Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32302e302f32342d3234203d3e2035303635.roa
File:                     3137322e39392e32302e302f32342d3234203d3e2035303635.roa (raw, json)
Hash identifier:          Ikvzhyy5d+3jNwexNp3WSVRSlmghbVEbFsyccEn8yBk=
Subject key identifier:   0B:ED:DB:56:98:FB:6B:99:43:76:9D:35:2B:8B:D4:C5:15:97:3C:F6
Certificate issuer:       /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial:       7B3E4BBCBA6665807FEA5C9787D7E85E8780DE90
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32302e302f32342d3234203d3e2035303635.roa
Signing time:             Wed 10 Sep 2025 09:29:45 +0000
ROA not before:           Wed 10 Sep 2025 09:24:45 +0000
ROA not after:            Wed 09 Sep 2026 09:29:45 +0000
asID:                     5065
IP address blocks:        172.99.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/946afd34-6971-423f-b22a-575e2c73ab27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 20:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:3e:4b:bc:ba:66:65:80:7f:ea:5c:97:87:d7:e8:5e:87:80:de:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
        Validity
            Not Before: Sep 10 09:24:45 2025 GMT
            Not After : Sep  9 09:29:45 2026 GMT
        Subject: CN=0BEDDB5698FB6B9943769D352B8BD4C515973CF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:28:a4:46:00:52:70:8d:31:a7:21:1c:d0:d8:
                    3e:4c:33:68:2f:e4:63:52:a6:2c:71:3e:bb:4e:d2:
                    59:6e:e6:f3:12:81:88:60:72:8c:f2:f5:22:4a:3c:
                    ef:f4:38:4e:e8:f5:66:42:ea:16:95:65:e9:4c:7b:
                    a4:31:09:1b:9f:b9:74:4b:1f:15:65:24:db:4c:cf:
                    8b:c3:95:fd:5f:1e:24:14:57:b0:06:98:15:cc:be:
                    8e:dc:0f:f4:c9:65:8a:59:68:3b:96:eb:16:70:c0:
                    c6:87:b7:08:36:9b:33:2f:b2:f6:06:e6:3b:d2:bb:
                    4d:43:0a:e8:5d:22:9a:b1:c9:38:b5:f7:04:a8:ef:
                    13:0a:6c:94:25:22:3d:84:73:39:e6:65:1d:6a:29:
                    f5:b8:49:03:06:48:8e:ea:14:41:b4:58:3b:7f:49:
                    4b:bf:2a:67:4e:d8:b2:1c:f4:54:69:cb:12:e9:c1:
                    4b:3c:86:06:2d:69:df:ee:23:ea:2e:26:4f:b1:ef:
                    53:26:d5:fe:73:ce:ab:fb:0f:07:ed:a2:0c:7b:39:
                    2b:92:0f:5d:c3:37:18:34:b6:1f:94:76:b8:71:8b:
                    1c:0f:6c:c4:36:26:9b:9c:d8:7f:54:a4:58:c5:a4:
                    9f:ce:e2:f6:52:49:28:89:47:5a:07:b5:d5:79:72:
                    67:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:ED:DB:56:98:FB:6B:99:43:76:9D:35:2B:8B:D4:C5:15:97:3C:F6
            X509v3 Authority Key Identifier:
                keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/3137322e39392e32302e302f32342d3234203d3e2035303635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.99.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:5a:85:6f:1c:3b:3a:84:f4:17:51:a6:aa:91:d6:9f:7d:15:
         26:57:12:92:5f:8d:56:9b:90:67:ed:84:44:60:00:9f:1b:0d:
         d7:bc:6c:1d:47:26:e1:0e:3f:eb:4a:8f:1d:f6:ef:03:ff:f4:
         45:9d:24:41:89:7a:a4:e3:55:d7:bd:04:60:2c:f1:28:6b:a1:
         8b:f2:b0:2a:0f:08:67:7e:be:9f:ad:d7:46:a4:ec:60:10:9c:
         a5:3f:9d:ac:c2:e7:ec:1c:48:66:e0:c3:69:b7:db:22:4b:1e:
         35:ec:29:ee:5e:2f:cf:8f:4e:42:b8:c5:6c:3f:93:1e:fa:dd:
         5a:82:80:62:a3:6f:98:9c:93:6a:d1:56:77:bc:82:12:d9:99:
         43:6a:f9:24:4e:5b:3b:da:61:b6:c0:48:a1:b1:e5:8c:60:60:
         ca:d7:a0:79:dd:5c:65:45:ae:bd:a1:0f:ae:40:24:b2:4f:a2:
         10:a5:bd:e7:7b:80:41:be:e3:bf:ad:9b:16:d5:e2:56:7f:a8:
         d3:ce:3d:22:64:9c:35:3b:8f:8f:6c:fb:42:08:dc:a4:7a:a1:
         da:b8:0e:92:4c:8f:e8:93:82:dd:c8:c9:24:33:58:01:76:79:
         08:d2:90:45:03:d8:52:1d:df:5e:d4:2e:1c:81:72:9c:c0:0f:
         00:13:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:17:04 2025 by rpki-client