Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3132372e302f32342d3234203d3e2035363530.roa
File:                     3137322e3130392e3132372e302f32342d3234203d3e2035363530.roa (raw, json)
Hash identifier:          kUJccohNs4kbeH4F05EATEKA6G0PfQbdQSvg9tfhJbc=
Subject key identifier:   0A:72:5A:2D:9A:ED:33:30:FD:AA:5A:C5:F0:C1:85:80:59:FE:4F:29
Certificate issuer:       /CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
Certificate serial:       4D13F4CFDDBE098CFC781E9D74E3315090493350
Authority key identifier: 82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3132372e302f32342d3234203d3e2035363530.roa
Signing time:             Thu 04 Sep 2025 12:36:28 +0000
ROA not before:           Thu 04 Sep 2025 12:31:28 +0000
ROA not after:            Thu 03 Sep 2026 12:36:28 +0000
asID:                     5650
IP address blocks:        172.109.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 18 Sep 2025 07:53:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:13:f4:cf:dd:be:09:8c:fc:78:1e:9d:74:e3:31:50:90:49:33:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90
        Validity
            Not Before: Sep  4 12:31:28 2025 GMT
            Not After : Sep  3 12:36:28 2026 GMT
        Subject: CN=0A725A2D9AED3330FDAA5AC5F0C1858059FE4F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:85:57:d1:e7:4e:96:a1:1d:f3:8c:73:72:
                    ba:8b:06:f2:94:93:b4:93:13:80:eb:70:e8:d6:15:
                    36:3e:51:e6:9f:30:9d:29:40:f7:cd:9f:f0:04:7d:
                    b2:ed:4d:a4:c0:5f:cb:71:4e:8d:0c:3c:34:42:e1:
                    29:a9:46:b0:a6:ea:b3:12:73:f1:19:0d:c0:d1:5f:
                    f2:72:28:78:26:ab:8b:9a:51:8a:b0:1a:22:42:d0:
                    a5:16:21:70:4b:a2:c3:4e:c7:83:ac:89:02:13:35:
                    e1:9d:13:b1:09:21:fb:bf:bd:58:ef:2d:50:d7:9c:
                    87:89:cd:d9:3a:3d:26:96:20:37:77:99:01:f6:b1:
                    e6:bc:4d:dd:ce:cd:c4:0e:e5:ea:fe:a5:63:3a:c6:
                    f4:47:29:63:d2:6d:d0:8b:7e:65:4d:3c:f2:b1:2d:
                    fb:20:96:27:a3:a1:f3:cf:34:51:1e:b3:ca:b0:ee:
                    48:0f:00:60:96:9d:9d:95:14:9d:cf:11:29:4d:1a:
                    8d:96:39:e9:4d:a8:84:bd:b0:8d:fc:cc:e5:a7:e8:
                    d7:4f:68:2b:eb:2e:08:5c:98:75:74:7f:06:c3:b6:
                    3b:5d:ae:cd:3b:26:7a:2a:00:4c:38:a5:0c:7d:e4:
                    16:76:ca:0b:e3:69:1d:60:32:ec:1e:0c:df:34:61:
                    67:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:72:5A:2D:9A:ED:33:30:FD:AA:5A:C5:F0:C1:85:80:59:FE:4F:29
            X509v3 Authority Key Identifier:
                keyid:82:A9:16:3A:2E:99:48:4B:AC:A0:78:20:EC:4F:79:C6:86:66:49:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/82A9163A2E99484BACA07820EC4F79C68666498B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/0/3137322e3130392e3132372e302f32342d3234203d3e2035363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.109.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:15:b7:1a:31:c8:ad:fd:b9:49:9d:76:03:23:c1:c9:95:6f:
         7b:69:3d:d7:73:2e:4b:8c:50:ce:09:6c:0f:f5:a5:28:38:49:
         d0:9f:54:f5:30:4d:0a:24:c4:42:0f:e6:6c:af:e3:a0:af:56:
         32:b2:65:e6:95:a9:a0:18:08:90:00:8a:e4:3e:b2:ed:38:10:
         22:42:16:08:6f:1b:42:0c:ef:19:df:1a:fc:31:f5:2c:6e:46:
         b5:4f:2b:b4:7e:f9:9e:9a:83:84:38:3f:8f:0d:e6:bc:bb:f3:
         00:d6:c8:b4:76:87:34:cd:0f:80:b1:45:4c:a0:1d:38:44:94:
         ef:f5:e8:68:c9:ac:41:e5:a8:f3:af:b6:96:df:ad:2c:bb:10:
         7c:69:7c:a9:f2:15:6f:bb:99:23:d5:1b:d6:81:67:e9:24:7f:
         2e:b4:2b:43:12:6b:30:55:63:ee:fc:11:c7:3d:d6:ad:37:09:
         95:a1:da:33:66:99:90:f7:e6:b9:26:8b:f1:e3:2f:69:ac:f2:
         0c:a2:7d:f1:08:7d:59:12:f5:96:d6:8c:a3:f8:d8:4b:a1:02:
         68:7f:e4:7a:5f:96:8e:d1:90:2b:4d:1d:84:53:0c:5d:88:ad:
         80:92:60:ff:96:dd:44:f5:de:bd:b0:fc:9f:06:91:68:60:f3:
         f3:46:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 17 05:42:41 2025 by rpki-client