Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa (raw, json)
Hash identifier:          uyGWONNt5C8fPFdwUmE6o7T+5o26/VIn/04726mi5JA=
Subject key identifier:   2F:96:E4:63:4A:60:35:4C:0C:AF:39:A3:D1:EF:30:F5:77:09:F1:21
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       61E52C7DC208C13F4AF456CC7F8C02FF4908F1D7
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa
Signing time:             Mon 01 Sep 2025 13:29:44 +0000
ROA not before:           Mon 01 Sep 2025 13:24:44 +0000
ROA not after:            Mon 31 Aug 2026 13:29:44 +0000
asID:                     398465
IP address blocks:        216.247.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 03:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e5:2c:7d:c2:08:c1:3f:4a:f4:56:cc:7f:8c:02:ff:49:08:f1:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep  1 13:24:44 2025 GMT
            Not After : Aug 31 13:29:44 2026 GMT
        Subject: CN=2F96E4634A60354C0CAF39A3D1EF30F57709F121
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:54:ad:39:c0:a0:0b:96:0f:39:5d:65:fd:
                    2a:2a:ea:00:5a:ec:63:4e:90:45:8a:88:74:e3:92:
                    3d:4b:67:c7:50:81:58:a3:a3:4a:20:06:52:50:ea:
                    49:1f:d7:99:6d:91:5f:71:ef:1a:74:0b:1e:d7:aa:
                    a9:5d:75:53:40:62:19:c7:35:28:42:0e:6b:ad:0a:
                    f0:b8:3f:86:25:29:02:98:75:9b:66:94:9c:e1:e1:
                    a6:30:b3:86:17:84:66:66:21:ca:c5:27:90:1e:65:
                    13:f7:02:9e:47:13:60:42:bf:97:f7:9a:68:0f:34:
                    4d:3d:37:14:de:df:7c:cf:ad:4c:33:71:5c:f0:c4:
                    a6:f9:c0:6c:61:26:8b:bf:b0:a1:13:e8:a6:47:e2:
                    e7:75:90:9c:9d:16:b7:d6:b2:af:72:fb:aa:e1:67:
                    a7:db:37:3f:1b:30:8d:d5:3b:8b:aa:83:16:66:52:
                    25:8a:1e:9e:77:3c:9d:48:a5:40:30:75:bd:ea:5d:
                    dd:5a:2f:bf:62:09:50:c0:d2:13:07:16:37:41:10:
                    3b:17:ef:30:dc:fe:12:ce:c7:23:bd:71:ca:90:89:
                    25:7c:59:cb:a1:a1:e2:eb:9e:61:75:e9:b4:11:0d:
                    2f:b9:e3:b0:6b:4f:75:f5:a4:c7:48:66:89:05:cc:
                    1d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:96:E4:63:4A:60:35:4C:0C:AF:39:A3:D1:EF:30:F5:77:09:F1:21
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e20333938343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:3b:d9:cd:a1:f1:b4:33:2f:d0:78:25:ca:b9:bc:f1:5b:cb:
         9c:f0:e0:63:b5:4c:09:68:9e:fb:9e:37:48:6c:73:0f:4a:54:
         4c:d0:6b:90:47:f4:6e:7f:94:2b:3a:04:3c:5e:db:1f:51:5f:
         35:cd:44:40:b9:8c:14:45:72:c8:88:40:b5:0b:0e:c3:99:9d:
         3f:a4:47:1a:d8:52:6d:06:a8:60:7a:42:23:c3:17:44:5f:9b:
         2b:f1:47:d2:10:f0:b7:52:2e:1c:bf:bc:e4:60:c4:1a:08:10:
         c6:70:6f:63:63:60:14:e0:17:02:5c:d3:79:d6:d4:94:1b:1a:
         31:cc:c9:08:2e:c8:07:5a:2d:bd:21:df:f7:72:ff:72:20:5d:
         31:a0:71:34:0f:9a:08:6c:63:79:c2:1f:87:ab:4e:e5:b4:fe:
         f9:1c:b2:d9:67:bd:0f:0e:42:6e:45:4d:e0:33:3b:bd:b0:50:
         fc:fc:0b:e3:57:11:82:7d:1e:60:c6:05:6b:23:2e:0f:36:1e:
         6c:96:1d:51:40:ec:d5:bd:7b:9f:25:e4:e6:2f:32:68:89:ff:
         bb:36:0d:f4:cb:39:59:75:3c:48:7c:51:66:8b:48:0a:ce:ce:
         e6:5e:cb:b1:11:39:33:95:de:5b:62:27:d8:79:db:de:9c:c4:
         77:4a:79:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:47:27 2025 by rpki-client