Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3133312e3134332e39342e302f32342d3234203d3e203436343735.roa
File:                     3133312e3134332e39342e302f32342d3234203d3e203436343735.roa (raw, json)
Hash identifier:          sovTlBCEuXhvYEcr4uhnb/BJGNtDjFu0ozyvYCplOzg=
Subject key identifier:   7C:FB:C5:7A:EB:83:EF:A6:D6:24:14:A8:35:B0:52:A1:FC:B4:3D:36
Certificate issuer:       /CN=652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0
Certificate serial:       761C83270C36DAB582B4F6C7BA0B42F85F5A28E1
Authority key identifier: 33:14:20:84:7D:B5:C5:48:A9:C5:5A:F8:74:BB:78:DF:C7:40:DC:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3133312e3134332e39342e302f32342d3234203d3e203436343735.roa
Signing time:             Mon 13 Oct 2025 04:31:57 +0000
ROA not before:           Mon 13 Oct 2025 04:26:57 +0000
ROA not after:            Mon 12 Oct 2026 04:31:57 +0000
asID:                     46475
IP address blocks:        131.143.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.crl
                          rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/5e14e737-77b9-4efb-a5ea-e3119594a666.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 14 Oct 2025 23:08:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:1c:83:27:0c:36:da:b5:82:b4:f6:c7:ba:0b:42:f8:5f:5a:28:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0
        Validity
            Not Before: Oct 13 04:26:57 2025 GMT
            Not After : Oct 12 04:31:57 2026 GMT
        Subject: CN=7CFBC57AEB83EFA6D62414A835B052A1FCB43D36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:23:fe:b9:aa:8d:de:39:96:38:67:97:c4:14:
                    f0:b6:fe:d9:6d:50:ff:0f:f8:90:0f:93:55:3e:39:
                    fb:c5:33:a5:c0:4b:cb:a6:89:b1:3c:97:57:d3:85:
                    c3:ba:fc:74:9c:d7:df:52:db:c4:71:98:8c:02:8c:
                    23:9c:30:22:dd:84:2f:80:97:01:12:32:07:f2:e4:
                    18:97:2e:1d:36:b9:eb:fd:0b:a7:f8:59:ac:c4:27:
                    a8:b9:83:4d:0f:49:9a:4c:fc:04:d5:04:c2:8d:71:
                    83:3e:bb:86:b5:a8:ec:78:e7:74:ff:e1:1e:5d:c1:
                    21:e8:2a:5d:c8:ad:5d:a5:44:82:47:8c:6b:13:0f:
                    b7:42:91:b4:ff:bb:62:3b:00:e5:a5:3d:e7:53:ce:
                    e9:6f:f5:0c:69:f0:7b:98:79:b8:b4:45:4b:c6:7d:
                    26:da:5a:e8:8f:91:db:f1:64:4b:1e:53:e0:47:57:
                    dd:34:b3:1e:75:76:96:a4:d8:ca:d0:42:27:5d:83:
                    31:e2:54:ae:ec:f8:0f:43:8d:d8:8a:e4:71:15:bf:
                    ec:1b:2b:0a:7c:51:3a:98:b7:aa:fa:84:20:f4:e8:
                    b1:5d:d9:71:ef:41:21:dc:65:8c:40:4f:93:21:3e:
                    a6:70:ff:53:3d:9d:47:66:83:70:0a:96:ae:ed:3d:
                    37:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:FB:C5:7A:EB:83:EF:A6:D6:24:14:A8:35:B0:52:A1:FC:B4:3D:36
            X509v3 Authority Key Identifier:
                keyid:33:14:20:84:7D:B5:C5:48:A9:C5:5A:F8:74:BB:78:DF:C7:40:DC:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/331420847DB5C548A9C55AF874BB78DFC740DCE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/5e14e737-77b9-4efb-a5ea-e3119594a666/652879d283eb6ed5975b44cc93e01bd620a50c9a9a58a8e0b0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/853cb4846ee34313bac06954b5ab86bb/0/3133312e3134332e39342e302f32342d3234203d3e203436343735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.143.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:ef:74:1d:ff:c6:ee:3d:69:14:b6:ea:28:2f:0c:b0:96:e7:
         0f:95:8f:7a:e6:55:02:ec:c7:63:1b:36:58:a1:4e:93:cf:71:
         63:00:00:04:9d:69:02:db:14:19:93:bc:3a:d2:82:f0:b5:4a:
         7c:bb:16:97:35:e2:e0:c9:26:e2:77:84:d5:1c:81:6e:fb:e7:
         e3:c0:31:6d:55:f5:4a:87:69:4c:26:19:8e:42:7c:e5:97:5b:
         71:8b:c3:0f:63:75:28:0d:0e:ba:85:ac:db:a3:bb:d2:3b:ba:
         36:f0:9e:b7:6d:94:af:a1:fd:cf:02:16:65:d0:e1:40:99:fa:
         de:4e:88:af:eb:9a:b4:23:2f:17:07:dd:53:f2:77:f9:dd:3e:
         53:24:42:0f:e0:a6:2e:4d:03:c6:a1:b3:ab:2c:f2:02:7c:b5:
         84:5b:5d:ea:18:3a:9e:c9:f4:d5:b3:8a:79:58:20:65:40:fe:
         f6:a7:dd:c3:35:fb:06:d4:66:9d:c3:08:83:c5:66:e6:ce:ae:
         fb:f3:74:ad:6b:d4:2e:d3:9e:f2:c4:f4:e5:2e:ed:75:05:6c:
         b0:b6:68:cb:7e:6e:28:a9:5e:fa:b3:99:7e:1c:1d:0a:52:85:
         39:d5:60:48:99:01:7c:ec:0a:95:9c:24:85:8d:14:f7:aa:dd:
         cd:01:83:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 14 15:02:09 2025 by rpki-client