Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa
File:                     3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa (raw, json)
Hash identifier:          qPnTCOWMtuc+YcfB3cstvOwVP3dM1AgmETEor1RNkuo=
Subject key identifier:   68:24:D9:08:19:0E:B1:AA:65:03:2C:A0:A8:26:E5:0B:FD:73:E7:23
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       1DA2A103A409AC7C83D6683FBB28527C070116A9
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa
Signing time:             Tue 27 May 2025 13:28:34 +0000
ROA not before:           Tue 27 May 2025 13:23:34 +0000
ROA not after:            Tue 26 May 2026 13:28:34 +0000
asID:                     212384
IP address blocks:        216.151.162.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:48:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:a2:a1:03:a4:09:ac:7c:83:d6:68:3f:bb:28:52:7c:07:01:16:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: May 27 13:23:34 2025 GMT
            Not After : May 26 13:28:34 2026 GMT
        Subject: CN=6824D908190EB1AA65032CA0A826E50BFD73E723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:de:4d:d6:bb:5e:bb:52:f0:e9:60:02:10:11:
                    2f:e3:fc:d8:c9:27:2b:62:77:be:a8:a8:0a:06:0c:
                    ce:c1:9d:79:22:82:b2:a4:ff:4e:dc:d5:19:3d:29:
                    40:7e:04:fc:a9:8c:90:36:cc:de:d7:5d:f4:21:b1:
                    4b:1d:1f:59:7a:76:62:77:7a:02:ae:7d:48:f1:79:
                    b9:02:53:51:1a:35:ad:69:7c:a5:7c:d2:0c:7c:d1:
                    bf:87:7a:40:d0:f5:30:91:fc:ee:7f:63:45:ae:e1:
                    02:ec:2e:19:95:d3:fc:05:69:0d:21:b9:7d:8c:56:
                    f5:10:b0:f9:7d:c2:2f:b9:ca:52:16:1b:8e:a1:cb:
                    c5:5c:54:2b:d5:e8:15:f8:f0:b5:db:26:1a:4e:2e:
                    e0:12:89:77:96:80:42:53:56:fe:6a:3b:5d:db:7e:
                    c1:ef:a8:42:18:cd:d7:6d:f7:da:83:12:0e:0e:56:
                    14:74:00:ad:6e:55:5e:a9:13:0d:cb:9c:98:8d:91:
                    c4:4b:e4:d0:4b:c5:c7:64:cb:51:fd:5e:ea:02:38:
                    2c:0f:b8:21:e8:ff:da:13:1d:00:9c:3e:ff:28:64:
                    20:59:ce:8e:b8:95:2c:38:d5:ce:31:d6:e4:78:83:
                    10:85:9e:4c:bb:2e:39:d7:d3:76:fc:79:9d:71:52:
                    c6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:24:D9:08:19:0E:B1:AA:65:03:2C:A0:A8:26:E5:0B:FD:73:E7:23
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136322e302f32342d3234203d3e20323132333834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:2b:d0:fe:ec:39:cb:78:2b:4d:95:86:5c:0d:4a:fa:85:
         4e:12:33:96:2a:54:fe:b0:d0:0a:20:d9:3d:a6:35:80:8d:24:
         0e:63:c8:f3:92:74:63:5f:9b:fe:19:35:14:39:30:83:e2:66:
         99:1d:f1:ab:57:3f:4b:c2:ab:61:77:f9:30:fe:a5:ed:6b:ab:
         5c:4f:e8:b1:7e:cf:4e:ac:f6:13:b2:cc:3b:9d:2a:dc:eb:f6:
         e7:c4:38:2e:43:c0:8a:71:f7:ce:73:35:8b:7c:56:96:31:f4:
         8c:7a:65:d1:a1:7c:4c:68:7e:ed:a1:c1:4f:1c:be:9a:67:7f:
         28:c9:a8:2d:7c:88:29:69:80:d5:d3:05:4a:b7:aa:95:17:a9:
         76:12:7f:48:56:31:33:bf:db:74:8a:00:50:a5:8e:88:a5:0f:
         9f:6d:75:9b:b4:0f:75:13:51:3e:85:3f:3f:1e:ae:6b:69:1e:
         c8:cd:4b:df:ad:db:a1:8a:43:46:11:05:de:b3:f3:c6:82:27:
         d5:62:dc:5a:e9:13:3f:64:17:4a:b0:15:f3:0a:a2:c0:77:41:
         3c:31:1a:ed:68:3a:d5:46:f9:5f:03:93:73:ac:a1:6a:e8:b7:
         27:09:39:cf:c6:ce:15:63:b3:fb:fb:41:d8:b0:65:63:5e:90:
         fd:ce:f6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:46:30 2025 by rpki-client