Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa
File:                     3231362e3234372e39372e302f32342d3234203d3e2037303138.roa (raw, json)
Hash identifier:          j/TZ1+dJWSjyJTzxpTT/I+HWV5ktpm0ksjcy/eowHgI=
Subject key identifier:   8C:AB:47:34:88:05:DD:45:94:4E:69:4A:B1:8A:CF:47:89:18:4F:05
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       2A31FE3731529F3454B105CA7DCC22620F3FB5AF
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa
Signing time:             Mon 01 Sep 2025 13:29:44 +0000
ROA not before:           Mon 01 Sep 2025 13:24:44 +0000
ROA not after:            Mon 31 Aug 2026 13:29:44 +0000
asID:                     7018
IP address blocks:        216.247.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 07 Sep 2025 03:21:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:31:fe:37:31:52:9f:34:54:b1:05:ca:7d:cc:22:62:0f:3f:b5:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Sep  1 13:24:44 2025 GMT
            Not After : Aug 31 13:29:44 2026 GMT
        Subject: CN=8CAB47348805DD45944E694AB18ACF4789184F05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b9:76:59:4d:32:99:fb:32:c0:d4:5e:29:d3:
                    25:57:0f:fb:dc:a2:ea:49:df:d7:79:28:c6:98:ec:
                    2c:ec:28:8a:c8:1c:aa:c3:e1:50:d3:36:19:c3:7f:
                    c6:3b:02:7b:47:6d:0a:74:60:1a:4c:2b:5d:ce:9b:
                    52:d6:fa:d6:25:d3:6a:86:c6:e3:86:4d:ab:63:ff:
                    3a:2f:24:46:50:16:96:a3:7d:a3:2a:77:98:51:a7:
                    d0:fb:ef:87:cc:1e:ec:c1:39:2b:d5:f0:d7:01:8e:
                    71:f9:93:fa:60:2f:25:2c:00:2d:7a:b2:e7:a4:ce:
                    88:c1:f2:f5:bc:98:dc:05:e8:fa:90:53:a0:48:0f:
                    eb:6e:cf:e2:02:0c:5e:39:98:ff:10:ec:b7:71:88:
                    9c:90:bc:20:2f:4f:91:08:51:6e:9d:01:a9:51:9a:
                    36:d8:5d:0d:ed:c3:b1:fe:a3:07:49:78:fc:95:e1:
                    47:74:87:28:d3:7f:6a:09:b8:c1:dc:c4:8e:67:89:
                    3f:cf:f0:35:3f:0b:58:e2:f6:4d:47:48:42:4c:e1:
                    d4:8c:27:6a:a0:14:96:64:ae:5c:e3:8f:6f:10:35:
                    b6:b8:38:50:f0:52:7d:5a:74:32:a9:fc:54:77:77:
                    c4:04:50:26:38:d7:1a:26:a7:c5:a2:a0:7f:96:9f:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AB:47:34:88:05:DD:45:94:4E:69:4A:B1:8A:CF:47:89:18:4F:05
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3234372e39372e302f32342d3234203d3e2037303138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.247.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:29:73:2a:68:c9:74:50:4a:06:d8:fb:67:35:74:f6:e9:c5:
         d4:4c:11:b9:10:e7:d1:c8:c5:fb:31:08:03:a3:cb:a6:d1:c6:
         be:62:29:4a:97:17:30:c1:a7:eb:96:c6:4e:b0:79:07:08:2d:
         01:84:19:15:a3:f8:18:c1:96:46:fd:0b:df:c6:d1:04:ef:62:
         d1:0f:72:23:84:79:df:dd:ee:09:0a:2b:c4:8b:3e:72:fc:a2:
         15:36:5f:67:bf:ba:d1:3c:6e:6b:26:ea:10:9d:86:d5:41:b4:
         49:70:cb:d2:fc:5b:26:18:96:a4:30:b0:d0:5a:55:ed:e9:d3:
         3f:58:1d:19:3e:2a:26:03:ff:9b:b1:85:68:80:9c:e7:c8:75:
         e4:07:8d:98:22:64:9d:d4:b1:6d:06:ba:2a:72:7d:48:e8:b6:
         d0:b6:1c:fd:62:27:95:4a:b3:aa:b6:77:8c:25:86:22:32:bb:
         cb:c5:7f:69:82:0a:d1:35:fa:6a:ad:15:6e:a5:2c:bb:d9:63:
         51:63:63:a9:8f:ef:a3:d3:f4:f9:bc:23:1c:82:b4:9a:eb:22:
         f0:c2:e9:50:ac:50:c7:50:13:dd:c7:67:90:50:36:07:ee:1a:
         88:5c:0c:df:ca:cf:5a:66:4c:e7:2a:6d:4c:dd:41:61:67:a1:
         6a:6f:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 15:47:30 2025 by rpki-client