Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32342d3234203d3e203533333536.roa
File:                     3230392e38372e3136342e302f32342d3234203d3e203533333536.roa (raw, json)
Hash identifier:          8GHuxZ5387rXZsWxpP8q6PnJAVStekUecFw5I0/jnH4=
Subject key identifier:   A3:82:10:96:8D:C9:7E:22:FD:AC:9C:6F:07:02:85:4A:AC:96:CA:63
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       469C9751B1451B029E91E677A4DC1AA19C7FCFE5
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32342d3234203d3e203533333536.roa
Signing time:             Tue 08 Jul 2025 17:23:48 +0000
ROA not before:           Tue 08 Jul 2025 17:18:48 +0000
ROA not after:            Tue 07 Jul 2026 17:23:48 +0000
asID:                     53356
IP address blocks:        209.87.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:29:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:9c:97:51:b1:45:1b:02:9e:91:e6:77:a4:dc:1a:a1:9c:7f:cf:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jul  8 17:18:48 2025 GMT
            Not After : Jul  7 17:23:48 2026 GMT
        Subject: CN=A38210968DC97E22FDAC9C6F0702854AAC96CA63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:0d:3d:62:b8:94:78:cf:8e:60:61:58:8b:
                    d8:24:11:3e:b0:8f:0d:9f:21:1b:16:9d:56:73:d2:
                    71:85:a5:0c:42:cd:28:30:17:d8:ef:46:8d:44:5b:
                    89:c6:4d:49:99:ab:13:6f:4d:84:a5:3a:12:9a:5c:
                    ad:48:0d:ca:73:30:7f:9a:56:72:cd:43:b1:87:5f:
                    4e:4b:53:65:43:ef:c4:c2:e1:b5:a4:10:88:05:30:
                    ea:66:f8:c4:76:12:33:84:0f:af:82:4a:b5:c4:fd:
                    9d:51:56:95:c3:a7:4e:f2:93:43:2d:53:65:33:d5:
                    a8:67:98:73:61:ee:04:71:0b:a8:89:d8:65:cd:eb:
                    c2:cf:a5:1d:ce:5e:22:b0:e5:f2:7a:1f:94:ca:d9:
                    ee:2c:82:93:5d:c7:a2:24:a0:71:47:a5:83:19:19:
                    6d:15:6c:97:52:a3:b4:20:00:d3:72:b7:6d:f6:f9:
                    e3:a3:fc:99:ea:43:ee:e9:36:ab:aa:11:2b:0e:40:
                    db:ee:12:01:4f:64:73:58:20:e8:6c:c6:be:54:2c:
                    be:a3:d1:cc:d5:6a:d7:7b:df:f5:37:2d:be:80:8e:
                    dd:ba:7a:1a:d3:7d:4e:93:b4:2a:08:1c:88:2d:71:
                    af:0a:63:30:42:68:2b:e6:b1:e4:33:d8:7f:84:34:
                    5d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:82:10:96:8D:C9:7E:22:FD:AC:9C:6F:07:02:85:4A:AC:96:CA:63
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136342e302f32342d3234203d3e203533333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:9c:2a:80:9f:f1:4f:9f:3e:9b:13:64:7b:ae:9d:c8:cc:a6:
         8b:1e:45:01:99:f2:d2:5d:6f:69:66:c5:dd:b7:45:25:0e:14:
         66:1d:a2:dc:dc:9b:1e:83:39:50:a6:1a:40:89:4b:95:59:65:
         8c:6a:7d:aa:c4:fe:c6:52:d8:ee:c2:77:d7:35:fa:2c:30:d7:
         c6:81:09:3f:56:72:70:e4:39:f0:82:e2:ea:23:77:60:6e:a7:
         9f:ed:20:ff:75:05:9e:ec:1a:5a:dc:6b:94:27:69:9b:05:f2:
         14:9c:3f:34:2e:d1:77:68:17:6a:ce:94:9d:66:cf:1a:9f:a4:
         bf:a0:be:48:70:09:81:6c:52:bf:72:e1:40:13:7f:1d:b0:34:
         9d:f4:83:df:8c:5b:9d:2e:8d:7b:53:81:78:c8:e1:86:c8:55:
         8d:41:33:91:7e:c3:19:6d:2b:42:fe:87:76:d7:3d:11:47:fe:
         d4:ef:c8:e9:54:40:7b:b5:a9:0d:3c:b7:3a:1a:6a:3c:a5:12:
         e3:4c:b4:82:46:57:92:ec:3f:fa:9b:39:03:0d:68:cd:bb:62:
         ed:33:b7:57:a7:66:21:38:8f:a5:0a:5a:0e:9d:f6:59:94:7e:
         b6:10:19:e1:1f:14:95:4f:8d:96:87:bf:26:ba:ec:d4:80:db:
         ff:36:d3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 14:08:56 2025 by rpki-client