Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/3133362e3137352e39322e302f32342d3234203d3e20333938393033.roa
File:                     3133362e3137352e39322e302f32342d3234203d3e20333938393033.roa (raw, json)
Hash identifier:          HB8W9HkRbYIBOxSrvYbFq33peeQD0ws7OkFs/QJen3M=
Subject key identifier:   78:18:DC:33:D6:E1:5F:88:1A:AD:FA:92:09:65:CE:66:39:8E:7C:C1
Certificate issuer:       /CN=4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc
Certificate serial:       57DFE7F6AA73ACF7DEF2F4B27924D55F49A5552E
Authority key identifier: 93:86:DF:13:4F:B2:7C:DF:B7:72:42:D4:13:9D:59:39:92:44:07:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/3133362e3137352e39322e302f32342d3234203d3e20333938393033.roa
Signing time:             Sun 06 Jul 2025 22:32:54 +0000
ROA not before:           Sun 06 Jul 2025 22:27:54 +0000
ROA not after:            Sun 05 Jul 2026 22:32:54 +0000
asID:                     398903
IP address blocks:        136.175.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.crl
                          rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/ba2a056d-e4f4-44a7-ab61-c69845114d88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 16:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:df:e7:f6:aa:73:ac:f7:de:f2:f4:b2:79:24:d5:5f:49:a5:55:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc
        Validity
            Not Before: Jul  6 22:27:54 2025 GMT
            Not After : Jul  5 22:32:54 2026 GMT
        Subject: CN=7818DC33D6E15F881AADFA920965CE66398E7CC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:3b:de:4b:fc:fa:7f:ef:5f:a9:79:2e:2c:
                    43:e6:da:10:38:55:aa:44:10:95:22:b7:44:9b:9e:
                    63:48:89:cc:66:b1:0a:78:d8:2d:dd:7e:68:2c:d0:
                    5e:71:64:60:99:24:91:af:9c:fd:5e:d4:1d:67:7b:
                    d8:51:75:7a:f8:ab:7a:0f:e1:56:4e:ab:13:26:bc:
                    6b:f5:53:9c:21:26:16:05:40:ad:91:02:30:08:a6:
                    5d:b8:1a:08:88:b8:e0:56:12:5e:6d:fe:a8:ec:ba:
                    57:fe:8f:ba:9c:08:31:07:45:49:31:ae:75:2b:8f:
                    1f:af:25:23:8f:d2:75:23:5e:15:b2:fa:a8:3f:ff:
                    40:4a:3f:cc:b8:ae:e3:d3:43:d2:d0:71:ef:3e:51:
                    15:21:90:16:c6:c4:14:4d:cd:6d:89:df:cd:fc:a0:
                    5c:19:72:89:60:57:34:79:9b:0c:1f:d7:00:95:f8:
                    2f:36:2a:5a:cf:c0:a7:49:2e:26:e4:4a:49:1a:62:
                    e9:90:78:ca:d0:df:50:2c:62:b3:c2:d4:a8:cb:3b:
                    bb:2d:0c:c4:3a:a0:77:d7:ce:1e:28:b8:20:ac:52:
                    a5:69:9e:d6:69:34:a9:b8:ce:81:9e:c3:45:1c:f2:
                    fa:e2:13:ce:51:36:8e:33:f9:f5:b6:6a:05:79:01:
                    13:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:18:DC:33:D6:E1:5F:88:1A:AD:FA:92:09:65:CE:66:39:8E:7C:C1
            X509v3 Authority Key Identifier:
                keyid:93:86:DF:13:4F:B2:7C:DF:B7:72:42:D4:13:9D:59:39:92:44:07:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/9386DF134FB27CDFB77242D4139D5939924407FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ba2a056d-e4f4-44a7-ab61-c69845114d88/4660b88c8bfdcc3ae9541ff0ac4d8dd12906587d303f7336dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/660b2d1267eb47d780970c52f7960aa6/0/3133362e3137352e39322e302f32342d3234203d3e20333938393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:d2:c2:c0:8b:73:79:70:64:0f:a5:50:8c:ee:20:fe:13:9c:
         e6:47:c0:25:91:78:84:50:e4:a8:f3:5e:2c:40:bb:8b:ef:c6:
         d8:18:6a:b3:1f:e8:31:a1:50:77:51:94:bd:36:69:3c:f8:54:
         7a:12:f5:ba:83:38:8f:d6:35:2d:14:e8:c9:92:09:9e:bd:28:
         0b:c6:91:2d:92:ff:03:eb:03:09:c1:7b:b8:86:9c:0a:37:1b:
         64:f8:87:4c:54:79:8d:9c:32:e6:a9:b1:60:63:2e:32:62:29:
         a5:75:ce:23:37:8c:df:56:44:c6:8c:16:34:9b:7b:01:dc:93:
         fc:1a:d8:95:23:c2:6a:0b:fc:cb:c7:c4:fb:29:af:79:6e:3b:
         59:bc:32:42:8d:89:e6:07:23:d9:0b:67:fc:1d:b8:ac:86:81:
         9b:ae:e6:62:7c:24:57:e2:55:a4:bc:1e:4f:78:29:0a:aa:82:
         05:f7:b7:5c:9a:8e:de:3a:74:a2:27:10:e9:4a:d6:90:8e:70:
         02:e0:b7:9e:4d:34:45:2e:43:3a:78:80:0e:30:40:0c:a9:43:
         d7:57:ec:e1:4e:26:d2:34:1c:c5:f3:aa:c6:ce:f4:81:b0:17:
         a3:2b:2b:a9:bb:72:6f:24:3e:99:b1:eb:fb:58:2d:65:9c:6f:
         b4:a2:7e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 17:25:07 2025 by rpki-client