Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3133302e3235302e3138392e302f32342d3234203d3e20333938393931.roa
File:                     3133302e3235302e3138392e302f32342d3234203d3e20333938393931.roa (raw, json)
Hash identifier:          YdTCqPrQfACXCvhI3GXMx3j+BlICaS7euFILQrn78lQ=
Subject key identifier:   1A:6F:9B:51:F9:31:BA:BB:6C:CF:A7:0D:BA:54:D9:6E:AE:63:E9:BE
Certificate issuer:       /CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
Certificate serial:       24DDF64BA07BDDC879130C57CC14A9CF4FD2A241
Authority key identifier: E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3133302e3235302e3138392e302f32342d3234203d3e20333938393931.roa
Signing time:             Thu 14 Aug 2025 15:43:30 +0000
ROA not before:           Thu 14 Aug 2025 15:38:30 +0000
ROA not after:            Thu 13 Aug 2026 15:43:30 +0000
asID:                     398991
IP address blocks:        130.250.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl
                          rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/f70c9613-7def-4bc4-b860-f4e5374d76a7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 21 Aug 2025 12:18:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dd:f6:4b:a0:7b:dd:c8:79:13:0c:57:cc:14:a9:cf:4f:d2:a2:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fc03c2e116712c232149710dea1b95497f0200381fc2875c
        Validity
            Not Before: Aug 14 15:38:30 2025 GMT
            Not After : Aug 13 15:43:30 2026 GMT
        Subject: CN=1A6F9B51F931BABB6CCFA70DBA54D96EAE63E9BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:3f:4c:ec:ea:91:43:2f:81:ee:3c:98:4b:
                    3c:04:7f:b6:d4:f1:de:97:8c:c2:66:6a:d8:d3:65:
                    79:d5:cc:d8:d5:f8:3d:f5:20:2f:13:81:8e:38:06:
                    bd:9d:e9:47:09:2e:61:df:70:f3:0f:32:e0:73:d1:
                    02:27:ec:cf:35:42:ce:2a:67:b0:1f:fd:98:5e:61:
                    31:4e:07:06:7c:d7:26:45:88:00:70:b3:48:21:15:
                    a1:3b:a5:66:34:84:b6:86:35:b9:d5:95:ed:38:fc:
                    8f:8a:1f:0d:94:26:2e:0b:82:07:8c:f2:e0:04:0a:
                    1d:45:ec:85:f0:69:01:dd:6d:ae:f6:fe:4d:83:80:
                    bf:7a:d2:58:7a:f5:e2:42:10:51:dc:5c:75:73:0c:
                    81:71:22:f5:cd:2d:84:96:3d:3f:39:9d:fd:00:85:
                    9d:7d:f4:0c:f7:45:e3:a3:90:5c:ef:16:a6:6a:d6:
                    88:eb:c4:4d:54:c2:a9:c2:86:29:13:5b:ff:96:fe:
                    b1:01:0a:75:84:51:52:26:cc:b9:3d:b2:08:6d:9f:
                    e5:0f:6b:79:ff:ef:ee:b4:9c:b7:42:7b:3c:c7:6d:
                    77:09:f8:84:03:c4:b7:ce:a7:b4:27:80:57:26:f9:
                    bc:63:87:17:83:8c:a7:3b:bf:ed:5f:66:d3:07:c5:
                    85:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:6F:9B:51:F9:31:BA:BB:6C:CF:A7:0D:BA:54:D9:6E:AE:63:E9:BE
            X509v3 Authority Key Identifier:
                keyid:E1:54:08:C3:10:B0:6E:9A:95:ED:12:CE:2E:E9:33:2B:72:C2:D9:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/E15408C310B06E9A95ED12CE2EE9332B72C2D9D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f70c9613-7def-4bc4-b860-f4e5374d76a7/36fc03c2e116712c232149710dea1b95497f0200381fc2875c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/5bc87289473b43c5a6cee919e6deb090/0/3133302e3235302e3138392e302f32342d3234203d3e20333938393931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.250.189.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:c0:02:1a:85:01:57:84:20:1d:cc:6c:e5:39:c4:1a:68:31:
         da:d5:5c:e6:7b:67:69:1e:5d:be:9e:b3:7d:00:35:09:ab:41:
         f4:0d:ff:51:fe:1d:c1:01:63:5b:d3:4a:79:7c:0c:1e:3c:d5:
         af:d5:e3:3d:c2:13:e7:60:56:5a:d4:f4:ab:dd:59:dd:66:e8:
         70:ab:4a:96:cd:54:5a:28:6e:34:00:ff:24:43:32:38:41:63:
         ee:5d:a5:c5:70:a5:4c:26:57:57:17:a9:8b:e8:d5:c2:ea:b5:
         3e:f3:08:85:02:d9:25:d8:5b:0d:e9:58:0f:6c:84:ed:5b:c6:
         db:4c:61:c2:b6:05:4f:30:fb:ca:8a:e4:d7:6f:f9:1d:ae:eb:
         68:e6:46:dd:ba:0a:57:19:1d:41:3b:78:3e:c3:ce:d4:72:e3:
         b6:94:f2:36:52:2d:b7:72:27:9d:5a:38:ef:61:7e:f0:7e:29:
         20:96:6e:eb:3d:cd:a3:1e:64:21:66:6b:ba:a1:42:bb:fd:0d:
         97:cf:c8:6f:a3:50:b4:aa:f2:f4:1b:f9:fd:cb:33:a8:59:b0:
         f0:83:76:8c:92:50:66:ce:9d:0b:35:1b:9c:7e:0f:ff:dc:e0:
         53:9a:56:b8:f7:ee:9e:b7:dd:9d:05:d8:28:e9:87:9f:76:66:
         9e:2a:aa:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:19:25 2025 by rpki-client