63:9d:a6:9c:bd:33:83:51:
         58:b8:69:2c:3c:1a:b5:63:87:5b:00:f7:db:3f:d6:dc:91:92:
         d4:4a:a3:7c:3c:b6:4a:21:21:ee:d1:1d:d1:61:fc:34:d9:b8:
         d9:65:2f:b4:2f:a9:ed:f8:e4:53:0e:34:67:3a:46:b8:43:33:
         ea:1c:57:c3:64:43:64:cd:e9:b4:a6:77:85:e3:88:c7:ec:48:
         39:0d:e6:87:5d:9c:06:c3:b4:30:d8:07:da:c0:3d:ec:1b:76:
         b2:85:8a:06:35:78:69:20:e3:9a:42:2e:a6:c8:79:00:cc:a9:
         84:03:fb:34:b5:72:c7:e1:ab:9a:4d:e9:9e:5f:c0:99:8e:2b:
         a4:7d:7e:e6:10:18:c8:09:6e:6a:8a:93:5d:47:03:f0:91:98:
         a2:2a:ab:21:42:b9:56:88:d5:d9:13:f0:ea:71:bc:8a:ec:bb:
         8f:1a:95:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:01:41 2025 by rpki-client