Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136332e302f32342d3234203d3e203235313938.roa
File:                     3230392e38372e3136332e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          gB0rYKilGIFAo/rQrH0OLd8PzbFY9Iob4bYVXbLMFqc=
Subject key identifier:   EA:FE:EC:10:3E:75:E0:66:18:3A:B9:0D:AA:4A:BA:D6:4B:75:E5:FE
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       4A75DA559424E0E1C0CDE7DC5E81A31B9B07C59D
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136332e302f32342d3234203d3e203235313938.roa
Signing time:             Sat 09 Aug 2025 05:17:12 +0000
ROA not before:           Sat 09 Aug 2025 05:12:12 +0000
ROA not after:            Sat 08 Aug 2026 05:17:12 +0000
asID:                     25198
IP address blocks:        209.87.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 15:26:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:75:da:55:94:24:e0:e1:c0:cd:e7:dc:5e:81:a3:1b:9b:07:c5:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Aug  9 05:12:12 2025 GMT
            Not After : Aug  8 05:17:12 2026 GMT
        Subject: CN=EAFEEC103E75E066183AB90DAA4ABAD64B75E5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b1:7e:52:bf:0f:aa:64:8e:61:a2:10:d3:a4:
                    cd:eb:85:f5:61:b4:c0:6a:85:f8:49:3e:3b:73:6d:
                    25:54:af:44:18:ff:73:29:c8:e4:43:87:25:df:19:
                    3f:45:f5:e0:eb:b5:3d:d6:9c:95:fe:14:b0:ea:07:
                    f5:3b:9f:9c:b4:18:65:64:ca:01:ca:75:95:61:3c:
                    3f:72:65:d6:32:79:35:96:26:e6:f4:a5:6c:db:77:
                    c4:aa:e0:be:8a:3a:91:98:f7:25:b1:82:83:dc:91:
                    8e:63:30:5b:a2:e7:76:b5:f9:0c:c5:6e:4b:06:a4:
                    45:f3:64:90:5e:a8:6e:19:dd:81:97:dc:d5:13:9c:
                    72:be:d6:b9:80:5f:64:ed:50:b0:a5:09:00:68:2d:
                    d9:87:0f:4b:96:ba:a5:45:89:d5:c7:c1:c8:a5:88:
                    5f:af:83:46:2f:03:7d:d0:c1:ba:6e:92:ae:62:28:
                    dd:4c:88:b2:a8:ad:12:be:47:e3:cd:73:cc:0d:dd:
                    2b:01:54:de:3e:1a:99:2e:3a:39:0d:59:fc:aa:8e:
                    12:4c:3f:b5:f1:02:1b:61:2e:a7:9a:4a:0e:63:4c:
                    57:e1:49:d2:14:80:e5:65:c5:c9:92:24:27:d8:4a:
                    a2:5c:de:af:59:5d:5f:d0:96:bf:5d:00:ff:2f:4c:
                    05:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FE:EC:10:3E:75:E0:66:18:3A:B9:0D:AA:4A:BA:D6:4B:75:E5:FE
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136332e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:1c:b7:0a:00:3e:bd:3a:19:88:8b:f8:49:b0:dd:43:93:b9:
         65:53:ca:39:ba:b9:9d:42:98:37:cd:f7:d4:aa:a5:1c:f1:08:
         1d:6f:aa:c7:e3:6d:ba:52:d7:28:47:c9:f9:76:5a:4d:70:4f:
         e3:ea:5b:1d:a7:21:aa:9c:a5:33:56:c1:14:ba:d5:26:4f:f1:
         09:7b:27:8e:d4:29:c0:83:34:fe:24:01:90:ee:2f:d1:d9:23:
         ae:a0:fc:1d:5f:61:5f:77:5d:8b:47:49:de:4f:45:7d:e8:e2:
         82:24:d3:74:4a:f1:e9:d9:12:3a:7f:1b:38:4e:77:7d:3b:d1:
         2c:d9:29:7c:22:62:71:0a:f4:44:60:20:a1:71:c9:56:94:c5:
         73:74:c6:29:79:be:e9:23:3c:0a:b1:09:86:b1:77:f7:53:08:
         4e:b0:76:24:d6:6a:4e:21:69:4b:3d:a6:ac:6c:a0:52:00:0b:
         46:ce:c8:9c:89:82:b3:be:16:31:90:20:cf:1d:fc:70:43:a9:
         c8:c0:f9:35:54:f7:d6:eb:85:3e:f4:2a:97:88:a5:d4:df:11:
         14:13:5c:eb:d8:c7:f0:8e:bd:ff:2b:2e:5a:bc:03:95:c4:aa:
         93:74:72:15:8c:b4:60:2e:6d:64:7b:8a:15:36:67:a7:7b:6e:
         f3:8d:a3:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:29:20 2025 by rpki-client