Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20313534303439.roa
File:                     3230352e3231312e3135352e302f32342d3234203d3e20313534303439.roa (raw, json)
Hash identifier:          AbhZwM9Wm95NVMVXNabZX4s+Sb/0pd0h90VeSB7gwZQ=
Subject key identifier:   52:8C:0E:D4:34:F3:86:A8:19:4E:53:9B:26:39:8C:08:59:2C:5A:AE
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       2EF22002559949BAE5D2AD42902D41440978DB0B
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20313534303439.roa
Signing time:             Mon 29 Sep 2025 09:15:53 +0000
ROA not before:           Mon 29 Sep 2025 09:10:53 +0000
ROA not after:            Mon 28 Sep 2026 09:15:53 +0000
asID:                     154049
IP address blocks:        205.211.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 10 Oct 2025 03:14:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:f2:20:02:55:99:49:ba:e5:d2:ad:42:90:2d:41:44:09:78:db:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Sep 29 09:10:53 2025 GMT
            Not After : Sep 28 09:15:53 2026 GMT
        Subject: CN=528C0ED434F386A8194E539B26398C08592C5AAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:fe:13:b5:d6:24:50:ad:97:73:1e:6e:07:27:
                    5c:a8:29:ea:42:47:1e:c0:9a:f3:46:b6:0e:d9:67:
                    69:c8:65:71:20:5e:ce:c5:12:95:6a:89:72:e2:68:
                    74:78:78:f3:ec:ab:ac:17:9c:63:15:9a:d9:83:27:
                    f9:e9:d6:79:cf:46:72:98:aa:6d:e6:14:c1:a6:12:
                    88:b6:52:12:20:6e:b9:93:88:a2:c9:08:6f:e1:f7:
                    36:e5:48:b2:f5:d1:68:4d:1e:24:d7:b4:1f:78:d2:
                    21:7c:f4:ce:f1:9d:39:44:6e:49:ae:3d:f0:46:8e:
                    66:83:21:0a:09:61:a5:cf:78:d3:be:16:d1:dd:d4:
                    45:55:b0:6f:08:4d:e6:7f:73:00:0d:95:2c:4e:24:
                    8c:6c:b3:1a:24:8b:b8:ca:9c:80:fc:87:83:45:c1:
                    63:cd:80:4b:14:a3:3b:67:9b:22:46:52:42:f3:f2:
                    74:29:6e:39:2e:d2:2a:29:95:64:f7:b4:8f:3c:4d:
                    bc:65:28:a7:f0:94:7e:2c:f2:72:34:af:60:af:cf:
                    13:75:6a:ca:e6:43:4e:26:21:e4:26:56:11:5f:63:
                    61:a1:86:f8:02:44:18:54:3a:d7:b2:e6:a2:ed:f0:
                    69:f9:db:4c:a7:b5:68:6e:2a:49:52:dd:06:cf:7c:
                    1e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8C:0E:D4:34:F3:86:A8:19:4E:53:9B:26:39:8C:08:59:2C:5A:AE
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e20313534303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:cd:3c:a8:ba:1e:4a:0d:27:d5:24:91:d0:5e:b2:6e:7a:35:
         7a:62:3d:7f:b1:7f:ea:51:bf:13:0c:5f:2e:e1:fd:ee:ec:50:
         cc:7d:86:f6:63:16:74:b3:74:6d:5a:d1:cb:98:51:bf:d8:a0:
         40:f3:bb:7d:9a:13:96:00:4c:5e:a6:ab:29:cf:40:71:03:bf:
         9f:22:2d:25:f8:f6:cf:ea:d3:c0:8f:3a:62:06:f6:d6:1e:eb:
         d8:8a:0f:8a:a8:6a:a4:74:79:93:b9:3a:9d:a2:0a:0b:9a:1d:
         be:2a:32:e5:f0:66:14:09:bb:ae:4a:a9:c4:2d:c2:76:57:b1:
         2a:aa:89:26:69:dd:3e:4b:b6:33:1b:b8:93:a6:10:c1:5f:95:
         a3:81:9c:ed:10:85:09:d8:bf:9f:c7:5b:8d:4d:5f:c4:92:21:
         df:8e:57:05:75:06:7a:c6:b8:f6:1e:b8:d6:43:67:dc:fd:00:
         a1:94:6f:a7:b6:91:3d:b1:f8:34:af:ae:68:73:10:37:f5:50:
         5c:2b:6a:6f:43:60:41:f1:88:b8:ed:7c:99:19:b8:05:9c:df:
         72:8b:95:fe:a3:73:a3:46:37:15:4f:af:0f:74:dc:1a:8d:e8:
         2b:e7:c5:38:2c:3f:7c:fb:7a:b2:48:46:cd:39:14:ac:0f:7f:
         4b:97:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 06:22:35 2025 by rpki-client