Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa (raw, json)
Hash identifier:          aA+yt8oFwId6u3LeVcNSkr/psqTrhO1MGFF+T847kko=
Subject key identifier:   16:19:27:A1:5B:47:50:F6:56:57:1A:50:6A:16:44:7A:1D:14:77:54
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       3DAA2B37982416C733855B00CBAA6A009AB5FAFB
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa
Signing time:             Fri 29 Aug 2025 14:29:44 +0000
ROA not before:           Fri 29 Aug 2025 14:24:44 +0000
ROA not after:            Fri 28 Aug 2026 14:29:44 +0000
asID:                     398355
IP address blocks:        216.247.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 03:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:aa:2b:37:98:24:16:c7:33:85:5b:00:cb:aa:6a:00:9a:b5:fa:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Aug 29 14:24:44 2025 GMT
            Not After : Aug 28 14:29:44 2026 GMT
        Subject: CN=161927A15B4750F656571A506A16447A1D147754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:14:26:bf:8d:24:85:8f:68:ba:f7:59:0a:b1:
                    18:49:cc:8b:ed:f5:f9:31:fd:f5:32:7c:dd:6c:aa:
                    92:be:7a:11:dd:54:d4:18:5f:ff:c2:fe:31:c2:5f:
                    cc:9a:af:d4:ad:06:98:4b:bd:4e:e5:ac:d6:7b:27:
                    9e:20:50:76:48:29:d3:bf:09:18:45:e8:27:01:d0:
                    e2:53:a4:bc:8d:93:23:6c:e9:7d:ba:ed:b2:5d:b4:
                    b4:c6:b0:82:49:78:b4:f5:a4:d9:2f:79:ab:76:9c:
                    9f:46:3f:5c:bd:05:b2:85:ff:ed:bd:ec:ae:ae:16:
                    6a:9d:cf:e5:6b:bf:38:6a:77:36:d4:42:5b:bb:de:
                    77:ca:27:bc:e6:ea:c7:b5:4a:6d:e3:e4:88:ff:bf:
                    1a:66:95:10:ea:3b:de:8a:48:dc:e8:b2:8a:6c:f5:
                    0b:05:d9:5c:40:39:2a:0c:97:06:88:8b:20:df:26:
                    ff:65:b5:c3:ec:b1:b9:6f:0c:c8:f0:48:29:58:92:
                    17:69:48:8f:c7:b3:2c:44:4b:7f:ff:dc:4c:ee:5d:
                    0d:3a:a2:98:96:43:36:26:1d:b9:21:fe:98:64:7c:
                    e1:6f:e4:18:60:27:54:f6:3a:7a:db:81:dc:74:1b:
                    dd:15:76:04:dc:49:9d:01:b4:31:42:41:7c:54:a3:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:19:27:A1:5B:47:50:F6:56:57:1A:50:6A:16:44:7A:1D:14:77:54
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938333535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:91:bc:5a:5a:fa:2e:55:33:c6:df:2f:44:86:cf:cd:19:c8:
         ae:97:10:4c:08:62:23:3b:e0:66:af:8d:58:5a:e1:76:8f:82:
         c8:29:57:79:2d:20:af:c4:56:08:73:9b:8e:fb:93:9c:f9:d7:
         9f:14:9e:63:49:7a:0e:fb:20:ff:67:f8:14:ba:de:d5:ad:10:
         ec:7c:d7:94:4c:4b:97:bf:ec:3c:ab:67:17:da:bf:2c:34:5f:
         0d:18:8b:43:58:55:84:c9:6b:0d:10:7e:d4:9f:2e:07:dd:86:
         d8:fc:b0:19:15:3d:92:34:d7:a4:65:24:96:69:31:09:b7:e1:
         bc:be:d4:67:33:a2:88:1b:29:86:db:19:bf:b9:75:1d:56:56:
         33:d8:80:b3:30:c5:d5:11:f8:23:56:19:0b:f0:a4:58:48:59:
         b4:17:37:61:b4:32:33:58:b4:ea:1c:02:8a:1e:4a:10:67:15:
         1f:9f:80:7c:31:90:39:47:a5:6e:4d:1b:94:2a:a9:39:ac:e0:
         5d:5f:c2:30:07:75:b3:9f:f6:bf:b7:1c:65:f7:6a:2a:7a:4c:
         d8:c4:b0:df:c1:4c:13:29:74:98:e4:ad:25:e6:2f:c1:00:f5:
         f9:81:7b:80:a4:e2:e2:bf:4b:72:dd:93:30:44:90:9d:f0:9e:
         7b:29:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:47:26 2025 by rpki-client