Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34302e302f32342d3234203d3e203534313438.roa
File:                     3231362e3233382e34302e302f32342d3234203d3e203534313438.roa (raw, json)
Hash identifier:          NtYxtWWEeoMA6GGAc1nar/UUy0Z4750LAkxGVI+SlBc=
Subject key identifier:   47:6A:98:32:F5:8F:5D:E6:1C:4A:04:C7:D5:E4:F1:E3:7C:8B:3A:D8
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       3E122462BAAC4C6594A0BDFF1670A961D5ACA13D
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34302e302f32342d3234203d3e203534313438.roa
Signing time:             Tue 01 Jul 2025 20:15:49 +0000
ROA not before:           Tue 01 Jul 2025 20:10:49 +0000
ROA not after:            Tue 30 Jun 2026 20:15:49 +0000
asID:                     54148
IP address blocks:        216.238.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 17:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:12:24:62:ba:ac:4c:65:94:a0:bd:ff:16:70:a9:61:d5:ac:a1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Jul  1 20:10:49 2025 GMT
            Not After : Jun 30 20:15:49 2026 GMT
        Subject: CN=476A9832F58F5DE61C4A04C7D5E4F1E37C8B3AD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b9:a8:be:fb:65:42:b1:3d:3b:9f:43:4e:d9:
                    0c:a9:4f:9b:eb:f1:6e:03:6d:cb:9a:88:f0:d3:1b:
                    c6:8c:36:44:eb:b0:cc:4d:d8:2a:42:68:3e:37:d0:
                    12:e1:c8:37:fd:f5:f5:8d:e8:be:ca:30:fa:f8:c0:
                    19:70:0d:0c:ae:7b:da:3f:ee:5f:93:4a:c8:3f:b4:
                    9f:fd:f0:55:91:78:14:f3:1f:09:8e:7d:12:48:18:
                    68:b8:f9:cb:6b:89:72:38:cf:5b:c3:e9:09:a0:bf:
                    7e:67:a5:c3:6a:6a:28:da:21:b4:8d:83:a4:57:49:
                    56:6b:2d:53:80:97:0a:e7:c6:02:ed:1d:cb:4e:43:
                    8a:e6:b7:a8:23:aa:ba:31:9b:41:75:db:89:69:5b:
                    0f:ca:e1:cd:31:b4:55:54:79:50:f8:8e:1b:f1:15:
                    a4:fa:1e:d8:8d:8c:19:e3:fe:4e:75:6c:80:03:11:
                    ca:39:58:52:e5:05:d1:18:4d:93:32:4e:c9:5d:33:
                    2c:f9:f0:fd:8e:60:4c:ab:66:04:85:c7:c8:ec:60:
                    77:ab:5e:3a:36:10:6a:d6:72:9f:9c:fe:ea:f5:e9:
                    f3:8e:1f:bd:44:04:43:04:19:3e:ea:72:65:ef:86:
                    b6:f2:8a:f9:79:98:1c:f1:e8:85:d3:ea:97:f6:34:
                    01:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:6A:98:32:F5:8F:5D:E6:1C:4A:04:C7:D5:E4:F1:E3:7C:8B:3A:D8
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34302e302f32342d3234203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.40.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:bc:d3:f9:28:f7:46:99:84:c9:87:36:1b:72:98:f0:75:9a:
         ab:80:ae:15:c2:e4:dd:8d:93:00:e9:c3:c0:9f:e9:62:86:31:
         cf:42:f5:70:9c:08:73:27:a8:20:f2:b7:ad:da:d4:09:52:51:
         11:e7:f5:f4:ad:2b:02:63:15:dd:18:73:d9:09:12:c9:19:87:
         3b:20:5c:5a:36:18:6f:84:5d:e7:2b:6b:bb:ad:f5:bd:18:77:
         b2:99:b8:e6:a5:c7:d6:f3:b7:e0:18:e4:bb:90:18:97:10:7b:
         d4:37:d1:16:0b:43:50:52:a1:1a:b5:33:33:b0:2c:ea:b0:70:
         83:48:0e:78:fe:05:c2:33:59:0a:bd:f6:21:15:69:80:a0:c5:
         53:b6:8e:aa:23:39:3d:07:da:36:e0:d0:9f:96:8b:04:c4:91:
         fa:66:c5:b6:e3:d8:dc:af:7c:e9:6c:a4:56:7d:a4:eb:37:3f:
         dc:2d:be:b9:86:58:90:15:92:da:2e:f8:ad:01:2d:e4:88:64:
         3a:8a:66:2e:e3:53:45:ff:cb:05:a5:63:b9:d8:e4:31:21:07:
         9f:72:9a:3f:fd:1f:b6:c9:da:5d:34:bb:26:45:ee:86:3c:9b:
         e1:8a:89:65:5d:6c:23:c0:75:7b:29:f0:38:49:5b:a2:5f:a1:
         d4:34:f3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:14:37 2025 by rpki-client