Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e203533383530.roa
File:                     3137362e3130332e3231382e302f32342d3234203d3e203533383530.roa (raw, json)
Hash identifier:          WlkxmShUlrGKXoCCLtmvGiwyqbokDMvisg2JZfwUrXI=
Subject key identifier:   69:64:E9:FA:C3:C3:ED:EF:B9:9E:00:F9:90:F1:42:EE:12:2A:AD:EC
Certificate issuer:       /CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
Certificate serial:       202E5D5CA1354C5F1E957E2BD412BB67A50F5F0B
Authority key identifier: 1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e203533383530.roa
Signing time:             Fri 20 Jun 2025 08:31:09 +0000
ROA not before:           Fri 20 Jun 2025 08:26:09 +0000
ROA not after:            Fri 19 Jun 2026 08:31:09 +0000
asID:                     53850
IP address blocks:        176.103.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 06:09:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2e:5d:5c:a1:35:4c:5f:1e:95:7e:2b:d4:12:bb:67:a5:0f:5f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b
        Validity
            Not Before: Jun 20 08:26:09 2025 GMT
            Not After : Jun 19 08:31:09 2026 GMT
        Subject: CN=6964E9FAC3C3EDEFB99E00F990F142EE122AADEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e9:a8:ef:2a:d8:5c:06:95:d9:6e:2d:19:f3:
                    8e:8a:24:b7:db:3f:6f:bd:1b:d8:60:81:0f:e7:b6:
                    6a:13:9a:9d:8b:1c:6a:fd:78:78:ef:cd:4c:b1:8b:
                    bc:cb:3b:1c:9c:b4:d2:f5:88:08:29:6b:4e:52:57:
                    63:69:9a:81:1e:9c:0f:2b:4c:f0:49:ed:a0:28:e1:
                    26:6d:6b:98:a8:d6:4a:3d:9e:b7:0a:a3:2c:8a:26:
                    f3:83:f7:c1:3d:3b:03:ee:18:8b:47:a0:04:6d:33:
                    4a:35:74:81:10:7d:03:8b:86:06:34:63:62:38:57:
                    c7:ee:bc:b3:f9:da:78:e8:ba:48:ce:7e:52:cb:6a:
                    63:f9:b6:f7:a3:29:21:a6:5b:19:6c:b4:40:28:e7:
                    6b:9c:96:ac:81:c7:8c:f5:6b:d8:f4:4d:60:4a:48:
                    24:64:43:c9:2e:73:05:f2:b5:0f:a7:d0:6e:e3:18:
                    3f:92:43:8b:56:a8:8b:95:87:3a:45:b2:b1:2b:eb:
                    94:9c:8a:9c:fc:36:83:d8:ae:5b:ec:b2:c0:ed:d4:
                    2f:ce:e4:67:d5:04:cd:51:ae:37:f4:66:ad:45:67:
                    a8:55:94:db:cb:a2:0b:2d:47:76:95:cb:15:03:f7:
                    32:f1:aa:92:98:6a:84:55:df:c6:a7:fa:c4:b6:56:
                    a2:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:64:E9:FA:C3:C3:ED:EF:B9:9E:00:F9:90:F1:42:EE:12:2A:AD:EC
            X509v3 Authority Key Identifier:
                keyid:1E:92:70:97:F9:61:CD:62:C6:84:22:11:20:67:91:58:56:88:EA:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/1E927097F961CD62C6842211206791585688EA6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4016a9a5-6e7c-4633-a4c3-24ad1b7f0785/d585ddc72480f69736d0dbfb4fb7bbbbea3025977ba96c315b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018dcc61b42651d6/0/3137362e3130332e3231382e302f32342d3234203d3e203533383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  176.103.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:05:a4:dc:82:6a:89:46:3b:8d:1f:63:56:63:27:5f:76:7d:
         6f:4e:86:76:43:2b:88:65:49:7e:66:51:48:0e:c9:61:de:a3:
         d3:5f:61:51:e2:ea:2d:28:a3:a6:08:d0:5c:2c:54:a3:92:16:
         fc:7c:58:9e:e5:0e:5e:05:33:85:7f:32:4c:a4:1d:14:57:61:
         bf:ba:d3:e1:34:cb:ec:2b:7b:99:25:2a:df:a3:4d:3d:d4:0b:
         31:11:ba:4e:0a:f8:77:74:cf:cb:49:aa:e5:cb:f8:d9:bd:1a:
         02:85:7a:2c:7b:a9:59:31:7b:d5:1c:c3:20:2c:09:ba:08:d9:
         61:de:38:d8:f7:e0:e6:3e:aa:6b:d2:5e:34:3a:35:3e:2a:07:
         66:d4:f7:10:5f:aa:e3:74:4d:fd:68:dc:46:98:50:10:9d:83:
         cc:2e:22:a7:4c:4b:8a:95:4a:1b:1f:52:7b:95:e1:87:06:ff:
         d2:08:3d:64:c5:fd:fb:96:38:66:32:58:87:66:cf:89:5f:f9:
         7e:74:c9:69:1f:85:9b:31:2c:97:cc:b0:2b:73:52:40:e2:e1:
         3c:9c:91:30:75:b2:02:0d:a3:ba:16:cc:c1:23:0e:b6:1f:97:
         38:af:a1:25:2c:30:df:ce:31:f9:79:86:5d:2b:e6:13:8f:7f:
         d8:dc:01:e5
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUIC5dXKE1TF8elX4r1BK7Z6UPXwswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyZDU4NWRkYzcyNDgwZjY5NzM2ZDBkYmZiNGZiN2JiYmJl
YTMwMjU5NzdiYTk2YzMxNWIwHhcNMjUwNjIwMDgyNjA5WhcNMjYwNjE5MDgzMTA5
WjAzMTEwLwYDVQQDEyg2OTY0RTlGQUMzQzNFREVGQjk5RTAwRjk5MEYxNDJFRTEy
MkFBREVDMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxumo7yrYXAaV
2W4tGfOOiiS32z9vvRvYYIEP57ZqE5qdixxq/Xh4781MsYu8yzscnLTS9YgIKWtO
UldjaZqBHpwPK0zwSe2gKOEmbWuYqNZKPZ63CqMsiibzg/fBPTsD7hiLR6AEbTNK
NXSBEH0Di4YGNGNiOFfH7ryz+dp46LpIzn5Sy2pj+bb3oykhplsZbLRAKOdrnJas
gceM9WvY9E1gSkgkZEPJLnMF8rUPp9Bu4xg/kkOLVqiLlYc6RbKxK+uUnIqc/DaD
2K5b7LLA7dQvzuRn1QTNUa439GatRWeoVZTby6ILLUd2lcsVA/cy8aqSmGqEVd/G
p/rEtlaiDQIDAQABo4ICtDCCArAwHQYDVR0OBBYEFGlk6frDw+3vuZ4A+ZDxQu4S
Kq3sMB8GA1UdIwQYMBaAFB6ScJf5Yc1ixoQiESBnkVhWiOprMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGNlYTJhYzYwMThkY2M2MWI0MjY1MWQ2LzAv
MUU5MjcwOTdGOTYxQ0Q2MkM2ODQyMjExMjA2NzkxNTg1Njg4RUE2Qi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFi
MGI4NDE1LzQwMTZhOWE1LTZlN2MtNDYzMy1hNGMzLTI0YWQxYjdmMDc4NS9kNTg1
ZGRjNzI0ODBmNjk3MzZkMGRiZmI0ZmI3YmJiYmVhMzAyNTk3N2JhOTZjMzE1Yi5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhjZWEyYWM2MDE4ZGNj
NjFiNDI2NTFkNi8wLzMxMzczNjJlMzEzMDMzMmUzMjMxMzgyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzNTMzMzgzNTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsGfaMA0GCSqGSIb3DQEB
CwUAA4IBAQARBaTcgmqJRjuNH2NWYydfdn1vToZ2QyuIZUl+ZlFIDslh3qPTX2FR
4uotKKOmCNBcLFSjkhb8fFie5Q5eBTOFfzJMpB0UV2G/utPhNMvsK3uZJSrfo009
1AsxEbpOCvh3dM/LSarly/jZvRoChXose6lZMXvVHMMgLAm6CNlh3jjY9+DmPqpr
0l40OjU+Kgdm1PcQX6rjdE39aNxGmFAQnYPMLiKnTEuKlUobH1J7leGHBv/SCD1k
xf37ljhmMliHZs+JX/l+dMlpH4WbMSyXzLArc1JA4uE8nJEwdbICDaO6FszBIw62
H5c4r6ElLDDfzjH5eYZdK+YTj3/Y3AHl
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:08:40 2025 by rpki-client