Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32342d3234203d3e20343030333034.roa
File:                     36342e34392e31322e302f32342d3234203d3e20343030333034.roa (raw, json)
Hash identifier:          UwUTlJxYQNDIojd+rp8wn41FRXlDTz4wSY7XCq3DSqE=
Subject key identifier:   A9:EC:40:51:7A:5E:EF:55:E0:C3:CC:17:A2:EB:10:C9:EA:B7:1C:B3
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       0298D280D5E892C1B7FADC60F7FBDB33DCF9770F
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32342d3234203d3e20343030333034.roa
Signing time:             Tue 01 Jul 2025 01:44:00 +0000
ROA not before:           Tue 01 Jul 2025 01:39:00 +0000
ROA not after:            Tue 30 Jun 2026 01:44:00 +0000
asID:                     400304
IP address blocks:        64.49.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 17:52:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:98:d2:80:d5:e8:92:c1:b7:fa:dc:60:f7:fb:db:33:dc:f9:77:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: Jul  1 01:39:00 2025 GMT
            Not After : Jun 30 01:44:00 2026 GMT
        Subject: CN=A9EC40517A5EEF55E0C3CC17A2EB10C9EAB71CB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:18:6e:c4:1c:6b:58:91:3a:a4:d4:a2:91:67:
                    ab:ae:13:48:c1:71:bb:ce:87:11:98:dd:85:c1:cb:
                    55:eb:2c:3a:62:8e:5f:9f:14:ed:9a:45:9f:85:b7:
                    27:07:7c:12:e2:6e:08:62:da:98:16:47:51:fa:49:
                    af:7e:c6:a5:a3:67:49:23:ef:f4:3c:d7:a1:da:0d:
                    e5:81:3c:14:45:fa:29:be:4b:30:6f:e4:95:20:1b:
                    18:ec:44:1a:c5:e2:c4:8e:0e:5e:78:0e:34:24:61:
                    47:64:96:b3:b1:3f:e1:88:42:6b:0e:11:35:6b:26:
                    ed:82:2b:7f:32:26:5c:37:92:54:4c:a4:0b:47:43:
                    2a:e9:8b:ce:13:14:76:b7:b0:7a:b1:19:58:59:9c:
                    95:41:35:34:58:47:69:66:b6:45:a1:31:c1:15:46:
                    0c:9d:45:1b:b6:25:e2:2d:2b:77:2a:d1:af:84:4e:
                    38:af:8a:3b:4b:40:cb:56:53:b8:9d:ba:0c:a8:8b:
                    cf:44:1c:74:87:80:54:12:d4:98:0d:2d:73:c3:51:
                    b5:de:ea:c9:4b:1e:61:7a:af:0e:d8:d2:61:b2:27:
                    63:5e:00:1d:90:1c:6b:ef:8e:8b:fa:e4:2f:13:08:
                    7a:15:53:b9:3e:72:52:3a:5f:ce:4b:2e:d9:9f:35:
                    4c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EC:40:51:7A:5E:EF:55:E0:C3:CC:17:A2:EB:10:C9:EA:B7:1C:B3
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/36342e34392e31322e302f32342d3234203d3e20343030333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:12:c9:97:68:2f:0b:d4:5d:57:ab:95:91:7f:4f:a1:9e:b4:
         a7:7b:e2:ba:b1:bc:b8:0a:39:fc:8d:93:c4:02:c6:e9:be:d0:
         b0:26:a4:92:f2:a9:a7:d3:8e:be:1d:14:d5:c3:57:a4:81:37:
         a6:29:02:22:2f:79:f0:c0:99:c0:85:12:05:95:04:1b:0a:f0:
         f4:cd:1f:0d:a0:77:21:29:1a:9e:bd:6b:6b:b3:26:f4:44:44:
         60:cb:b0:ec:9a:e7:f9:be:51:39:90:eb:b0:67:27:8a:ec:7a:
         5a:da:76:34:c7:b5:1f:f0:93:2f:40:57:dd:65:b7:2c:8b:f9:
         31:11:7f:9e:0d:2e:a2:9a:2c:2e:06:21:f7:34:7e:ce:1c:78:
         ee:a0:e5:f3:61:1a:f2:35:4b:c0:42:60:df:e9:6c:1f:56:33:
         51:ca:a8:e9:93:d0:1a:44:eb:dd:93:71:f3:8c:78:99:64:da:
         04:66:a5:b7:54:c9:96:94:fd:aa:3b:34:9b:e4:97:c9:e8:11:
         6f:ea:1f:b1:24:01:1a:c5:8d:c1:5a:a4:e8:53:e1:4a:f2:e2:
         88:e2:df:99:8f:7e:3d:c9:d3:9a:ef:1b:1b:7e:37:4e:65:12:
         5e:a2:87:dc:73:0a:d6:3b:a8:97:d8:08:c9:3c:22:87:2d:b3:
         98:9a:5e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 23:18:55 2025 by rpki-client