Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32332d3234203d3e20383334.roa
File:                     3230352e3231312e3135342e302f32332d3234203d3e20383334.roa (raw, json)
Hash identifier:          sb4/ucxlFOP0R3VXoE+bUvGAiGck9KyZNWV6/xl+twc=
Subject key identifier:   5D:A9:B3:1B:A6:0F:85:A4:2A:F5:FB:5C:FB:09:36:6B:66:AD:E2:CB
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       90EA05F781E233C9DF619FC794051805F05E59
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32332d3234203d3e20383334.roa
Signing time:             Fri 12 Sep 2025 00:09:46 +0000
ROA not before:           Fri 12 Sep 2025 00:04:46 +0000
ROA not after:            Fri 11 Sep 2026 00:09:46 +0000
asID:                     834
IP address blocks:        205.211.154.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 23:56:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            90:ea:05:f7:81:e2:33:c9:df:61:9f:c7:94:05:18:05:f0:5e:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Sep 12 00:04:46 2025 GMT
            Not After : Sep 11 00:09:46 2026 GMT
        Subject: CN=5DA9B31BA60F85A42AF5FB5CFB09366B66ADE2CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:17:87:39:9e:3b:fb:9e:dd:dd:d0:0c:74:57:
                    3d:44:e7:e8:3b:6e:3b:36:9e:64:13:1a:45:dd:97:
                    35:b9:a7:06:73:da:c3:26:a3:8f:58:b1:f9:f7:93:
                    49:1f:f6:ac:24:69:25:29:6a:e2:94:70:66:57:f4:
                    90:9a:16:07:fe:9b:7d:31:98:f5:be:c8:0b:cd:88:
                    df:b6:50:f5:2c:c9:13:cc:ab:99:96:5d:71:ff:78:
                    0e:90:f9:6f:f6:b1:d6:aa:a6:16:51:cc:66:06:dd:
                    ea:4f:ae:7d:43:46:8c:f1:57:f6:98:ab:fa:ca:99:
                    99:68:f1:62:57:03:d1:e6:57:1d:03:f7:55:44:4e:
                    ad:bb:0b:7d:0c:7c:79:11:a6:85:82:58:2e:94:ba:
                    67:7d:c7:93:b9:6d:a2:dc:10:0e:5d:c4:be:38:30:
                    cc:3b:ce:3a:fa:82:7e:e9:9b:05:9f:de:f8:66:e7:
                    3a:64:88:7c:6f:6b:be:bf:76:f6:1e:9e:1b:05:a9:
                    08:20:3f:bf:8c:24:59:56:0a:5a:81:ec:9e:ce:e0:
                    b3:20:f6:52:07:e2:57:59:bf:89:66:2c:c4:8f:d9:
                    17:24:16:60:4d:33:f9:bd:75:75:fc:bd:9c:c9:5c:
                    97:34:d8:b6:76:67:61:a6:1c:61:a0:69:c0:04:23:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A9:B3:1B:A6:0F:85:A4:2A:F5:FB:5C:FB:09:36:6B:66:AD:E2:CB
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32332d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:e6:fb:b6:f8:82:d6:3d:16:af:2d:cc:aa:f1:3e:9f:6a:bc:
         8c:05:a2:ff:f1:5f:dd:4d:9c:1b:31:95:81:04:64:9f:54:45:
         6f:aa:2e:7c:13:26:46:ca:57:7e:0f:21:a6:c7:ac:db:62:b8:
         89:63:43:ed:7b:25:08:38:2a:ed:d9:3c:6a:2c:16:bc:cf:e9:
         e0:0b:8e:d9:c0:45:25:c3:4f:fe:2a:9c:54:db:d6:ce:86:94:
         c3:47:00:1d:5f:85:b8:ac:ec:fa:6a:a3:ff:70:74:c8:5f:07:
         3a:d3:0b:f8:94:6e:16:e7:a2:d6:40:3a:84:30:a0:c5:c9:57:
         37:31:04:de:e4:59:67:7a:e6:0d:1f:d8:7b:9a:7d:fc:f0:31:
         8b:fa:20:1e:c0:74:bf:0c:2b:19:ee:22:a9:b8:38:21:38:04:
         d4:1c:81:46:8c:64:03:9d:38:8b:aa:b6:36:91:29:b4:1d:3c:
         ac:ed:54:78:54:8a:81:c2:e4:88:44:b0:42:1c:38:8d:20:93:
         e4:25:80:b8:a6:b9:af:54:99:d0:25:af:8f:da:a7:e6:97:92:
         82:4c:c5:e1:42:db:22:d3:00:0c:3c:76:9f:20:11:5e:9e:da:
         4f:af:f2:ec:02:61:0d:36:a8:a8:86:9d:71:d6:4e:a4:a1:fd:
         30:9f:69:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 05:02:45 2025 by rpki-client