Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e203232373733.roa (raw, json)
Hash identifier:          ttdDcY7Neqw2ibfu922XYTJeeV4isVvFk+t5UqGpK8o=
Subject key identifier:   5F:3E:B2:AE:75:28:BB:D2:9F:B9:91:96:A9:33:E8:2F:AB:3D:D0:EE
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       4E004EFD2CA0904337B74BA93B397B7AA604EF45
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa
Signing time:             Mon 01 Sep 2025 13:29:44 +0000
ROA not before:           Mon 01 Sep 2025 13:24:44 +0000
ROA not after:            Mon 31 Aug 2026 13:29:44 +0000
asID:                     22773
IP address blocks:        216.247.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 03:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:00:4e:fd:2c:a0:90:43:37:b7:4b:a9:3b:39:7b:7a:a6:04:ef:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep  1 13:24:44 2025 GMT
            Not After : Aug 31 13:29:44 2026 GMT
        Subject: CN=5F3EB2AE7528BBD29FB99196A933E82FAB3DD0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3c:fb:d1:e3:db:99:54:78:3b:51:d8:ee:e6:
                    70:9b:c7:a0:fb:7e:b9:07:69:1a:9d:c8:05:65:39:
                    83:d1:b5:39:cc:79:83:c6:19:5c:d3:66:48:67:5b:
                    d6:cd:2e:69:0f:22:32:8a:22:56:42:d1:ce:12:2c:
                    77:ed:88:f3:48:ec:35:ec:9d:af:74:c4:42:87:7a:
                    47:8a:b7:dc:8f:44:83:3a:fb:80:f3:a6:d5:06:8f:
                    f5:13:39:ad:f5:b4:12:d7:a2:fd:00:b1:9d:3e:70:
                    f1:32:32:10:ee:1e:1e:1f:4d:0c:0f:48:bd:38:dc:
                    38:a3:d0:79:6f:9e:02:9a:df:27:5d:94:08:f8:29:
                    7c:f6:2b:6e:e9:e5:e2:f9:90:50:b6:fc:05:ae:23:
                    7b:bf:dc:f8:da:6d:48:8e:b7:59:a8:0e:a6:db:0a:
                    6e:61:84:31:7e:53:3a:41:1c:c3:d0:ce:93:07:e2:
                    60:86:77:a1:34:75:51:aa:19:6e:9e:38:09:75:ac:
                    85:ca:62:ed:5d:e3:b1:7c:6f:69:49:b9:62:b8:d2:
                    46:5f:c8:f6:1e:35:62:79:96:31:dd:eb:af:e9:19:
                    be:97:5e:f5:a9:a7:11:a2:2b:f3:0c:29:d2:fa:d4:
                    c4:51:3a:56:8f:55:a8:97:8c:e5:9a:25:47:ba:e3:
                    70:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3E:B2:AE:75:28:BB:D2:9F:B9:91:96:A9:33:E8:2F:AB:3D:D0:EE
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e203232373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:d7:a4:cb:52:15:30:cb:03:22:0a:04:3f:03:95:17:15:ee:
         be:42:a3:fc:14:3a:7c:77:9f:f6:d2:dc:14:fe:6f:ad:b0:f7:
         0e:34:f2:50:13:f9:f9:ca:e2:c9:9c:6e:6b:e7:66:f1:8c:29:
         a4:1c:1f:0f:9e:8a:aa:ec:80:2f:40:02:c9:88:68:65:34:fd:
         a4:a2:05:e8:ec:81:42:5a:23:8c:d0:3f:00:2e:64:7c:99:ca:
         83:a9:8c:c4:87:3a:12:9b:2b:96:23:cf:ca:f1:81:44:ec:bf:
         b0:34:b6:78:50:26:00:65:40:60:f9:7b:8f:93:91:06:13:65:
         bf:74:fe:bd:04:d3:e7:96:7f:67:3a:6e:2e:0b:91:93:4c:bb:
         01:aa:21:35:c1:04:73:a5:c9:51:20:8e:e0:3f:6d:67:75:1b:
         4b:3f:b9:a8:53:30:c7:c2:46:4d:42:dc:7d:71:ed:68:ac:aa:
         a0:b7:86:00:00:6f:d7:53:38:a9:9a:38:fb:58:97:01:19:ec:
         0c:59:3a:4d:a5:3f:0c:03:38:d8:b2:6e:00:0f:5a:88:9a:5b:
         ec:51:7c:04:ef:79:f4:9d:1d:16:03:b0:54:61:6c:fd:7d:a4:
         f2:61:5e:71:c3:6e:3c:eb:6e:5b:b7:1f:6f:4a:75:3f:12:19:
         18:ff:af:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:47:29 2025 by rpki-client