Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e20383334.roa
File:                     3136322e3231382e32342e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          6mGMUcQf161dH26RGJX82LcCIqlBaFlPND2xQwg8mxA=
Subject key identifier:   AF:E7:D4:3D:9F:05:AA:A2:AF:44:5A:CB:23:79:FB:D0:A4:A5:81:9B
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       108A834739FE18137E13B42C0745BF9E3BF33185
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e20383334.roa
Signing time:             Sat 25 Oct 2025 06:43:07 +0000
ROA not before:           Sat 25 Oct 2025 06:38:07 +0000
ROA not after:            Sat 24 Oct 2026 06:43:07 +0000
asID:                     834
IP address blocks:        162.218.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 31 Oct 2025 14:45:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:8a:83:47:39:fe:18:13:7e:13:b4:2c:07:45:bf:9e:3b:f3:31:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Oct 25 06:38:07 2025 GMT
            Not After : Oct 24 06:43:07 2026 GMT
        Subject: CN=AFE7D43D9F05AAA2AF445ACB2379FBD0A4A5819B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:20:c2:9c:be:60:b3:94:b3:4d:de:d8:ed:0d:
                    54:b0:e3:14:09:d3:44:6c:ad:6a:67:be:79:49:3e:
                    36:94:68:2a:5e:52:f3:8d:ca:1b:24:f6:ff:6b:b4:
                    33:2f:bd:36:5b:66:53:16:3c:4f:75:12:92:a7:7a:
                    14:f7:0d:5c:e8:e5:eb:60:b3:a4:e3:17:1d:32:8b:
                    a3:6d:75:10:c3:25:fd:0c:a1:fc:28:0b:59:de:7a:
                    c6:78:23:1f:c8:a0:af:15:bf:33:32:39:33:ce:12:
                    cc:27:bc:82:f2:5e:6b:35:e9:d5:bb:07:ae:1a:23:
                    23:58:b6:98:6a:e0:1d:95:56:cd:88:90:92:50:6a:
                    61:19:c8:69:f3:f7:1a:9b:96:b0:4b:6c:48:d2:d3:
                    57:4f:ab:d4:e7:de:7a:48:51:15:df:ec:84:c5:ba:
                    2b:32:60:38:08:c2:73:86:08:1a:a0:58:aa:d8:ac:
                    3a:5f:55:64:52:8d:1d:9b:c0:24:18:11:e5:76:56:
                    cf:7c:11:f1:72:08:e8:cb:29:c9:56:a1:c7:61:93:
                    a1:c5:3e:26:3f:66:ff:65:79:bb:15:99:22:c6:c2:
                    87:e4:f4:ba:cd:65:9c:b3:0f:26:0c:2f:6f:ca:27:
                    d7:7f:7c:70:be:35:d8:8e:bb:cf:bb:06:7d:9c:9d:
                    a1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E7:D4:3D:9F:05:AA:A2:AF:44:5A:CB:23:79:FB:D0:A4:A5:81:9B
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:74:d6:42:53:de:ee:d0:59:8e:9c:3c:fb:fd:85:8e:a3:26:
         57:59:e5:77:87:da:af:27:64:71:5c:5a:72:9e:d1:b6:c1:47:
         61:1e:8a:e3:7a:f4:a8:52:99:bc:6c:16:2b:7f:4e:8f:cf:45:
         d0:1c:3d:19:a7:15:d4:f3:82:7a:54:aa:25:94:2c:4a:d2:1a:
         07:28:84:65:ad:cf:39:28:e9:7c:a5:cd:e3:14:e8:79:2c:a6:
         3c:c6:34:09:2c:4d:f5:af:0d:49:a7:87:8b:c3:d1:bd:d0:fa:
         bc:2d:a0:44:dc:e3:91:94:59:95:30:44:1c:10:9b:e5:f5:f2:
         db:0e:9c:b9:01:35:e4:b5:67:b4:5f:ad:f2:7b:6d:4d:77:08:
         56:eb:57:8f:f1:fc:64:10:5b:6f:ad:5e:8c:ad:3c:c1:a0:56:
         25:1e:79:fc:91:87:49:97:f5:33:f8:57:a7:2f:30:27:b0:47:
         d3:f8:1b:22:a7:84:81:b2:9e:de:d1:8b:ff:d9:41:01:42:8e:
         6a:73:af:a8:30:a2:bf:79:59:da:5a:f3:dd:5a:4c:7b:95:1e:
         4f:0f:e9:56:3e:37:a6:c2:a1:bd:9e:c2:08:4a:6b:73:a8:82:
         6d:66:c1:9c:e5:eb:76:97:e2:e1:1d:2e:0e:83:46:0d:4f:c7:
         54:e9:e6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 31 05:39:12 2025 by rpki-client