Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3230352e3231312e3133362e302f32342d3234203d3e203235313938.roa
File:                     3230352e3231312e3133362e302f32342d3234203d3e203235313938.roa (raw, json)
Hash identifier:          O6KMwg6thZWMQLsm6FNh+RCe7ZQ43rB2u3Nejf6igG4=
Subject key identifier:   35:C7:E0:8F:6D:03:ED:87:D5:A7:1E:94:3B:AC:2A:C5:8E:63:25:9C
Certificate issuer:       /CN=b1f31765fb6a8bff0a6631a170ea4413641304f671ecc2fb47
Certificate serial:       19806B15AB64D2820595D5F229E58611AFC94851
Authority key identifier: 36:17:F1:8F:4B:13:5F:0E:16:4A:15:A8:B6:65:D6:20:51:58:86:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/b1f31765fb6a8bff0a6631a170ea4413641304f671ecc2fb47.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3230352e3231312e3133362e302f32342d3234203d3e203235313938.roa
Signing time:             Tue 07 Oct 2025 04:18:46 +0000
ROA not before:           Tue 07 Oct 2025 04:13:46 +0000
ROA not after:            Tue 06 Oct 2026 04:18:46 +0000
asID:                     25198
IP address blocks:        205.211.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3617F18F4B135F0E164A15A8B665D62051588648.crl
                          rsync://rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3617F18F4B135F0E164A15A8B665D62051588648.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/b1f31765fb6a8bff0a6631a170ea4413641304f671ecc2fb47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/31eb74aa-03c1-4d0b-ad59-8e6af8a10878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/31eb74aa-03c1-4d0b-ad59-8e6af8a10878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 09 Oct 2025 21:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:80:6b:15:ab:64:d2:82:05:95:d5:f2:29:e5:86:11:af:c9:48:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1f31765fb6a8bff0a6631a170ea4413641304f671ecc2fb47
        Validity
            Not Before: Oct  7 04:13:46 2025 GMT
            Not After : Oct  6 04:18:46 2026 GMT
        Subject: CN=35C7E08F6D03ED87D5A71E943BAC2AC58E63259C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a5:20:c9:b7:3d:9f:f9:3f:ed:25:fe:1f:71:
                    de:5f:70:10:b1:c4:dc:2b:18:72:28:68:72:bf:0d:
                    d3:f2:8c:75:f5:70:28:9c:40:45:c3:40:88:23:f3:
                    f0:17:1e:03:f6:8d:b5:a7:49:f0:84:ee:f3:af:f4:
                    91:e9:e2:29:79:0a:96:d2:86:ec:fc:c7:34:59:0e:
                    56:52:97:e1:6e:9c:e8:2a:87:f3:cc:0a:23:d5:72:
                    99:88:be:50:e1:90:31:6f:b9:06:fe:80:5c:e4:db:
                    0d:89:69:46:c8:f4:95:65:96:a4:4b:4e:22:27:55:
                    d5:01:6b:62:44:33:d1:30:72:89:1d:bd:bc:06:27:
                    1d:e6:7d:9a:7f:1d:b2:1c:c2:a2:5a:5f:68:6d:28:
                    41:3e:76:44:e0:be:30:41:37:b0:9a:96:74:44:b9:
                    6a:9c:4b:ce:e0:78:09:70:0c:7f:3f:f3:8c:79:9b:
                    a1:b1:35:2c:c5:1d:e8:19:8a:97:29:e7:e0:97:29:
                    9a:fb:e9:40:a7:a9:dd:e2:6d:81:57:bf:7d:f4:05:
                    18:12:49:a8:53:21:3a:a9:6b:22:9f:fb:0e:bd:08:
                    ca:d9:c5:a8:6e:08:f0:59:03:03:17:38:0c:73:1b:
                    ad:2b:61:df:d7:4e:4e:73:73:27:0e:2c:c5:86:a9:
                    a9:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C7:E0:8F:6D:03:ED:87:D5:A7:1E:94:3B:AC:2A:C5:8E:63:25:9C
            X509v3 Authority Key Identifier:
                keyid:36:17:F1:8F:4B:13:5F:0E:16:4A:15:A8:B6:65:D6:20:51:58:86:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3617F18F4B135F0E164A15A8B665D62051588648.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/31eb74aa-03c1-4d0b-ad59-8e6af8a10878/b1f31765fb6a8bff0a6631a170ea4413641304f671ecc2fb47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/c002a75637104e76a395c2d142fd0c01/0/3230352e3231312e3133362e302f32342d3234203d3e203235313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:e8:8f:b6:12:22:fa:7f:9d:ec:ed:29:5c:2d:9f:d9:35:a3:
         55:de:01:65:b8:45:1c:43:70:de:11:a1:4e:5f:47:86:ef:cc:
         f9:a2:2c:22:ee:16:00:6a:07:2c:85:0b:32:82:4a:ec:77:50:
         0e:ae:83:4d:6f:e0:0c:96:36:e1:0c:7a:8d:79:23:5d:67:c8:
         19:8d:b4:d9:f6:ce:4c:33:bc:05:1c:d9:15:ae:5f:f6:01:a1:
         c2:c5:6e:c9:00:b1:ae:06:c5:1e:48:76:b9:dc:94:39:34:3c:
         2a:61:76:88:af:8e:67:38:46:fc:7f:bb:2b:a5:ac:2c:5a:80:
         4f:83:6a:35:1e:fb:ae:9e:5b:1d:06:e8:a5:b0:7d:de:70:a8:
         4b:4d:f3:5b:85:b7:b4:1b:68:a6:f9:4f:1c:21:a5:69:1f:60:
         2e:d3:3f:dd:ee:60:da:36:98:db:cb:b7:38:9e:f7:ea:50:58:
         e9:4a:a3:68:ef:6f:6e:fc:72:07:5c:78:31:bf:72:8b:3e:bc:
         84:d2:58:22:32:26:78:00:0e:6c:db:85:56:21:8a:88:df:4a:
         1d:e7:00:8e:ac:c0:1a:96:43:be:82:eb:ef:70:5e:6a:93:cc:
         d3:cc:4b:7f:a0:32:51:d2:c2:f8:56:a5:a9:60:dd:fa:42:2b:
         fa:98:17:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:03:55 2025 by rpki-client