Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e32392e302f32342d3234203d3e20323033353737.roa
File:                     3231362e3134362e32392e302f32342d3234203d3e20323033353737.roa (raw, json)
Hash identifier:          IukEtZz1wp8x7djuOvk2TqdiCCFSmIIiXfOtCX5FA2Q=
Subject key identifier:   71:78:0D:B0:68:2E:19:91:45:7C:65:B3:13:C3:4C:C6:A6:FB:2A:0B
Certificate issuer:       /CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
Certificate serial:       5CB6E5CAB1BB703165D6BB3C4E50539C5B1A8165
Authority key identifier: 26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e32392e302f32342d3234203d3e20323033353737.roa
Signing time:             Tue 03 Jun 2025 12:48:23 +0000
ROA not before:           Tue 03 Jun 2025 12:43:23 +0000
ROA not after:            Tue 02 Jun 2026 12:48:23 +0000
asID:                     203577
IP address blocks:        216.146.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl
                          rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 03:10:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b6:e5:ca:b1:bb:70:31:65:d6:bb:3c:4e:50:53:9c:5b:1a:81:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355
        Validity
            Not Before: Jun  3 12:43:23 2025 GMT
            Not After : Jun  2 12:48:23 2026 GMT
        Subject: CN=71780DB0682E1991457C65B313C34CC6A6FB2A0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d7:da:ec:05:10:32:9e:5a:b9:db:2b:bb:80:
                    c0:12:69:d3:0b:aa:c6:76:2d:d5:7c:ea:e4:79:79:
                    27:2a:e3:9a:cf:5d:5c:90:10:27:e3:ab:6e:01:20:
                    2c:2f:30:da:be:aa:8b:c1:6b:ae:0f:54:e0:f2:86:
                    1a:ec:10:1e:23:60:d7:ac:bd:83:9e:ed:65:24:e4:
                    97:e3:b9:18:a1:7c:55:7f:c5:be:12:77:c0:e1:fc:
                    68:8f:e7:af:50:dd:83:f0:8c:80:a5:e9:aa:2d:22:
                    87:69:8d:c5:1c:08:9b:3b:5c:79:d7:92:1b:02:c7:
                    63:ac:61:8d:48:16:82:93:0c:19:99:eb:2d:33:18:
                    bd:10:5d:89:de:1a:62:c4:7f:f1:c0:d3:a8:5a:94:
                    d0:83:78:63:e4:6a:5e:0d:72:9a:b1:d6:78:ce:15:
                    62:e6:ed:a6:65:a0:bd:84:1c:a9:a1:9c:94:4e:4d:
                    40:9c:ba:b4:a3:fa:b3:c4:84:0b:cf:16:3c:7f:6f:
                    a5:51:79:85:7c:0d:5f:b6:72:d4:40:b2:96:a2:94:
                    0e:a8:59:85:e7:a7:90:23:38:4b:33:f4:90:32:71:
                    1a:48:d5:a2:70:9d:b9:4d:71:d6:f2:a7:d1:78:d9:
                    3d:69:15:3b:f4:ce:a1:bd:9b:69:6a:21:1e:3c:b2:
                    a7:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:78:0D:B0:68:2E:19:91:45:7C:65:B3:13:C3:4C:C6:A6:FB:2A:0B
            X509v3 Authority Key Identifier:
                keyid:26:96:8C:61:5A:69:1B:49:75:4C:B6:78:A4:DD:9F:C5:A9:38:A6:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/26968C615A691B49754CB678A4DD9FC5A938A663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed0b5669107bfec18518f2ad2789ecf54e40a79d355.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/5/3231362e3134362e32392e302f32342d3234203d3e20323033353737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.146.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:76:fc:2e:d4:84:26:ad:eb:53:9b:1a:e3:df:14:b1:b5:93:
         54:cb:a1:5c:d4:13:f6:1c:e0:2b:cf:09:3e:e0:68:21:89:d4:
         d3:84:88:e8:ee:ba:d7:da:48:b9:02:db:c7:09:de:9a:16:3c:
         76:d3:86:50:20:9d:af:c9:01:ae:df:43:55:55:47:27:96:96:
         d9:96:88:6a:7f:5c:fa:c4:1c:bc:46:eb:50:d3:2e:c2:bd:c2:
         64:e6:3e:28:0b:33:89:59:92:62:84:4e:e4:93:ed:2a:6b:4d:
         b7:0f:2a:e2:52:a1:86:45:ff:30:b9:bb:c0:f9:39:aa:d3:7f:
         46:9c:22:8a:62:10:c5:e3:db:e7:59:fe:06:26:7e:d2:fc:42:
         92:92:e0:b4:b1:68:81:64:cf:14:6f:c2:14:38:7f:c3:dd:8c:
         7a:dd:3d:71:a2:08:d3:fc:fd:23:37:b1:18:d1:10:8b:8c:a3:
         27:5b:fd:48:8f:36:e2:1f:27:a8:1c:79:88:1d:19:57:73:54:
         c8:37:c7:c8:60:51:64:66:d7:95:92:d1:9a:99:20:f6:bf:d1:
         fa:30:40:66:d4:4e:10:45:1c:c7:b4:49:e3:d0:4f:a7:c5:eb:
         59:17:98:a6:e6:66:64:74:a6:ca:3b:98:99:c3:8e:5b:6c:83:
         a6:e5:fe:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:12:10 2025 by rpki-client