Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32322d3234203d3e20383334.roa
File:                     3230392e38372e3136302e302f32322d3234203d3e20383334.roa (raw, json)
Hash identifier:          eUWYF3HfKM8vpBMqgT0k6ebI3/m0zk/yIJV7qEXF/SQ=
Subject key identifier:   47:1B:E7:0F:6C:95:A3:AE:8F:DA:30:1B:1F:C2:64:96:7A:C8:3E:7E
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       093EDBEE13F40639DF6119D8F32DAF079A6D5446
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32322d3234203d3e20383334.roa
Signing time:             Tue 06 May 2025 09:31:33 +0000
ROA not before:           Tue 06 May 2025 09:26:33 +0000
ROA not after:            Tue 05 May 2026 09:31:33 +0000
asID:                     834
IP address blocks:        209.87.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 13:24:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:3e:db:ee:13:f4:06:39:df:61:19:d8:f3:2d:af:07:9a:6d:54:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: May  6 09:26:33 2025 GMT
            Not After : May  5 09:31:33 2026 GMT
        Subject: CN=471BE70F6C95A3AE8FDA301B1FC264967AC83E7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:4d:da:8f:f3:bc:45:c7:a4:da:a5:dd:8a:8c:
                    59:75:78:a4:78:5b:cf:24:bc:7e:3f:d6:9e:43:6f:
                    f6:a9:b7:e7:7e:c2:a5:81:58:c7:25:5e:d4:ff:19:
                    90:40:72:fb:5d:ba:c5:87:1b:b7:f6:f0:53:c4:d4:
                    fd:b3:b2:72:7d:bc:77:bc:68:2d:04:61:5b:8f:70:
                    2b:dc:5d:1b:3e:f9:2e:f0:a4:bc:dc:66:f0:e6:f5:
                    d0:c4:c4:46:01:01:40:3c:87:74:9b:75:65:5f:23:
                    ae:3b:19:43:26:b5:02:6c:55:41:40:be:c2:fe:01:
                    2b:a4:5e:17:ba:79:9c:c8:57:ad:99:d3:8b:e6:ad:
                    e4:f3:9e:16:3b:1a:c1:19:81:19:f1:e3:c4:af:7d:
                    18:fd:c3:34:4a:b4:41:c5:ba:0c:96:32:8d:e4:8c:
                    34:cd:13:f7:80:eb:8c:6d:3c:b8:2d:e4:3d:b1:1a:
                    77:bd:69:c5:11:f6:19:c7:5e:78:61:45:de:7b:f7:
                    f9:02:a8:d8:97:c8:be:6e:20:3c:ab:ed:26:67:ec:
                    2f:6a:15:02:ce:90:08:04:af:1b:b7:d4:47:a8:37:
                    31:fe:8c:11:07:b6:49:f8:bb:2c:80:04:24:bd:37:
                    06:f6:f7:58:22:ad:3c:3e:83:c0:e1:c7:d7:b3:38:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1B:E7:0F:6C:95:A3:AE:8F:DA:30:1B:1F:C2:64:96:7A:C8:3E:7E
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32322d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:b1:bf:ed:e6:23:eb:95:3c:58:f7:11:7a:40:1d:b5:d6:7c:
         78:be:d4:cc:b8:c1:74:fd:fd:3c:8d:df:84:f7:25:2f:85:f2:
         58:fa:9d:64:1c:7c:33:9d:1a:5c:07:ad:fc:5d:bf:91:78:0d:
         d1:77:b1:52:ef:31:fd:d5:db:1b:52:a2:94:9c:6f:e4:e1:f3:
         e9:fb:15:ce:84:9a:0e:04:d9:66:2c:21:84:cd:a4:f8:00:13:
         4d:67:34:d0:73:99:13:51:54:e4:a6:15:78:b9:97:91:c0:18:
         8d:bd:bb:9d:4e:1b:18:5a:93:d3:e6:a6:41:dc:1b:fd:c3:1a:
         94:e3:5a:c7:c5:d5:0b:f3:6b:81:e3:06:a5:9e:91:60:cc:12:
         85:86:9b:f0:63:e1:1e:33:da:25:e7:46:ed:0a:aa:b6:15:c2:
         e2:ea:30:10:24:db:26:ae:90:5c:63:6a:d5:b1:6f:48:0e:6d:
         9a:1f:5c:de:87:06:52:e1:0e:9f:c3:84:f2:db:7e:53:ad:e3:
         6e:39:38:d8:6f:6f:a1:6f:58:4f:92:80:57:e2:f9:40:1d:ea:
         0a:ba:73:84:29:c5:f2:bd:39:2a:02:da:4c:6b:d8:69:d6:52:
         a0:aa:b1:2a:0c:e4:88:38:78:e2:99:3a:1f:a3:f9:46:12:d2:
         51:ba:0c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 05:07:21 2025 by rpki-client