Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e20343030353536.roa
File:                     3137322e38322e38382e302f32342d3234203d3e20343030353536.roa (raw, json)
Hash identifier:          07tarVAGts8kFO37IDeQG/lvT/NBS1NJQKbZoef0Klk=
Subject key identifier:   8E:79:A1:AD:83:0E:71:A9:E9:C4:95:1A:9F:10:B6:66:F4:22:D6:0C
Certificate issuer:       /CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
Certificate serial:       126D976717E9858D04D680FF401FB550012C1447
Authority key identifier: 18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e20343030353536.roa
Signing time:             Fri 12 Sep 2025 07:04:18 +0000
ROA not before:           Fri 12 Sep 2025 06:59:18 +0000
ROA not after:            Fri 11 Sep 2026 07:04:18 +0000
asID:                     400556
IP address blocks:        172.82.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/7225b415-8ae0-4523-b37f-74ed780676aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 04:27:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:6d:97:67:17:e9:85:8d:04:d6:80:ff:40:1f:b5:50:01:2c:14:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2
        Validity
            Not Before: Sep 12 06:59:18 2025 GMT
            Not After : Sep 11 07:04:18 2026 GMT
        Subject: CN=8E79A1AD830E71A9E9C4951A9F10B666F422D60C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:cf:f3:f5:8c:17:df:ef:91:05:92:92:29:d6:
                    54:be:25:f7:3f:c8:7e:ad:b8:79:ad:6f:fb:37:0c:
                    64:8a:29:15:28:5c:bb:21:88:a1:02:36:b0:54:50:
                    7b:20:08:87:a2:64:97:e0:9a:97:06:9e:07:3b:02:
                    8e:36:7b:6a:55:6c:45:09:df:56:5c:c3:8f:07:74:
                    a5:8d:ad:56:8d:09:ff:18:20:a3:12:72:ad:83:8c:
                    5b:38:eb:ef:59:8b:fe:12:9c:c2:ad:35:5a:87:ad:
                    34:89:55:b2:ac:3d:5e:f6:b2:84:1a:f4:de:47:98:
                    2c:26:70:77:2c:27:10:d6:de:b9:36:a3:8a:70:05:
                    0a:eb:83:0c:1c:44:b4:a2:02:a9:9f:8e:91:c1:3d:
                    4a:76:1b:16:b7:0e:29:89:92:fd:87:c0:90:8a:37:
                    b1:93:ea:6e:e5:ee:08:f3:eb:98:49:04:b2:32:ad:
                    35:b4:9d:54:78:a3:10:1d:c4:28:9e:fb:35:2b:17:
                    5c:ef:c7:82:55:e5:7c:02:cc:9c:b9:05:b8:80:9e:
                    a8:fa:54:d2:15:a4:88:19:21:7f:32:29:5e:bc:1c:
                    6c:7e:85:3c:96:06:f5:ce:0b:e2:78:fc:43:81:f7:
                    d9:1d:fe:f8:8d:d4:e5:4a:62:a4:4e:f7:a3:44:35:
                    76:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:79:A1:AD:83:0E:71:A9:E9:C4:95:1A:9F:10:B6:66:F4:22:D6:0C
            X509v3 Authority Key Identifier:
                keyid:18:C0:92:4D:23:1D:A3:01:95:16:0B:25:EE:E6:32:7E:B4:03:06:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/18C0924D231DA30195160B25EEE6327EB40306F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7225b415-8ae0-4523-b37f-74ed780676aa/0985ea50df54e795a4be14ad5188a8e52873787039bb6b27b2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181733c5c5f6b5b/0/3137322e38322e38382e302f32342d3234203d3e20343030353536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:63:0d:a2:31:9f:93:04:4a:46:1e:9b:97:1f:be:4b:dd:68:
         1e:4b:4e:53:6e:ea:fe:10:93:af:7b:c5:1b:0c:fe:d4:fd:51:
         91:3e:6d:d9:86:dc:a3:67:03:67:a6:96:46:8f:98:11:30:a9:
         d7:4d:de:b1:d3:e1:41:48:80:4f:fb:6f:cc:a9:8c:1b:5e:f2:
         ee:2f:21:21:0d:aa:7a:10:0c:5d:e2:aa:0a:7f:8f:f3:c3:59:
         66:74:7d:60:21:ab:6a:bd:15:0e:7e:0c:d2:5c:14:9a:f3:33:
         bf:6f:24:a2:08:27:c6:de:57:ab:69:d1:d5:65:9d:c8:5c:f1:
         13:a5:dc:b1:25:ac:40:6e:2b:80:9d:8e:68:19:a3:76:68:38:
         9b:f0:7f:76:d4:df:15:56:3c:b5:2f:04:69:99:25:50:5b:0c:
         18:79:cc:cd:20:1e:cd:40:28:52:cd:e6:c0:95:7d:87:29:1c:
         d4:17:e1:40:fa:52:55:bd:dc:9d:db:03:c5:0b:43:d8:26:b2:
         d5:22:ed:23:9f:2b:63:c7:3f:9f:7a:50:f3:d3:ff:6e:07:e5:
         1c:67:a4:58:04:a0:4b:4b:bb:45:c0:4a:ab:f6:49:b7:b8:fc:
         49:db:5f:7d:ff:57:b4:b8:f3:83:a0:16:e5:f9:8a:04:99:60:
         82:54:19:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 02:19:11 2025 by rpki-client