Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa
File:                     3231362e37332e3135392e302f32342d3234203d3e203631313338.roa (raw, json)
Hash identifier:          47EzNiDzaKTXswtNZZbuM3wBpxoloXdQXV7Hugl6304=
Subject key identifier:   7A:40:2D:16:5D:08:4A:E0:21:F3:0B:96:F7:B1:9B:01:E7:EB:4D:CB
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       721F9082A2A42B08BE937D41182BB39E5B26FE42
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa
Signing time:             Tue 07 Oct 2025 03:53:46 +0000
ROA not before:           Tue 07 Oct 2025 03:48:46 +0000
ROA not after:            Tue 06 Oct 2026 03:53:46 +0000
asID:                     61138
IP address blocks:        216.73.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:56:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1f:90:82:a2:a4:2b:08:be:93:7d:41:18:2b:b3:9e:5b:26:fe:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Oct  7 03:48:46 2025 GMT
            Not After : Oct  6 03:53:46 2026 GMT
        Subject: CN=7A402D165D084AE021F30B96F7B19B01E7EB4DCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ee:ec:70:4a:93:17:49:2d:4a:4e:22:d6:37:
                    72:b8:0b:74:f2:6b:f6:c6:64:92:79:7d:91:28:60:
                    0f:e7:e5:14:fa:7e:39:bc:6b:79:fe:96:a8:e6:65:
                    7e:8f:90:b5:ac:2f:1b:60:3c:4c:9d:15:60:03:a6:
                    32:9f:d4:16:7a:43:24:c8:66:d0:74:92:4e:e6:11:
                    3d:b2:a8:e7:aa:29:e1:2f:28:44:93:02:43:15:da:
                    e0:01:31:f3:a7:e9:75:04:04:e9:4b:0d:4f:c9:09:
                    a8:2e:ac:c8:74:7e:6b:86:9b:92:a8:ab:93:b5:e7:
                    b8:ec:69:fa:2b:47:5a:cd:58:cf:00:5f:fe:70:fe:
                    e7:ac:c9:7e:db:52:ed:bb:77:34:d7:ea:4b:c0:b3:
                    cf:79:61:cb:12:2b:40:da:c3:54:81:84:b4:0d:45:
                    4c:bd:a1:48:af:8f:dd:34:a9:d7:6d:08:e0:2c:91:
                    62:ca:cf:e9:64:f6:56:f9:37:06:6c:94:3e:43:7e:
                    25:e7:91:0a:99:ec:37:25:7c:80:5b:ab:a4:af:0f:
                    8b:04:68:7e:ce:e0:42:57:55:0e:5f:25:7c:e9:ab:
                    fa:42:9c:c6:ed:50:77:f6:b0:37:f8:ee:58:83:ca:
                    55:46:83:9b:73:a1:c2:f5:73:58:19:0b:23:a7:d3:
                    a0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:40:2D:16:5D:08:4A:E0:21:F3:0B:96:F7:B1:9B:01:E7:EB:4D:CB
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/3231362e37332e3135392e302f32342d3234203d3e203631313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.73.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:24:08:06:f5:69:4c:d1:d5:8a:04:4d:64:0d:a2:34:bd:3c:
         d2:41:2a:b6:61:9e:19:9a:5f:1b:1f:03:3b:dd:f8:59:6e:a2:
         41:31:c1:5b:5f:95:5d:f8:87:2d:3f:e3:3d:ac:40:71:00:2a:
         02:ca:ef:ec:ef:ce:fb:14:1d:5a:00:66:2c:d5:d0:fe:27:19:
         c7:d4:8e:46:86:7e:07:8c:42:79:ad:be:3e:4f:fd:79:dd:32:
         ef:c7:15:b3:c1:1f:47:98:4b:9e:82:28:88:80:dc:a4:b5:1e:
         70:da:cf:b3:59:31:cd:2d:29:54:d0:36:ba:2d:06:f7:1e:eb:
         81:23:c1:00:db:05:d5:46:90:02:76:12:7f:59:d4:c8:21:be:
         26:76:86:8f:98:20:2b:1a:a2:d6:22:5c:5a:b4:38:6f:56:bb:
         58:50:9d:78:ab:90:a2:ef:8f:bf:e2:87:1d:20:a4:79:2f:24:
         11:7f:fa:79:5d:af:72:a8:5a:77:21:cd:32:7f:73:13:f8:9d:
         1b:2e:f8:58:35:d2:f4:b4:37:4b:5d:1d:02:ad:8b:f4:d7:aa:
         eb:b0:ca:48:76:b3:c2:f8:d2:15:c3:08:46:3c:64:ee:e9:3c:
         a4:79:66:ee:fd:7d:b9:b6:55:d1:14:98:7e:15:0f:23:e1:57:
         42:d0:9e:c6
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUch+QgqKkKwi+k31BGCuznlsm/kIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZWVjZjg0N2Q3YTNlNTc5NTliZWJkNjk3YTdlMDY3YTc1
ZTE4YmI2Mjk4YjFkM2JmOTYwHhcNMjUxMDA3MDM0ODQ2WhcNMjYxMDA2MDM1MzQ2
WjAzMTEwLwYDVQQDEyg3QTQwMkQxNjVEMDg0QUUwMjFGMzBCOTZGN0IxOUIwMUU3
RUI0RENCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsu7scEqTF0kt
Sk4i1jdyuAt08mv2xmSSeX2RKGAP5+UU+n45vGt5/pao5mV+j5C1rC8bYDxMnRVg
A6Yyn9QWekMkyGbQdJJO5hE9sqjnqinhLyhEkwJDFdrgATHzp+l1BATpSw1PyQmo
LqzIdH5rhpuSqKuTtee47Gn6K0dazVjPAF/+cP7nrMl+21Ltu3c01+pLwLPPeWHL
EitA2sNUgYS0DUVMvaFIr4/dNKnXbQjgLJFiys/pZPZW+TcGbJQ+Q34l55EKmew3
JXyAW6ukrw+LBGh+zuBCV1UOXyV86av6QpzG7VB39rA3+O5Yg8pVRoObc6HC9XNY
GQsjp9OgdwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFHpALRZdCErgIfMLlvexmwHn
603LMB8GA1UdIwQYMBaAFA8DMS7lnj3oJzX2a1SUFd5EZHh1MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1YzkxYmUzZjlkLzEv
MEYwMzMxMkVFNTlFM0RFODI3MzVGNjZCNTQ5NDE1REU0NDY0Nzg3NS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvZjYwYzlmMzItYTg3Yy00MzM5LWEyZjMtNjI5OWEz
YjAyZTI5L2EwMWU5OTdjLWI4OWUtNDdjMi04ZDc5LWQzMWU1OGJjM2NhNC9lZWNm
ODQ3ZDdhM2U1Nzk1OWJlYmQ2OTdhN2UwNjdhNzVlMThiYjYyOThiMWQzYmY5Ni5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg1MGQwNjNlMDE4NTc1
NWM5MWJlM2Y5ZC8xLzMyMzEzNjJlMzczMzJlMzEzNTM5MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzYzMTMxMzMzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANhJnzANBgkqhkiG9w0BAQsF
AAOCAQEASSQIBvVpTNHVigRNZA2iNL080kEqtmGeGZpfGx8DO934WW6iQTHBW1+V
XfiHLT/jPaxAcQAqAsrv7O/O+xQdWgBmLNXQ/icZx9SORoZ+B4xCea2+Pk/9ed0y
78cVs8EfR5hLnoIoiIDcpLUecNrPs1kxzS0pVNA2ui0G9x7rgSPBANsF1UaQAnYS
f1nUyCG+JnaGj5ggKxqi1iJcWrQ4b1a7WFCdeKuQou+Pv+KHHSCkeS8kEX/6eV2v
cqhadyHNMn9zE/idGy74WDXS9LQ3S10dAq2L9Neq67DKSHazwvjSFcMIRjxk7uk8
pHlm7v19ubZV0RSYfhUPI+FXQtCexg==
-----END CERTIFICATE-----
Generated at Mon Oct 20 04:06:19 2025 by rpki-client