Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203332363638.roa
File:                     3137322e38322e38382e302f32342d3234203d3e203332363638.roa (raw, json)
Hash identifier:          NfnGHFx1EDHeednH7kStjp826dKlJVWF2SzCvMOJq9U=
Subject key identifier:   BC:48:93:88:E1:6F:ED:20:2A:9C:30:11:05:7B:CF:68:F4:9F:B0:51
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       52A0EE9A6490238DE78969664E22BC53DEBCE7AB
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203332363638.roa
Signing time:             Tue 22 Jul 2025 17:32:35 +0000
ROA not before:           Tue 22 Jul 2025 17:27:35 +0000
ROA not after:            Tue 21 Jul 2026 17:32:35 +0000
asID:                     32668
IP address blocks:        172.82.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 13:53:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:a0:ee:9a:64:90:23:8d:e7:89:69:66:4e:22:bc:53:de:bc:e7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Jul 22 17:27:35 2025 GMT
            Not After : Jul 21 17:32:35 2026 GMT
        Subject: CN=BC489388E16FED202A9C3011057BCF68F49FB051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:37:42:b8:e5:99:d8:c0:cb:d2:75:51:d7:94:
                    6a:d4:4d:98:d8:4c:0a:a6:95:59:22:0a:94:85:f7:
                    51:97:76:70:44:77:d6:46:c0:f9:39:a3:14:5f:c9:
                    5a:0c:05:98:1d:a9:05:0c:d7:f0:a6:b0:cf:85:2f:
                    2c:d6:92:af:fd:3c:10:bf:9d:44:44:49:fd:4a:36:
                    e9:f2:99:02:c5:8d:0d:11:65:97:fd:3a:90:a8:35:
                    eb:d2:5e:14:79:90:00:5d:d6:52:98:93:2b:57:60:
                    3b:c0:ed:6f:78:4e:1c:3a:d1:64:5e:fe:74:86:54:
                    92:6e:96:ab:2c:d8:4d:6e:b8:d0:48:fd:63:3c:1b:
                    dd:5a:ab:fd:f2:cd:cb:27:a7:a1:b3:ef:9d:98:b7:
                    7f:cc:a7:62:61:23:2a:4f:59:ec:f6:e9:b7:24:ab:
                    16:a8:03:a6:7c:3a:47:9a:aa:6c:40:f3:9f:23:ff:
                    c1:88:b5:76:e3:eb:dd:cc:8b:aa:79:ab:9e:8f:97:
                    f2:6a:73:4e:73:84:99:96:e5:48:1f:f5:ac:77:5e:
                    bd:50:c5:69:62:40:6a:42:7c:f5:64:46:6d:c6:56:
                    f8:88:f7:17:9d:44:a7:a4:24:6e:15:70:b3:33:c0:
                    5d:99:db:c9:31:30:85:23:07:60:da:17:97:75:4d:
                    a9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:48:93:88:E1:6F:ED:20:2A:9C:30:11:05:7B:CF:68:F4:9F:B0:51
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e203332363638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:e2:57:61:e5:bd:0b:dc:d4:03:70:12:08:15:1f:86:80:a8:
         23:19:69:0b:18:07:77:77:bb:2f:2d:f2:aa:29:04:79:d9:02:
         72:97:4a:f1:af:5a:1f:7f:e2:14:42:d1:a6:96:ae:72:6d:d7:
         bf:e2:e6:36:9a:d6:13:7e:8a:85:48:ce:53:ca:f2:3a:31:e7:
         f4:d6:c7:55:10:c8:17:ae:f1:54:d6:46:9c:7e:26:ee:0c:dd:
         3a:a9:f1:cf:45:80:aa:08:66:6d:4f:4b:ac:4b:56:94:81:2c:
         49:56:e7:3f:83:a0:7f:dd:d8:0b:43:c2:76:7b:75:50:83:c9:
         d4:e0:96:8f:c8:4b:e2:41:1e:41:41:b3:2f:17:2a:1c:51:b2:
         9f:f9:59:5a:46:e4:99:2c:93:9c:a5:65:f7:61:0e:b8:fb:ad:
         a0:65:54:91:80:f3:d7:75:0b:ef:5c:f7:be:e4:c3:f3:f2:1f:
         43:9f:75:53:3c:29:ad:e7:29:30:bf:d2:eb:17:7a:3a:93:a3:
         0a:70:0c:4d:11:1a:5e:34:35:43:dc:46:e9:34:ac:6a:32:a5:
         35:51:24:57:e9:83:76:c6:e5:f4:bf:ee:d7:78:bb:72:5f:0c:
         02:8a:af:4a:c4:2a:31:a7:e5:66:de:b2:8f:0c:1f:7f:27:e9:
         92:38:69:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 02:06:43 2025 by rpki-client