Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20393834.roa
File:                     3230352e3231312e3135342e302f32342d3234203d3e20393834.roa (raw, json)
Hash identifier:          jJnT+Vv15CWPJatr9MBmDaoezZncZcBWw+tc1XIq/0w=
Subject key identifier:   50:78:29:D5:FC:76:B1:9B:E3:7A:8A:D4:D0:49:0F:83:F3:21:41:75
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       2D591A9CB0AD5C1316EB376A937B7504AF01940E
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20393834.roa
Signing time:             Thu 09 Oct 2025 02:59:52 +0000
ROA not before:           Thu 09 Oct 2025 02:54:52 +0000
ROA not after:            Thu 08 Oct 2026 02:59:52 +0000
asID:                     984
IP address blocks:        205.211.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 17:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:59:1a:9c:b0:ad:5c:13:16:eb:37:6a:93:7b:75:04:af:01:94:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Oct  9 02:54:52 2025 GMT
            Not After : Oct  8 02:59:52 2026 GMT
        Subject: CN=507829D5FC76B19BE37A8AD4D0490F83F3214175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:03:d8:c2:a7:a3:97:14:f6:c1:f4:e1:81:21:
                    db:63:16:65:f2:5f:90:57:9e:89:b8:ac:06:5f:99:
                    9b:4a:35:a3:ad:9a:82:38:ee:e8:75:f6:8d:cc:69:
                    43:9c:75:d9:e9:b3:29:34:33:b3:c1:d9:c5:60:96:
                    d8:3c:dc:e1:5d:70:7f:d4:1e:08:ec:da:da:9f:34:
                    fd:8b:f4:1d:12:b3:33:a0:ea:15:e9:9d:cb:57:c7:
                    e2:f3:bf:df:9f:fe:d8:87:61:7f:f2:dd:fe:c1:9b:
                    3d:42:0b:ba:4c:e4:b8:c9:0b:60:8f:58:02:16:09:
                    6b:62:ea:fa:53:90:09:eb:69:a5:7e:86:31:85:bb:
                    59:d8:93:13:9d:48:44:10:67:60:e9:7d:34:13:c7:
                    6e:a2:22:58:11:3d:af:b6:e4:96:78:9c:a5:df:93:
                    c9:fc:80:9a:df:0d:82:95:b4:c2:f0:77:18:06:e7:
                    79:22:04:e4:bb:6f:f3:f3:10:b6:72:31:a6:26:b1:
                    ab:2d:10:77:89:39:ad:d5:f1:55:09:3d:aa:dc:58:
                    8f:99:6c:b4:9e:8f:98:e6:b1:8b:ff:00:dc:a7:17:
                    3d:ab:30:21:ef:6c:a5:fa:8a:e4:2b:dc:24:e4:78:
                    8d:8b:0a:3a:90:84:18:a0:2d:9b:7d:39:88:58:b8:
                    2c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:78:29:D5:FC:76:B1:9B:E3:7A:8A:D4:D0:49:0F:83:F3:21:41:75
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/3230352e3231312e3135342e302f32342d3234203d3e20393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.211.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:9a:1b:3e:0d:06:64:0c:86:43:45:bb:ab:f8:e0:83:c3:0e:
         36:23:2d:51:0d:a3:12:63:fe:9b:15:e9:47:87:26:dd:55:b0:
         6d:1d:00:cc:e0:81:86:eb:41:38:cf:b5:b6:0e:5c:9c:62:e6:
         16:df:10:92:a9:39:ca:21:91:ce:4d:1e:58:e7:dc:f3:71:5a:
         88:59:c2:6d:a3:18:cb:19:61:71:52:06:c0:cc:88:f1:dc:be:
         3b:10:89:bf:c8:26:2b:a3:23:a3:d2:e9:98:36:fc:95:f2:c3:
         0a:be:c0:50:36:4a:0f:db:3f:ea:48:f1:70:6f:96:cb:52:ec:
         f2:e9:01:df:6b:4e:8c:91:bb:51:ea:a3:ce:ad:8b:e8:19:87:
         13:d6:74:67:dd:d3:5b:78:e0:8e:9d:4e:43:aa:fc:e3:11:8b:
         e6:0e:81:50:a9:8a:83:42:db:c7:c5:b4:23:d8:5b:5a:3c:f0:
         d6:a7:8a:57:54:4b:57:c4:c3:fa:f8:f9:8e:47:a3:29:ad:83:
         87:1d:27:39:81:e9:96:66:95:7d:29:b4:a8:4c:54:59:32:e1:
         59:a2:e6:37:6b:f9:62:1a:d0:c2:47:82:2a:39:d6:73:c0:0d:
         67:22:17:e3:ea:6b:f8:bb:8c:ed:ad:9b:e5:82:a5:d2:93:61:
         18:49:be:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 16:10:29 2025 by rpki-client