Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e203231383539.roa
File:                     3230352e3231312e3135352e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier:          WpXFOxndroxLqo4V4bbwCdtLABAR4uBM15vuaIEpbq8=
Subject key identifier:   54:BE:57:E8:C2:EB:42:0B:2C:74:26:07:56:C6:63:00:38:2E:79:14
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       4E4F55C44B4592416144E4FBEB1DF50DD53CA8BD
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e203231383539.roa
Signing time:             Fri 25 Jul 2025 08:16:29 +0000
ROA not before:           Fri 25 Jul 2025 08:11:29 +0000
ROA not after:            Fri 24 Jul 2026 08:16:29 +0000
asID:                     21859
IP address blocks:        205.211.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:4f:55:c4:4b:45:92:41:61:44:e4:fb:eb:1d:f5:0d:d5:3c:a8:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Jul 25 08:11:29 2025 GMT
            Not After : Jul 24 08:16:29 2026 GMT
        Subject: CN=54BE57E8C2EB420B2C74260756C66300382E7914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6e:20:24:99:73:3c:6d:8f:46:4a:c8:40:13:
                    e3:6f:b5:b3:9b:bf:c3:9c:1d:47:5d:b7:6d:4c:df:
                    33:a1:47:94:39:fd:5c:8a:4c:5f:5a:55:ef:f3:09:
                    a2:28:cd:cf:4a:39:79:9a:41:7e:07:d2:6d:e2:a0:
                    1d:8b:9c:b4:21:f8:76:29:83:2d:72:0d:d2:3d:f9:
                    02:8b:7b:e4:32:b2:a7:a1:8a:b4:4f:2b:50:a6:3c:
                    4b:a5:1e:8e:02:3c:d0:ba:e1:f5:ac:f2:08:91:61:
                    d6:87:a8:57:bc:d4:c0:05:f1:d0:d9:37:96:fb:85:
                    7c:7e:1d:9e:68:60:d0:2f:7b:a7:17:ce:08:2f:c8:
                    52:f9:9d:a1:c3:0a:69:da:e0:f6:2c:54:57:b1:8b:
                    2d:1f:05:2b:b0:1a:58:0a:a4:4c:e7:6a:4f:69:ed:
                    42:8e:31:45:1f:bf:69:1c:96:15:8c:46:eb:05:1d:
                    3e:51:7a:d6:df:97:8e:0a:b4:3f:bc:e7:fc:b9:05:
                    c7:92:a3:48:27:e0:ac:1e:3c:05:17:6d:a5:e6:a7:
                    15:9a:9e:7d:04:20:2e:45:3c:42:ac:03:ee:a2:52:
                    3a:62:29:9c:2b:d2:89:0a:b8:e9:38:6e:60:1b:3f:
                    e2:e4:3b:6e:26:9e:e2:82:d4:e8:55:4b:90:da:23:
                    8f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BE:57:E8:C2:EB:42:0B:2C:74:26:07:56:C6:63:00:38:2E:79:14
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135352e302f32342d3234203d3e203231383539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:af:83:8d:5e:e8:6c:8f:ee:83:51:6b:94:0e:ad:7d:ef:99:
         0e:21:14:ee:07:09:a7:cd:55:bc:df:a6:1d:f6:7f:93:69:0b:
         66:a0:d8:98:dd:40:a0:80:b7:f6:c8:6f:78:63:0c:90:99:6c:
         54:75:86:30:6e:69:3d:5d:b1:0a:21:9e:32:e6:3b:6d:59:41:
         16:c8:89:d7:f2:ad:05:ed:1f:02:43:16:45:9d:ba:33:29:0f:
         5f:e7:74:8a:e7:fa:4a:20:d0:58:52:4f:cc:d0:6f:f6:89:c1:
         5b:e7:29:83:43:ca:fc:6c:37:a9:cb:2f:37:4d:c1:7a:24:04:
         19:06:ea:f5:be:96:41:f4:cf:17:0c:61:0b:2e:61:f8:68:df:
         94:af:09:41:5b:66:35:7b:6f:e0:b7:46:e9:fc:cd:87:76:5e:
         3a:0b:0d:56:a8:b5:5d:81:fc:d6:3f:fa:c7:95:37:7e:9c:6a:
         6f:10:0f:34:71:e0:86:0a:4b:91:12:90:e1:d4:86:49:8d:ef:
         fb:62:c3:02:7e:45:ab:d4:bc:96:6a:b6:9c:e6:d6:6a:30:c1:
         57:3c:ca:c7:16:48:d2:9b:7d:2a:93:cd:4b:2f:37:cf:2c:61:
         1c:26:4d:d1:09:f9:a2:ad:10:4d:84:9e:fc:c3:0b:fa:a6:20:
         dd:e4:85:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:43 2025 by rpki-client