Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa
File:                     AS137235.roa (raw, json)
Hash identifier:          xBiZT/cIpl1Z/D5Pk14HJunO3+/qwl/DiHOlgsaHqnM=
Subject key identifier:   FE:46:6C:9D:EA:45:96:D5:E6:DF:61:73:65:63:0E:AA:A8:46:99:6A
Certificate issuer:       /CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
Certificate serial:       3CF7B1C86DB716AB549D93D4888F555BFB94D65D
Authority key identifier: 5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa
Signing time:             Tue 09 Sep 2025 12:29:45 +0000
ROA not before:           Tue 09 Sep 2025 12:24:45 +0000
ROA not after:            Tue 08 Sep 2026 12:29:45 +0000
asID:                     137235
IP address blocks:        192.228.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:43:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f7:b1:c8:6d:b7:16:ab:54:9d:93:d4:88:8f:55:5b:fb:94:d6:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed
        Validity
            Not Before: Sep  9 12:24:45 2025 GMT
            Not After : Sep  8 12:29:45 2026 GMT
        Subject: CN=FE466C9DEA4596D5E6DF617365630EAAA846996A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:8f:0a:ac:50:f1:11:41:52:5c:47:ec:a5:2b:
                    30:82:38:91:6f:48:49:87:e4:79:72:4e:0a:17:00:
                    c1:13:ae:b4:7b:4c:b8:9c:46:a2:39:c8:ae:42:a2:
                    2e:54:7d:ee:88:89:0b:8b:0d:f9:cd:97:93:98:a5:
                    c2:9c:0d:76:c6:d9:b6:bf:69:59:ef:ee:ba:d7:cb:
                    df:39:42:90:58:90:4b:27:56:b0:6a:66:95:7c:55:
                    75:d2:9b:a8:16:41:a1:c4:35:6b:48:84:ca:42:02:
                    50:b3:1d:1b:94:84:02:d9:60:22:4c:72:f3:dc:e5:
                    ac:75:ec:70:9b:ee:e0:8b:e0:2e:a0:6c:1f:51:5c:
                    a5:c4:1e:f0:ed:59:80:c6:bc:bf:26:d4:35:cd:18:
                    54:42:b5:f4:d8:7f:f6:b5:d8:d7:f4:bb:0b:19:ee:
                    77:c3:7b:07:44:c9:24:73:92:7a:44:81:57:00:76:
                    e2:ee:fc:be:84:48:7c:1e:46:63:84:7d:ca:00:91:
                    2a:35:a4:6e:58:f0:60:d3:03:ea:ff:7a:30:bf:ba:
                    18:9e:ac:8c:a5:4d:54:78:0d:33:0a:9c:f9:62:46:
                    59:40:66:b2:dd:f6:23:7a:bf:7a:70:8a:c1:18:65:
                    f6:24:00:09:7b:3e:46:4c:ae:89:84:4c:c9:53:01:
                    47:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:46:6C:9D:EA:45:96:D5:E6:DF:61:73:65:63:0E:AA:A8:46:99:6A
            X509v3 Authority Key Identifier:
                keyid:5B:40:D3:73:D6:71:7C:70:4C:48:3C:A0:65:8C:FB:52:57:C4:E9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/5B40D373D6717C704C483CA0658CFB5257C4E93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/2bd0fac6-1a46-40b5-be66-9e0f7b54df77/44da5d103277c937c53dce305bd9d79c2ba79425357bb56eed.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf620182113eea490d33/1/AS137235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:c1:31:f5:88:41:f4:ef:0d:2d:1a:71:db:0d:b8:35:dd:83:
         6f:3d:8b:93:21:ac:d5:b9:22:06:fc:98:f5:f5:d5:7e:ad:42:
         62:f6:44:48:54:a1:98:ae:e9:05:9d:e8:92:19:7a:2c:dc:ff:
         39:b6:7d:c5:ad:e0:87:e0:ac:b9:f8:99:d5:c1:a5:0c:12:cb:
         e1:d2:b6:b4:f5:18:a3:4e:3b:76:61:66:79:f1:de:c4:ea:77:
         52:24:f6:9e:c6:5a:7a:fa:1d:09:5b:63:1e:b4:57:a8:c9:73:
         c8:5a:03:24:48:ed:14:b8:b8:40:76:a4:7a:2c:f7:da:60:df:
         19:af:41:f6:4f:75:f3:ee:ad:fe:03:f2:58:ef:9d:94:4a:f3:
         53:50:e3:8b:a9:3b:1a:3e:ac:3d:5b:b3:77:d5:b6:e5:cb:37:
         8b:e3:6c:3f:cc:b0:3a:36:a0:f5:09:ea:49:e4:57:91:fe:ab:
         6e:40:d9:8b:9d:21:a0:07:f1:10:b4:fb:79:0b:e3:dc:07:f9:
         79:fc:8c:11:4e:83:02:58:03:a1:7c:db:5f:01:5f:87:ac:63:
         50:96:44:f6:63:34:a7:22:7b:59:1b:c9:2a:ef:40:c3:6a:09:
         84:31:a6:c0:b0:8c:18:dd:00:1d:c9:d0:92:cc:5d:5a:c8:44:
         4c:be:fd:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:05 2025 by rpki-client