Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa
File:                     3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa (raw, json)
Hash identifier:          4MNYhOy+zdwiEHyLfLP6T2GzZOEDkP60zKXs2TomRU8=
Subject key identifier:   B1:77:82:68:AF:31:36:8F:21:3D:EB:67:AB:A4:60:37:18:C8:0C:0C
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       671CBA3C24DDFC1AFFF8BA5E4E730F9F05F73F2D
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa
Signing time:             Mon 01 Sep 2025 13:29:44 +0000
ROA not before:           Mon 01 Sep 2025 13:24:44 +0000
ROA not after:            Mon 31 Aug 2026 13:29:44 +0000
asID:                     46537
IP address blocks:        216.247.109.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 03:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1c:ba:3c:24:dd:fc:1a:ff:f8:ba:5e:4e:73:0f:9f:05:f7:3f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep  1 13:24:44 2025 GMT
            Not After : Aug 31 13:29:44 2026 GMT
        Subject: CN=B1778268AF31368F213DEB67ABA4603718C80C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:1f:ca:1c:a6:74:10:48:62:35:6b:6d:dd:
                    60:dd:21:3a:5c:ec:2c:39:8a:32:b5:a6:20:6b:ff:
                    43:bd:04:e8:ad:e4:cc:4c:24:25:96:6a:22:8d:07:
                    8d:34:22:ca:87:8b:88:38:20:60:cd:8b:71:b3:ab:
                    2c:4e:42:3d:c6:56:4a:ef:36:2b:1e:2f:95:ba:d3:
                    f0:9e:55:1f:da:fa:f9:7f:cc:ec:77:2f:35:97:42:
                    55:aa:a3:c3:63:d5:d0:15:8f:cd:5f:c1:71:4d:5a:
                    ae:35:a9:f6:80:74:96:f7:a9:90:6e:93:0e:8a:86:
                    f0:21:cc:e2:e0:35:76:7e:de:16:45:f9:6c:44:a1:
                    1d:5f:17:42:a7:5c:ec:63:85:63:05:a3:24:01:98:
                    6f:9c:c3:8a:b2:e4:31:e7:46:0e:41:6b:84:8c:5f:
                    07:b4:4d:4d:4e:47:35:ea:63:6c:98:13:c5:34:76:
                    ad:4e:69:ae:3d:5d:2d:63:71:fd:98:55:45:36:51:
                    c1:1d:ab:0d:d8:74:a6:dd:52:69:fe:44:d8:72:66:
                    0a:2a:be:fc:b2:e8:f7:ac:fd:72:12:8b:db:e6:6f:
                    cb:84:9e:e7:88:78:6f:5c:05:c0:df:85:30:6c:7b:
                    20:77:2f:f9:dd:a8:f9:a6:47:cd:a1:be:49:2e:7e:
                    ff:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:77:82:68:AF:31:36:8F:21:3D:EB:67:AB:A4:60:37:18:C8:0C:0C
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e3130392e302f32342d3234203d3e203436353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:02:75:ce:ea:bd:8b:62:e9:e1:bb:39:1c:f7:2c:d6:05:4a:
         8c:4c:0b:30:f0:b5:8b:0c:4c:c3:ad:2c:24:96:db:b0:7c:f1:
         87:e0:0d:5d:4a:2b:1a:20:0f:66:df:98:ff:a4:59:b3:d1:34:
         38:4e:a0:83:65:e9:7e:36:fc:4b:a0:31:f8:60:36:71:5f:9b:
         98:7e:dc:0f:0f:1d:2a:bd:49:0e:5d:2a:e3:d4:8c:87:c6:7b:
         7b:c6:01:6e:50:21:5f:c0:fe:12:76:03:f9:53:c1:d3:4a:0e:
         76:c0:ef:f3:00:e4:54:f4:1d:81:c4:f8:44:1a:d6:fb:e1:da:
         5b:6a:c0:3c:ea:dc:b6:01:c8:36:9d:8e:24:85:a2:63:89:73:
         cc:5b:25:7a:92:be:aa:53:b5:0e:c9:25:13:71:b8:f3:95:27:
         a3:86:84:09:37:59:85:d0:95:c9:1a:ea:78:0b:7e:e8:e6:d2:
         42:85:ba:f0:79:1d:b0:70:7f:a0:b1:b6:fc:ac:ee:91:aa:4a:
         ab:68:a9:0d:18:f8:1c:c3:e1:21:bb:0f:eb:be:24:c6:38:37:
         21:16:0f:9c:2f:47:90:19:4a:d5:db:d6:4f:0f:8e:32:36:25:
         b3:5c:16:60:08:c7:d4:dd:0c:90:d0:99:24:b8:30:8c:71:ad:
         b4:d9:f2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:47:29 2025 by rpki-client