Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3133302e3235302e3138382e302f32332d3233203d3e20333938393931.roa
File:                     3133302e3235302e3138382e302f32332d3233203d3e20333938393931.roa (raw, json)
Hash identifier:          pT5YgPFYa6SU46h2jM8nSVph7jn/x74XMn2Eqgs9B8U=
Subject key identifier:   0D:26:9A:56:22:A3:59:9B:2A:E3:35:DB:3B:CC:17:89:9A:1E:FE:79
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       66242FA5402FD4DF3D1C2E43DEEB36DB2135D1F9
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3133302e3235302e3138382e302f32332d3233203d3e20333938393931.roa
Signing time:             Thu 14 Aug 2025 15:43:30 +0000
ROA not before:           Thu 14 Aug 2025 15:38:30 +0000
ROA not after:            Thu 13 Aug 2026 15:43:30 +0000
asID:                     398991
IP address blocks:        130.250.188.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 12:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:24:2f:a5:40:2f:d4:df:3d:1c:2e:43:de:eb:36:db:21:35:d1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Aug 14 15:38:30 2025 GMT
            Not After : Aug 13 15:43:30 2026 GMT
        Subject: CN=0D269A5622A3599B2AE335DB3BCC17899A1EFE79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:d7:9b:6b:47:4f:40:eb:b9:29:0c:8f:d2:
                    d8:1b:e9:1d:27:5e:d6:2e:4b:21:7d:1c:70:83:33:
                    c2:0a:fd:94:d5:a5:be:b1:36:02:a4:65:c6:94:18:
                    93:45:53:ec:f4:1c:0d:86:1e:c0:1f:f4:4c:17:b1:
                    ee:e4:98:b1:27:f6:b2:49:3f:ee:08:94:62:79:83:
                    34:41:51:d2:ce:60:74:36:83:f4:89:05:46:85:88:
                    07:fe:e4:52:12:93:58:18:4d:48:f9:a7:5c:3e:93:
                    13:56:7e:c5:49:0c:1c:c4:55:3c:aa:28:a3:ea:a5:
                    7c:cb:fc:bf:45:8d:2f:e1:ff:d7:e4:78:29:1c:5f:
                    bc:63:9f:26:39:e8:1f:35:23:7c:2e:76:05:33:bc:
                    06:7b:63:af:3d:6d:f6:0b:a1:fa:2a:c8:0c:00:ac:
                    8f:68:9b:ff:9b:d3:06:55:71:a4:7f:44:36:7e:34:
                    b1:6d:64:83:7e:f4:a5:96:4c:03:ca:8f:03:56:88:
                    84:c4:ea:f6:ff:85:cd:f2:87:98:2a:8d:c5:1a:ea:
                    75:2c:19:c3:64:6b:a9:22:9d:85:94:90:49:59:b8:
                    bd:07:20:d4:48:16:5d:b9:97:d6:ae:12:42:41:e8:
                    91:8e:27:78:27:d3:47:3c:35:15:af:50:f6:bc:2a:
                    d2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:26:9A:56:22:A3:59:9B:2A:E3:35:DB:3B:CC:17:89:9A:1E:FE:79
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3133302e3235302e3138382e302f32332d3233203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:e2:e7:c1:72:2e:32:b0:8d:57:45:04:af:3a:48:03:f7:1f:
         c2:1d:f6:ae:13:8f:38:f2:94:e9:d7:fc:7a:ef:39:af:8a:0c:
         57:2e:c1:56:1b:9a:d6:1d:5a:1a:b9:15:cc:83:f0:00:fe:17:
         7d:40:3f:69:6b:09:c3:41:27:2d:3e:9d:25:bc:3b:a8:c8:5c:
         9e:2d:8c:fe:df:36:4f:06:cd:c6:3a:76:c2:af:28:10:61:fe:
         1b:7e:2c:6d:70:79:a6:2f:27:d1:46:b5:b6:93:27:4c:db:c9:
         db:c2:e6:b4:cd:bf:fc:cc:13:9b:10:f5:bb:e8:e6:63:75:21:
         75:9e:ee:72:61:fc:c1:24:c9:da:64:31:aa:e4:6c:9a:0f:9a:
         89:57:c2:1c:48:7d:5b:bb:c6:d4:1d:30:12:e8:8f:9b:2b:36:
         a5:be:7c:6d:07:b0:08:8d:2a:82:2f:f1:ea:95:d3:ca:b6:56:
         cc:ae:74:4f:f5:98:ca:bd:5a:3f:1e:b8:66:05:2a:1f:dc:fe:
         a4:92:67:a2:1d:21:dc:e9:5f:d0:61:6e:fc:1c:80:27:88:bb:
         ec:d3:60:0a:be:9b:c4:05:56:d5:de:dc:4c:e9:c3:b5:a3:1e:
         48:8a:1c:6c:2e:7f:1c:16:9f:8a:fe:8e:a6:43:66:7c:a5:8a:
         a2:12:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 10:46:04 2025 by rpki-client