Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e2039333034.roa
File:                     3136322e3231382e32342e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          YzKm03QqHcAuU+n56fs6qp4rDlALF0tWVV67wlSXaMQ=
Subject key identifier:   84:D7:21:C0:34:48:FE:A2:68:B6:19:EE:D5:62:E7:05:8D:88:03:51
Certificate issuer:       /CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
Certificate serial:       2D1CD66F0EF79EEE3A175EBC4CDA6B8BFB2BA9B2
Authority key identifier: ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e2039333034.roa
Signing time:             Thu 25 Sep 2025 06:51:28 +0000
ROA not before:           Thu 25 Sep 2025 06:46:28 +0000
ROA not after:            Thu 24 Sep 2026 06:51:28 +0000
asID:                     9304
IP address blocks:        162.218.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1c:d6:6f:0e:f7:9e:ee:3a:17:5e:bc:4c:da:6b:8b:fb:2b:a9:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb
        Validity
            Not Before: Sep 25 06:46:28 2025 GMT
            Not After : Sep 24 06:51:28 2026 GMT
        Subject: CN=84D721C03448FEA268B619EED562E7058D880351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:2c:f0:86:a9:dc:4c:4c:79:da:b4:ae:c8:95:
                    7a:d0:76:bf:16:d6:45:1a:21:94:18:f5:8d:fa:f5:
                    95:d7:7b:83:ab:5b:1d:94:f6:bb:12:52:d7:a8:e0:
                    3a:39:ad:aa:fe:25:19:42:b8:5c:6e:0c:7d:b6:a0:
                    83:71:e9:a5:9e:b1:4e:ba:2a:75:97:e8:63:4f:39:
                    4a:a7:a9:24:7c:92:03:40:77:50:a2:11:d3:1e:6a:
                    57:50:dc:f4:c5:2e:c7:ab:9a:62:a7:4e:50:6e:a1:
                    a4:c9:fb:c6:6d:aa:45:86:c5:98:6a:ea:b5:16:12:
                    99:6c:d5:97:e8:99:9b:79:19:ae:53:0e:d2:a1:0b:
                    24:32:94:45:cd:62:da:80:43:e5:09:89:7c:70:46:
                    da:75:7e:74:aa:f1:30:ae:fc:a2:ed:a6:52:13:34:
                    ac:8d:2d:e6:97:bb:2b:94:ed:bb:39:19:1f:55:40:
                    44:ac:5a:0b:f3:f6:ce:8a:f4:16:75:43:34:05:80:
                    13:27:d5:80:b2:94:70:3e:2a:b9:17:8e:26:99:40:
                    9c:18:84:9c:9e:85:08:f4:e3:27:de:0b:52:15:37:
                    9d:64:19:69:27:ce:4d:0c:69:46:13:23:cc:a2:5d:
                    57:95:c1:a9:90:09:00:c9:3c:88:67:75:cc:54:e6:
                    5f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:D7:21:C0:34:48:FE:A2:68:B6:19:EE:D5:62:E7:05:8D:88:03:51
            X509v3 Authority Key Identifier:
                keyid:ED:23:65:19:8E:BA:74:92:78:14:95:16:E3:C7:6C:50:94:AE:99:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/ED2365198EBA749278149516E3C76C5094AE993F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e16c2ee6-ee94-4ae3-a6f7-ccb776ef75a2/74f7a45a3a510de918f6ddf7cca1df53d32dd9eb0564ed5cfb.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01892704d5f332eb/0/3136322e3231382e32342e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:f3:17:33:0f:dc:78:81:45:dc:20:60:40:58:f8:d3:a4:bb:
         a0:ac:7d:c8:c7:53:a7:3d:ab:e1:53:4e:72:e3:8b:6e:32:96:
         3e:37:ee:62:a5:a3:29:b9:13:59:be:5e:2a:e5:77:a3:6e:54:
         01:3b:8b:98:47:4b:fc:e7:f4:15:95:0c:c4:26:cc:03:cf:e5:
         7f:e2:9b:b9:d3:c7:62:dd:63:de:e1:b3:ec:58:8a:b5:bc:b0:
         de:5a:e9:f2:bd:9a:38:c9:40:dc:a7:bc:dd:51:f5:8d:b8:c4:
         aa:9d:08:65:25:de:3a:59:f0:e8:26:89:a6:af:fb:2c:39:2e:
         49:23:79:30:c9:12:49:60:1e:17:54:4e:0c:28:26:bc:e7:aa:
         ac:0e:f2:3b:f9:8b:61:cb:da:4f:f1:59:2b:bf:2d:d8:3c:ac:
         bc:59:9d:7f:1e:13:a5:b4:20:9e:d4:9c:35:09:9b:2f:8b:83:
         be:5e:ac:b9:cd:1a:81:9d:99:3b:2e:32:12:b1:9b:d2:04:41:
         5b:20:4d:1c:11:45:83:2e:72:e9:d1:19:b1:ec:2c:aa:1f:b1:
         2a:dd:ae:92:e3:bd:97:2b:63:23:e5:a8:a4:85:d7:95:f8:f8:
         fc:44:5e:a4:58:e8:9f:98:f5:73:ea:60:4b:dc:6f:0b:e0:9a:
         28:51:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:34:27 2025 by rpki-client