Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32322d3234203d3e203631313338.roa
File:                     3231362e37332e3135362e302f32322d3234203d3e203631313338.roa (raw, json)
Hash identifier:          CR4oC3ndAc2vnQMqH3I7eeFoKHcnYPGnK3DZhr+9fz4=
Subject key identifier:   CB:1E:18:17:50:10:0F:D4:1B:03:0B:BD:83:70:37:96:1B:B5:59:39
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       64381C61278259BEAEF7C1D69B10CC2AB2799967
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32322d3234203d3e203631313338.roa
Signing time:             Tue 07 Oct 2025 03:53:46 +0000
ROA not before:           Tue 07 Oct 2025 03:48:46 +0000
ROA not after:            Tue 06 Oct 2026 03:53:46 +0000
asID:                     61138
IP address blocks:        216.73.156.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 Oct 2025 07:02:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:38:1c:61:27:82:59:be:ae:f7:c1:d6:9b:10:cc:2a:b2:79:99:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Oct  7 03:48:46 2025 GMT
            Not After : Oct  6 03:53:46 2026 GMT
        Subject: CN=CB1E181750100FD41B030BBD837037961BB55939
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:65:e2:f8:58:24:6f:58:86:df:19:ea:33:6e:
                    7b:6c:fc:ca:eb:4b:c7:4f:93:1f:d1:16:92:31:b0:
                    a0:b9:43:2a:13:77:72:e9:68:e6:2f:5a:28:76:07:
                    42:67:a4:54:11:88:31:b8:49:63:6a:26:0d:53:26:
                    aa:15:83:40:30:2f:b4:18:21:e2:3b:34:bd:66:2f:
                    7d:7e:77:b1:12:da:81:43:ba:b4:ce:ad:e5:fa:ce:
                    52:d2:45:0b:1e:25:0e:b5:13:a1:bc:8e:ba:73:42:
                    54:80:ee:70:85:c9:9d:b8:ab:bd:80:3d:f2:9f:93:
                    e7:55:95:56:42:a9:4c:95:6d:16:9c:23:18:c9:a5:
                    18:aa:f4:eb:c3:0f:b3:36:91:d7:66:c9:47:86:89:
                    59:bc:d3:92:ff:3f:ff:95:2d:a3:53:3e:08:35:36:
                    82:43:77:f9:c3:72:62:6d:7f:8a:33:6b:a0:16:a2:
                    5f:96:98:6e:c6:ea:f7:6b:c3:0d:f7:90:77:1b:54:
                    d1:8b:ef:17:2c:98:54:a0:d4:96:3e:ba:99:be:72:
                    eb:3a:f7:33:db:dc:39:3a:9b:a6:c8:1e:1e:96:89:
                    4a:04:4f:0e:22:f7:18:bc:ae:68:9d:dd:63:a5:0b:
                    17:37:0a:d4:aa:df:7b:56:13:58:5a:1e:10:81:e9:
                    9d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1E:18:17:50:10:0F:D4:1B:03:0B:BD:83:70:37:96:1B:B5:59:39
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135362e302f32322d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:8b:09:c4:db:33:be:67:b0:06:bf:2d:0a:ae:d0:3a:04:f4:
         c9:1a:19:1d:be:8a:52:4a:1a:a1:b7:fb:b3:97:f2:29:ca:0e:
         f2:9f:35:9b:e9:e0:1e:d2:76:0c:0b:ec:09:ac:fc:96:6f:af:
         d5:85:ea:d3:6f:30:7b:08:cb:bf:ee:55:b7:f1:e3:cd:7e:8e:
         c5:12:35:66:a3:75:01:f5:cd:d0:a2:84:6e:1d:37:41:71:96:
         45:b9:fe:ac:5b:4b:bd:e1:d6:3d:82:10:87:3a:e3:54:d2:f4:
         00:b3:f3:0f:99:c5:51:68:ba:a4:a5:ce:d4:65:2e:12:f9:14:
         89:40:1b:c9:ca:ba:b0:bd:56:47:86:c0:6c:a0:db:58:b1:01:
         3b:63:fe:8a:69:04:df:2c:0b:4e:9d:a8:4b:d7:63:8b:50:af:
         6c:73:09:62:28:ae:d9:18:3f:7d:3d:f3:9d:58:ff:4c:8f:a1:
         1f:87:5c:d0:d1:2b:e8:5f:0f:7f:07:61:77:8d:cf:19:c0:ec:
         83:e5:b1:8e:17:0a:74:dc:eb:f0:71:f7:a5:59:66:2a:7d:2f:
         e4:7f:85:06:52:ea:a2:57:51:82:93:bb:a3:0d:f6:68:65:35:
         c5:24:30:40:af:b2:f3:94:b3:3f:28:8a:d6:87:04:01:f0:c7:
         ed:7a:11:0b
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUZDgcYSeCWb6u98HWmxDMKrJ5mWcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjUxMDA3MDM0ODQ2WhcNMjYxMDA2MDM1MzQ2
WjAzMTEwLwYDVQQDEyhDQjFFMTgxNzUwMTAwRkQ0MUIwMzBCQkQ4MzcwMzc5NjFC
QjU1OTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA82Xi+Fgkb1iG
3xnqM257bPzK60vHT5Mf0RaSMbCguUMqE3dy6WjmL1oodgdCZ6RUEYgxuEljaiYN
UyaqFYNAMC+0GCHiOzS9Zi99fnexEtqBQ7q0zq3l+s5S0kULHiUOtROhvI66c0JU
gO5whcmduKu9gD3yn5PnVZVWQqlMlW0WnCMYyaUYqvTrww+zNpHXZslHholZvNOS
/z//lS2jUz4INTaCQ3f5w3JibX+KM2ugFqJflphuxur3a8MN95B3G1TRi+8XLJhU
oNSWPrqZvnLrOvcz29w5OpumyB4elolKBE8OIvcYvK5ond1jpQsXNwrUqt97VhNY
Wh4QgemdVQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFMseGBdQEA/UGwMLvYNwN5Yb
tVk5MB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMyMzEzNjJlMzczMzJlMzEzNTM2MmUzMDJmMzIzMjJkMzIz
NDIwM2QzZTIwMzYzMTMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAthJnDANBgkqhkiG9w0BAQsF
AAOCAQEAb4sJxNszvmewBr8tCq7QOgT0yRoZHb6KUkoaobf7s5fyKcoO8p81m+ng
HtJ2DAvsCaz8lm+v1YXq028wewjLv+5Vt/HjzX6OxRI1ZqN1AfXN0KKEbh03QXGW
Rbn+rFtLveHWPYIQhzrjVNL0ALPzD5nFUWi6pKXO1GUuEvkUiUAbycq6sL1WR4bA
bKDbWLEBO2P+imkE3ywLTp2oS9dji1CvbHMJYiiu2Rg/fT3znVj/TI+hH4dc0NEr
6F8Pfwdhd43PGcDsg+WxjhcKdNzr8HH3pVlmKn0v5H+FBlLqoldRgpO7ow32aGU1
xSQwQK+y85SzPyiK1ocEAfDH7XoRCw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 12:11:36 2025 by rpki-client