Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34312e302f32342d3234203d3e203534313438.roa
File:                     3231362e3233382e34312e302f32342d3234203d3e203534313438.roa (raw, json)
Hash identifier:          RRHa4j7Ffw6sXQ4SZ5pvRIwmYt/I025X/IEUm8XQfRI=
Subject key identifier:   21:FB:2F:5D:19:82:92:3A:4E:42:82:92:4B:F1:6B:45:D1:F4:08:8F
Certificate issuer:       /CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
Certificate serial:       758A0E8D61F7DD3D8DE63A8D42EB4EFBC50231A7
Authority key identifier: 04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34312e302f32342d3234203d3e203534313438.roa
Signing time:             Tue 01 Jul 2025 20:16:15 +0000
ROA not before:           Tue 01 Jul 2025 20:11:15 +0000
ROA not after:            Tue 30 Jun 2026 20:16:15 +0000
asID:                     54148
IP address blocks:        216.238.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 17:38:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:8a:0e:8d:61:f7:dd:3d:8d:e6:3a:8d:42:eb:4e:fb:c5:02:31:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788
        Validity
            Not Before: Jul  1 20:11:15 2025 GMT
            Not After : Jun 30 20:16:15 2026 GMT
        Subject: CN=21FB2F5D1982923A4E4282924BF16B45D1F4088F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:66:c8:f9:ef:47:90:e0:5f:14:7f:df:45:9e:
                    38:06:d3:9e:cf:03:84:c6:6b:68:41:66:21:6d:cf:
                    0d:f2:0e:1e:80:c1:ee:ed:c9:b7:d4:ea:c9:46:8d:
                    96:71:2d:2e:70:8c:dd:1c:80:f1:19:a0:32:ff:43:
                    ae:89:e6:6b:00:c9:fc:1d:3d:5d:0d:8a:d3:6c:b6:
                    c5:82:83:65:11:e0:c5:3c:de:f0:d9:06:78:64:69:
                    3a:4a:e0:b0:5c:90:23:4f:59:ba:d6:6d:f4:db:5c:
                    e6:ca:da:94:fc:ef:03:36:29:f0:8e:d8:4c:c3:95:
                    26:93:d0:c8:f2:59:22:39:e6:6d:46:a8:46:ff:7b:
                    9b:19:2f:8b:71:c1:8c:46:01:e5:ab:fd:c0:37:5d:
                    ab:ba:a3:66:f3:70:37:a9:64:77:34:e0:b5:07:98:
                    a5:6f:de:a3:08:9b:d7:33:2b:45:b9:0c:50:5e:2d:
                    12:58:a4:00:42:ee:46:57:2b:95:b8:ed:ef:2a:bc:
                    f0:46:bb:f3:f1:3a:22:4e:c8:5d:33:62:b2:61:6c:
                    e7:a1:ef:e2:28:11:2e:41:d2:da:ee:cd:7d:15:62:
                    fd:13:dc:04:2a:c6:05:f9:21:1f:1f:c0:5d:98:c5:
                    8e:14:38:dd:72:8f:d7:37:b5:61:54:c2:50:19:0f:
                    d3:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FB:2F:5D:19:82:92:3A:4E:42:82:92:4B:F1:6B:45:D1:F4:08:8F
            X509v3 Authority Key Identifier:
                keyid:04:40:EC:91:AE:04:E8:04:91:BF:66:17:36:09:7F:35:69:C7:DB:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/0440EC91AE04E80491BF661736097F3569C7DB1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ee1bdff8-dbb5-4f0f-98e6-c8e1326ba79b/7ecae3204952da74eb1b93714b67cc61bc4f7b1595a2132788.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/3/3231362e3233382e34312e302f32342d3234203d3e203534313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:1c:e1:76:73:91:c9:2b:0f:a9:07:b7:53:b9:80:11:ef:ac:
         90:02:48:ec:8a:ae:be:73:95:22:7d:09:5e:39:5d:6d:d9:5e:
         bd:73:5d:a6:fc:d2:88:80:68:ad:82:a8:34:fa:28:96:e6:ab:
         f0:26:3f:09:ff:17:fb:b4:74:09:1c:91:d6:9d:7a:80:61:44:
         ef:9e:b6:e9:20:53:71:ab:93:41:2b:49:d4:9f:3e:e7:21:fd:
         e6:50:28:bc:0b:0e:f7:99:e4:63:fb:fb:43:2f:27:57:b6:3a:
         bf:87:70:59:e5:63:c7:6a:1e:d7:b8:b7:85:35:c2:f1:29:2c:
         e9:e2:c1:e0:99:b2:0d:d1:e7:ac:14:dd:a0:81:73:08:ee:7c:
         90:aa:e7:8c:30:8e:11:a1:2d:48:6e:cc:2c:ba:75:af:d3:14:
         d4:e0:e1:1c:7a:8f:78:15:dc:c7:60:4d:04:61:39:12:dd:7b:
         5c:96:13:b3:fc:38:d1:0d:b4:8b:f0:2f:e8:7a:99:21:85:45:
         35:d9:89:58:72:7b:21:8c:74:60:87:f5:1d:ba:ae:d2:b9:5f:
         60:05:b1:45:cf:43:64:b1:0e:74:43:21:ae:34:c6:f9:53:26:
         41:1d:ee:36:76:38:cb:7d:ad:eb:fc:43:83:a1:1a:68:01:c3:
         38:2e:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 06:14:36 2025 by rpki-client