Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230362e3130392e35362e302f32332d3332203d3e20333938393931.roa
File:                     3230362e3130392e35362e302f32332d3332203d3e20333938393931.roa (raw, json)
Hash identifier:          Q1LwZtL0RIPGSvpdcyiWVw97cpgfDorqPYLpgf+r0lw=
Subject key identifier:   2B:4D:13:62:C3:87:25:EC:D7:D4:5D:BA:FA:94:86:8A:6A:B7:5A:F5
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       0509A546CF6407B96B724367A88FA1F9679BA057
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230362e3130392e35362e302f32332d3332203d3e20333938393931.roa
Signing time:             Fri 12 Sep 2025 16:48:59 +0000
ROA not before:           Fri 12 Sep 2025 16:43:59 +0000
ROA not after:            Fri 11 Sep 2026 16:48:59 +0000
asID:                     398991
IP address blocks:        206.109.56.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 00:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:09:a5:46:cf:64:07:b9:6b:72:43:67:a8:8f:a1:f9:67:9b:a0:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Sep 12 16:43:59 2025 GMT
            Not After : Sep 11 16:48:59 2026 GMT
        Subject: CN=2B4D1362C38725ECD7D45DBAFA94868A6AB75AF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fd:25:70:cc:93:76:3c:6a:8d:ff:9d:d4:0d:
                    c1:20:e9:99:0b:1f:17:02:66:47:42:83:b3:0a:80:
                    e4:f5:50:b0:b8:ea:41:74:50:f9:00:ba:d4:62:d4:
                    4d:6b:6d:10:0a:b0:93:a4:07:9f:d9:00:81:2f:57:
                    07:bc:44:4f:e7:ef:fa:2e:79:29:69:78:97:92:54:
                    46:ec:c6:88:c1:38:5a:5b:ee:81:b0:c8:34:0b:02:
                    02:8c:cd:15:39:b3:d5:ea:33:d3:44:19:fc:90:7f:
                    40:43:16:ab:56:4b:e7:bc:14:60:6a:a9:f7:cd:86:
                    9f:e8:d7:28:c9:cf:e7:0d:bf:56:bf:83:a4:52:1a:
                    00:6f:e0:90:2e:36:8d:74:50:25:4c:9e:ee:80:fd:
                    26:42:7b:59:2d:92:51:f2:2f:b3:eb:04:65:92:0b:
                    9e:76:63:d3:97:25:f6:2d:4d:0f:1c:b8:56:c5:ed:
                    be:ca:58:fd:57:58:2f:df:64:39:5f:43:c0:40:06:
                    cf:8f:2d:2c:ec:7d:59:59:eb:df:0c:a2:7c:c6:a8:
                    97:b3:ea:87:56:90:fc:15:73:b6:0f:66:65:3b:a6:
                    14:e9:9c:82:a5:a2:e6:b3:fd:d5:e3:81:c9:20:8e:
                    a9:2d:fd:45:3d:36:71:a5:72:85:1f:fb:93:43:86:
                    6a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4D:13:62:C3:87:25:EC:D7:D4:5D:BA:FA:94:86:8A:6A:B7:5A:F5
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3230362e3130392e35362e302f32332d3332203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.109.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:e5:2c:c9:6e:6c:77:2c:a1:d8:64:c9:69:f7:c6:8a:b6:78:
         f6:72:14:c4:1d:e8:3a:51:cc:90:fd:a0:27:4a:41:0f:5f:98:
         f8:70:df:c0:64:3f:a7:17:d9:19:c9:03:21:5d:f0:b6:db:27:
         94:96:fc:08:1c:49:d7:aa:82:63:17:0d:8a:f2:f7:09:0c:74:
         76:35:ed:b6:a1:51:ca:87:2f:38:31:59:04:e8:5a:79:16:0f:
         a4:98:71:d0:52:8d:b4:ba:74:35:c1:a6:bf:78:ca:41:36:ed:
         aa:9d:97:e7:20:fe:25:0f:7a:c0:e1:11:ee:3e:2a:04:2c:56:
         62:8f:7d:44:31:42:0c:cb:88:15:e4:1d:05:56:d5:9d:84:09:
         bb:e3:96:98:38:31:68:96:61:8a:61:bd:ed:da:23:b1:15:f9:
         53:c2:59:4d:29:28:fe:67:bd:36:18:cd:dc:3a:63:ef:77:de:
         9c:ab:50:c6:1a:4d:50:04:54:49:bd:8f:fd:ac:85:4a:9a:70:
         7b:4d:f7:4a:5b:ab:a2:1b:40:03:23:8c:69:59:4e:c0:a3:4a:
         6b:ee:da:a9:86:d5:7d:f7:38:c2:7d:0a:ad:06:f8:3d:35:99:
         88:35:c0:5e:56:26:d0:75:59:da:4b:ed:e6:a8:fd:43:5f:4e:
         a6:08:ce:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:18:50 2025 by rpki-client