Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e2039333034.roa
File:                     3230392e38372e3137322e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          TFiwD9TOdHBa1CUaY9YBUz3BCjMAdlOaYP+qaHYmF64=
Subject key identifier:   31:30:51:8C:76:CA:D2:01:96:5F:91:BA:9B:F7:0C:D4:45:83:C5:AD
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       624D981B9E4729B9EC104D268B324C7749FC2CD2
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 19 Oct 2025 12:54:53 +0000
ROA not before:           Sun 19 Oct 2025 12:49:53 +0000
ROA not after:            Sun 18 Oct 2026 12:54:53 +0000
asID:                     9304
IP address blocks:        209.87.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:4d:98:1b:9e:47:29:b9:ec:10:4d:26:8b:32:4c:77:49:fc:2c:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Oct 19 12:49:53 2025 GMT
            Not After : Oct 18 12:54:53 2026 GMT
        Subject: CN=3130518C76CAD201965F91BA9BF70CD44583C5AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:57:c3:fa:75:d5:22:c6:fc:06:65:4c:17:29:
                    4b:81:24:d8:07:e4:d0:a5:2f:09:f4:9e:91:ba:97:
                    29:90:d7:2b:ad:cd:59:35:56:e8:29:88:1b:1f:4d:
                    ac:dc:98:02:fe:eb:f1:f5:a2:3b:4b:81:30:43:3b:
                    db:9c:a7:a0:0a:ab:18:01:90:21:cc:b8:87:38:20:
                    ae:d3:c4:d5:a6:2a:34:71:0c:c1:db:0a:24:e2:a5:
                    aa:34:14:a2:b2:93:a0:f2:c8:76:46:49:0c:ac:62:
                    85:9d:5f:db:b3:ea:cf:a1:7a:0e:68:d7:9f:a5:ef:
                    cf:87:7f:40:fd:1b:2d:95:88:70:17:1f:d5:bf:5a:
                    01:c2:8c:0f:ca:67:11:de:c3:8f:7f:b0:89:dc:e8:
                    39:93:28:d0:ff:a0:00:53:93:6e:c9:e0:64:11:1f:
                    ac:99:bc:1e:f2:a6:d1:0e:e5:6b:4c:49:90:b7:28:
                    38:25:bf:7e:7c:5e:2a:e6:5e:ef:74:80:0b:3e:6c:
                    83:42:56:6f:c4:83:52:ab:41:65:1c:02:68:29:bc:
                    9c:12:2d:ab:e5:37:fe:26:4d:75:e2:0d:fb:77:83:
                    c8:b0:62:f9:16:a2:a6:6f:41:67:0c:9a:38:27:4d:
                    73:04:2d:6a:41:9f:ca:aa:41:40:61:fb:32:2b:a1:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:30:51:8C:76:CA:D2:01:96:5F:91:BA:9B:F7:0C:D4:45:83:C5:AD
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137322e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:61:9a:14:59:09:45:cc:d0:43:90:df:fc:72:7e:57:22:55:
         0a:ba:e8:00:f0:48:0b:34:fc:c7:ea:6c:fe:01:10:c1:ab:7b:
         55:0b:02:1c:44:d5:86:72:ce:a8:51:f9:d3:02:77:1d:ea:3c:
         10:25:92:cd:19:75:c2:53:b7:ed:25:1c:b9:c6:d2:db:f8:b1:
         a7:15:4f:e6:53:8d:42:99:5b:3b:2c:92:64:30:a8:8b:53:9c:
         df:ea:6a:9b:68:65:ff:d7:68:e9:d3:1e:4e:a8:57:05:66:20:
         f3:96:53:14:d5:f5:5a:f9:83:00:d1:6e:9e:6d:05:5e:b9:ef:
         f1:01:ff:9a:26:7d:7c:16:c7:59:c3:81:58:02:e5:d7:22:bd:
         7a:1d:d2:ba:ff:74:94:15:4f:92:87:e1:8f:18:ff:3b:74:03:
         15:c8:c9:86:8b:f4:92:f3:de:40:ce:bd:98:9d:e7:87:1f:83:
         50:c6:6e:04:bd:df:a8:dc:dd:1d:c6:49:f7:6f:75:4a:e3:67:
         19:c1:1a:87:99:4e:8b:3e:fb:78:87:12:de:32:c3:f0:50:41:
         52:af:64:7e:7c:9e:a1:81:22:b6:b8:6c:97:c1:e3:87:23:52:
         31:fb:35:21:00:ce:c1:d9:f0:ca:03:33:a7:3d:a2:ea:94:f4:
         64:e0:a1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:36:13 2025 by rpki-client