Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32342d3234203d3e2034383236.roa
File:                     3231362e3234372e3130302e302f32342d3234203d3e2034383236.roa (raw, json)
Hash identifier:          yFTSrbwcTQa95szpjtJj2rla5VbY1HIGlV/WIpKwPzM=
Subject key identifier:   C9:63:2B:84:27:1E:2B:93:01:7B:2C:BE:05:6C:4B:67:1C:AE:98:DA
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       502344C6B63A85DC19CC66FEF5D7A48949D9FF1D
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32342d3234203d3e2034383236.roa
Signing time:             Mon 02 Jun 2025 07:53:04 +0000
ROA not before:           Mon 02 Jun 2025 07:48:04 +0000
ROA not after:            Mon 01 Jun 2026 07:53:04 +0000
asID:                     4826
IP address blocks:        216.247.100.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 06:25:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:23:44:c6:b6:3a:85:dc:19:cc:66:fe:f5:d7:a4:89:49:d9:ff:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Jun  2 07:48:04 2025 GMT
            Not After : Jun  1 07:53:04 2026 GMT
        Subject: CN=C9632B84271E2B93017B2CBE056C4B671CAE98DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6a:1c:06:10:8f:a7:52:e0:17:48:4b:78:25:
                    22:55:74:b1:0a:be:8c:6b:07:e2:3e:9a:44:23:04:
                    0a:2f:4b:85:ac:e4:f5:dd:ea:a6:dc:39:b0:ab:e5:
                    84:f3:fe:6a:15:19:37:ab:79:57:a9:f8:4d:87:20:
                    ac:10:19:dd:88:69:5b:c4:2e:f5:50:4b:f0:b9:ce:
                    d3:b7:42:7b:24:52:42:b1:7f:82:e6:ec:43:d9:2d:
                    f2:91:6d:f9:01:4f:f3:ad:0e:c9:e3:8e:7a:32:0b:
                    b4:c7:eb:14:af:d0:df:e6:d5:8e:79:df:5a:25:31:
                    92:7d:e0:7c:e0:b2:ab:d8:32:06:f8:da:d1:30:ad:
                    bd:7e:04:ec:c5:06:39:d9:9c:3e:56:69:fe:5f:91:
                    5e:3b:a7:77:db:2d:05:69:a8:07:15:38:bf:65:cc:
                    9f:d9:8a:97:98:21:07:49:87:bc:7a:c2:e5:66:4f:
                    2f:08:8a:37:1c:90:46:1e:89:d3:5e:83:0f:9b:22:
                    71:35:c2:df:15:0a:77:42:8c:67:8e:5d:f2:3c:85:
                    1f:7c:7c:ae:2e:fe:d5:0d:74:2b:3e:f1:fe:a4:7f:
                    35:11:d5:94:8b:d6:bf:53:57:18:7a:60:ac:d0:00:
                    3e:b4:73:96:4d:78:d9:cb:dd:2e:26:d4:ca:be:94:
                    13:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:63:2B:84:27:1E:2B:93:01:7B:2C:BE:05:6C:4B:67:1C:AE:98:DA
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130302e302f32342d3234203d3e2034383236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:79:b3:2a:2b:28:85:67:6e:f5:8b:3b:38:4c:fe:83:06:7a:
         0d:02:ee:77:ea:29:21:4d:27:96:8d:0c:ae:0b:a5:30:58:55:
         63:91:f8:13:c6:3f:26:51:a4:18:5f:fa:a7:df:5d:a6:74:d5:
         67:ba:b7:60:b3:90:a5:a5:1d:71:28:99:a9:26:e1:01:90:0c:
         be:44:a1:b8:05:e0:b1:a0:94:cf:c4:e3:a7:75:73:06:1b:ef:
         67:97:76:01:7f:a1:10:21:b9:03:2c:13:55:c0:ca:da:bf:6c:
         cb:dd:56:f2:24:67:0a:d5:4c:99:c5:07:b2:db:95:97:83:5a:
         3a:a8:c6:1a:ea:5e:8d:2b:86:b8:b6:55:2d:25:3e:da:3e:f4:
         9a:ca:5b:1a:a1:77:db:69:4d:0c:19:27:f8:39:5e:2c:45:44:
         33:33:38:50:45:02:1f:8b:14:22:b6:60:ab:e0:88:59:86:56:
         15:e7:dd:ec:b8:e2:51:bb:68:68:6a:a8:85:27:4a:48:c0:ba:
         87:c1:11:88:69:42:3b:f5:0d:78:7a:4d:c0:67:d9:c9:4b:40:
         75:60:d4:ce:63:8b:80:36:14:ac:35:0f:70:95:f3:02:73:bd:
         8e:66:e6:bf:92:82:bf:d8:13:40:b5:9c:12:81:35:4a:99:8d:
         70:a3:49:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:53:43 2025 by rpki-client