Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20333933383836.roa
File:                     3230392e38372e3137332e302f32342d3234203d3e20333933383836.roa (raw, json)
Hash identifier:          av2l99OQonnUQG/x7Udk0/G1YyU0z4+yJUBSRzlKf20=
Subject key identifier:   30:D2:DA:A9:19:FE:EC:78:18:C3:DC:C9:C6:01:80:04:09:A1:2F:4E
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       33F0B200A2A5BCCBA7DA279297ED1E8DDAA2272F
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20333933383836.roa
Signing time:             Thu 01 May 2025 20:11:58 +0000
ROA not before:           Thu 01 May 2025 20:06:58 +0000
ROA not after:            Thu 30 Apr 2026 20:11:58 +0000
asID:                     393886
IP address blocks:        209.87.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 16:12:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:f0:b2:00:a2:a5:bc:cb:a7:da:27:92:97:ed:1e:8d:da:a2:27:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: May  1 20:06:58 2025 GMT
            Not After : Apr 30 20:11:58 2026 GMT
        Subject: CN=30D2DAA919FEEC7818C3DCC9C601800409A12F4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:bd:87:20:0d:b1:d6:b9:3e:c8:7d:92:62:48:
                    6a:82:22:76:92:83:e5:08:16:5e:7a:a0:83:9b:cb:
                    99:25:8b:ed:f7:05:ba:87:8f:4a:68:cd:22:9b:d5:
                    ab:49:de:d9:f8:f3:b5:1a:22:72:d1:e8:a2:bb:b5:
                    0e:12:3b:8e:62:f6:77:97:11:bb:54:21:b8:d4:48:
                    b4:db:ad:79:90:40:9f:25:60:ed:7e:ec:da:57:54:
                    fe:fb:94:40:41:fd:c2:9e:70:40:21:f4:37:85:1b:
                    9a:a2:c3:e5:27:50:80:e0:8f:4f:75:66:fd:eb:75:
                    82:9c:87:ec:fc:d2:30:5c:b6:0a:2a:85:e1:5c:e6:
                    47:b1:9d:1b:9d:78:49:e4:30:85:66:24:56:ab:bd:
                    fa:00:f0:a1:dc:19:2c:05:0c:97:46:04:33:40:ef:
                    40:36:19:6d:a0:ba:ae:ca:e5:a1:17:06:d9:68:37:
                    0b:74:02:38:34:d5:5e:6d:fa:9d:6a:e9:43:54:a1:
                    aa:32:78:09:ce:63:d2:c5:e7:7e:66:0b:48:27:f2:
                    7e:b6:c7:b1:be:e3:55:35:de:54:ea:a5:1b:cd:cb:
                    50:b3:a7:a0:7f:05:54:88:c4:7a:74:87:9d:89:66:
                    1f:3c:a2:f7:77:f1:13:e5:a5:bd:0d:94:92:42:b6:
                    90:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D2:DA:A9:19:FE:EC:78:18:C3:DC:C9:C6:01:80:04:09:A1:2F:4E
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137332e302f32342d3234203d3e20333933383836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:82:1c:65:10:a0:3c:b3:a3:fd:7e:e2:7b:20:e2:42:97:3d:
         86:d0:91:94:f2:b8:c9:d6:da:3d:28:bd:5d:bd:63:f9:df:94:
         d9:f8:24:7f:b1:ed:83:42:54:ab:01:b0:b5:9a:2d:ca:2a:a1:
         2d:09:3e:eb:ab:94:c8:0b:4c:df:22:e7:8b:3f:08:44:96:eb:
         ba:c4:4f:73:6d:92:3b:a0:60:c0:d7:cf:25:ed:5d:a7:ee:28:
         dd:31:a0:46:e1:c4:cc:b1:d7:5f:a0:b5:e0:a9:f0:a2:2c:6a:
         9e:d5:0c:93:0f:e1:e7:47:b4:ad:29:f9:de:d6:d4:81:64:c2:
         6a:f8:8a:82:25:e0:8a:a4:4e:f3:40:04:dc:4a:44:21:52:2e:
         5c:06:5b:74:f9:77:aa:2f:5f:7d:e2:c2:3a:a1:7a:ea:f0:ea:
         31:5b:a9:88:16:d1:d6:62:3f:a3:dc:7d:35:6b:45:d6:98:9a:
         29:a6:63:34:44:43:3e:2e:1c:fc:2d:d9:53:a2:53:08:14:e4:
         c3:49:62:f9:ef:29:91:f3:46:a8:f8:cb:14:71:6f:df:95:2a:
         f8:fd:36:20:f4:42:54:94:d1:55:c0:80:9e:50:e2:70:e6:91:
         77:3a:dd:7e:af:db:1c:61:18:ba:1f:a4:86:5a:01:7f:e0:7d:
         a5:96:b5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 20:33:33 2025 by rpki-client