Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20393834.roa
File:                     3231362e3135312e3136332e302f32342d3234203d3e20393834.roa (raw, json)
Hash identifier:          y/zPEZ5YCkIt+9FUpAuUts3EbcEXb170v556M366eX0=
Subject key identifier:   AF:44:0A:FA:3A:B7:EE:B3:80:C4:46:B5:AE:8C:8D:74:19:6D:82:7A
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       2141272478D1C2204DB9FE080F2D2EB93822B142
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20393834.roa
Signing time:             Sat 11 Oct 2025 06:50:21 +0000
ROA not before:           Sat 11 Oct 2025 06:45:21 +0000
ROA not after:            Sat 10 Oct 2026 06:50:21 +0000
asID:                     984
IP address blocks:        216.151.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 12:40:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:41:27:24:78:d1:c2:20:4d:b9:fe:08:0f:2d:2e:b9:38:22:b1:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Oct 11 06:45:21 2025 GMT
            Not After : Oct 10 06:50:21 2026 GMT
        Subject: CN=AF440AFA3AB7EEB380C446B5AE8C8D74196D827A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:90:9b:0e:a3:6b:bb:28:8b:d1:6e:da:7c:24:
                    a3:5e:42:23:28:ff:cf:37:9c:e1:24:4c:13:29:7b:
                    74:9d:86:0b:ef:b6:57:88:32:1a:0d:3c:bf:ad:f2:
                    67:20:c5:62:62:79:2b:cc:47:ec:80:e9:cc:ed:3e:
                    58:b0:48:23:8b:1f:34:fd:70:44:ce:3b:ae:4f:25:
                    c6:21:b4:42:a0:63:7f:c8:77:42:95:54:03:50:ca:
                    6e:4b:a6:2e:b7:a4:1d:30:dd:df:04:4a:0a:a9:25:
                    92:07:fa:da:41:92:65:49:c3:4e:26:a7:37:31:7f:
                    75:09:77:bd:fc:79:e7:3b:e1:17:78:47:60:48:e3:
                    df:70:91:ce:6c:df:a2:38:e2:8f:42:63:90:c0:9f:
                    d6:01:3c:5f:2d:53:14:2b:7b:60:ef:ea:c4:82:a4:
                    25:fe:21:95:bf:1f:d8:c5:32:4b:83:33:4d:1f:85:
                    8b:c3:90:e2:16:64:e8:0d:91:ab:f9:53:2f:72:11:
                    d3:d0:3e:f1:fd:eb:be:f1:2c:bb:f7:1a:d1:1d:15:
                    f6:ff:9d:7a:de:28:2d:3b:7c:44:7e:9e:ac:22:bf:
                    8a:8c:41:bb:65:61:ab:8f:06:0e:d0:91:1f:ac:19:
                    04:e2:51:a1:b0:2c:0c:9c:a1:ff:03:87:44:f7:10:
                    03:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:44:0A:FA:3A:B7:EE:B3:80:C4:46:B5:AE:8C:8D:74:19:6D:82:7A
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136332e302f32342d3234203d3e20393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:8d:a9:b5:f5:8d:a4:04:c5:3d:2c:db:93:5f:a2:6c:81:fc:
         4d:2d:4c:d6:29:13:02:4f:ff:3f:30:02:10:b5:61:7b:6d:dc:
         48:92:dc:8a:c0:40:2e:12:b8:82:78:9d:ee:7c:e6:2b:55:4c:
         70:d6:bc:7c:c5:58:61:16:b7:95:b5:6a:ab:74:2f:e5:bf:b0:
         bc:8e:ef:95:20:32:41:d7:6e:4b:42:a2:31:4b:38:03:43:c3:
         da:ab:e4:07:61:ef:c6:cf:50:ff:f3:00:d6:89:35:8d:d1:00:
         eb:5e:ac:3c:8d:a8:80:96:25:da:75:a6:b3:62:ea:e9:48:bf:
         09:49:6f:83:1f:b5:1a:b6:6d:b4:cb:10:11:ee:b1:db:15:20:
         59:3d:40:1d:4e:84:7c:4b:98:7d:f9:34:13:a2:e0:b4:ae:32:
         13:b8:cc:59:ad:81:4e:6d:43:a9:32:00:ac:05:83:c8:06:44:
         e9:c4:00:15:92:dc:9d:4b:39:f2:87:e7:93:f7:5a:aa:7c:76:
         b3:b8:e8:bb:8d:b5:56:89:09:39:c8:77:63:93:c3:a0:ab:e4:
         3f:0d:f0:a2:3c:10:2b:fc:f8:66:ad:18:a4:ce:8f:5a:9d:10:
         24:4d:09:6b:56:fa:d5:13:9d:a7:a8:4a:40:a9:e9:9c:93:df:
         2c:e0:4a:49
-----BEGIN CERTIFICATE-----
MIIFsDCCBJigAwIBAgIUIUEnJHjRwiBNuf4IDy0uuTgisUIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyN2UyYmI0ZTU2Y2RmZTJmNDBmODI0YWJkY2NkOWI1MjM0
NjZlY2NkZGIzMDZjOTBjNWIwHhcNMjUxMDExMDY0NTIxWhcNMjYxMDEwMDY1MDIx
WjAzMTEwLwYDVQQDEyhBRjQ0MEFGQTNBQjdFRUIzODBDNDQ2QjVBRThDOEQ3NDE5
NkQ4MjdBMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJCbDqNruyiL
0W7afCSjXkIjKP/PN5zhJEwTKXt0nYYL77ZXiDIaDTy/rfJnIMViYnkrzEfsgOnM
7T5YsEgjix80/XBEzjuuTyXGIbRCoGN/yHdClVQDUMpuS6Yut6QdMN3fBEoKqSWS
B/raQZJlScNOJqc3MX91CXe9/HnnO+EXeEdgSOPfcJHObN+iOOKPQmOQwJ/WATxf
LVMUK3tg7+rEgqQl/iGVvx/YxTJLgzNNH4WLw5DiFmToDZGr+VMvchHT0D7x/eu+
8Sy79xrRHRX2/5163igtO3xEfp6sIr+KjEG7ZWGrjwYO0JEfrBkE4lGhsCwMnKH/
A4dE9xAD5QIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFK9ECvo6t+6zgMRGta6MjXQZ
bYJ6MB8GA1UdIwQYMBaAFMOj2Rf0OZvCbApodxgr6jzZ/vQCMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRlOGZkZWQxYTAwMTkwMDZlOTdjYjEyOGVmLzAv
QzNBM0Q5MTdGNDM5OUJDMjZDMEE2ODc3MTgyQkVBM0NEOUZFRjQwMi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNmVhZDA3M2MtYjlmMC00NTIzLWIzOWUtYTNjN2Rh
Yjk3YzI1L2VmYTAxYWNiLTUxZWMtNDA0OC04NTg5LWQwOTM5MDc5MWFlZC83ZTJi
YjRlNTZjZGZlMmY0MGY4MjRhYmRjY2Q5YjUyMzQ2NmVjY2RkYjMwNmM5MGM1Yi5j
ZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZThmZGVkMWEwMDE5MDA2
ZTk3Y2IxMjhlZi8wLzMyMzEzNjJlMzEzNTMxMmUzMTM2MzMyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzOTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIw
HwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADYl6MwDQYJKoZIhvcNAQELBQAD
ggEBAHONqbX1jaQExT0s25NfomyB/E0tTNYpEwJP/z8wAhC1YXtt3EiS3IrAQC4S
uIJ4ne585itVTHDWvHzFWGEWt5W1aqt0L+W/sLyO75UgMkHXbktCojFLOANDw9qr
5Adh78bPUP/zANaJNY3RAOterDyNqICWJdp1prNi6ulIvwlJb4MftRq2bbTLEBHu
sdsVIFk9QB1OhHxLmH35NBOi4LSuMhO4zFmtgU5tQ6kyAKwFg8gGROnEABWS3J1L
OfKH55P3Wqp8drO46LuNtVaJCTnId2OTw6Cr5D8N8KI8ECv8+GatGKTOj1qdECRN
CWtW+tUTnaeoSkCp6ZyT3yzgSkk=
-----END CERTIFICATE-----
Generated at Sun Oct 19 16:10:33 2025 by rpki-client