Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa
File:                     3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa (raw, json)
Hash identifier:          BtrxPcgoXH8L4DI4EI0m7rrI0jRpiDLXHhPrOH0GYMM=
Subject key identifier:   CC:C8:62:92:D4:EA:20:A9:23:DE:EE:88:38:26:58:12:58:4C:70:31
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       3A6AA8950203A6D564A82DEB2C82B39411470EA3
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa
Signing time:             Tue 27 May 2025 16:28:39 +0000
ROA not before:           Tue 27 May 2025 16:23:39 +0000
ROA not after:            Tue 26 May 2026 16:28:39 +0000
asID:                     396356
IP address blocks:        216.151.164.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 04:45:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6a:a8:95:02:03:a6:d5:64:a8:2d:eb:2c:82:b3:94:11:47:0e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: May 27 16:23:39 2025 GMT
            Not After : May 26 16:28:39 2026 GMT
        Subject: CN=CCC86292D4EA20A923DEEE8838265812584C7031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:1c:a0:e8:ee:06:cc:a8:72:02:8d:64:f7:ed:
                    50:80:f2:e0:2e:16:7d:69:dd:5d:5d:2f:6c:de:ba:
                    60:46:1a:f9:b5:f6:2c:e8:5b:1b:3b:c6:db:ea:51:
                    6b:8d:0b:21:69:c3:af:2a:a6:78:5c:74:7f:28:b8:
                    16:aa:fe:37:ff:5c:4b:3b:3e:cb:a6:55:df:58:91:
                    cb:be:7a:01:c5:c0:58:c0:5c:ca:c6:22:5b:59:2f:
                    25:6e:78:ef:ed:5b:51:f9:c3:8d:16:56:28:47:b6:
                    e9:90:92:7b:03:a5:0a:e9:72:4a:6f:e6:87:cf:fd:
                    c0:3e:6b:bf:39:18:a1:da:56:08:5e:7b:a3:ff:f2:
                    3e:1e:2b:1e:d7:11:26:10:29:5e:11:73:c7:77:54:
                    bc:b6:a7:a8:e0:4c:d7:16:76:55:f1:fc:ca:70:69:
                    4a:c9:9c:81:05:55:18:32:72:99:68:fe:5c:ad:e2:
                    1c:66:b6:6c:7b:ce:a1:bc:27:51:07:73:65:3d:a5:
                    d9:6b:11:8e:3d:a3:69:b8:fb:20:1a:f9:5b:ba:34:
                    09:50:6b:f1:c3:5f:f9:71:f3:98:b0:c8:9c:21:5d:
                    0f:09:9a:b9:3e:0b:3c:d6:c7:a3:30:d6:e3:c2:41:
                    13:47:17:ff:66:7d:92:fd:fe:31:31:a6:85:5b:69:
                    23:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C8:62:92:D4:EA:20:A9:23:DE:EE:88:38:26:58:12:58:4C:70:31
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136342e302f32332d3233203d3e20333936333536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:f5:1f:23:97:83:68:77:8f:91:0d:d6:95:19:34:c1:60:9b:
         e2:52:c2:3c:ad:0f:10:43:a6:66:9f:43:29:a7:86:d5:bd:8f:
         f2:3d:0e:1c:35:9e:13:7d:9b:4d:0b:47:79:7c:1b:60:85:cf:
         b0:c7:2c:c6:09:28:52:ed:37:3c:9c:09:73:a8:92:2b:98:7d:
         bc:bb:8f:26:1a:40:3c:cf:3b:d6:33:6b:bf:b8:44:30:bc:9b:
         0a:01:42:92:2e:9d:be:53:2f:82:73:db:0e:b8:3f:c2:2f:94:
         4a:5b:5e:7a:f0:1c:61:b5:4d:b6:a0:19:ec:e7:ff:6b:24:37:
         07:3e:e5:93:d0:a1:79:0b:a3:96:6c:fa:0b:72:e5:dd:c0:68:
         1c:04:a6:ab:82:aa:fe:47:5a:db:c9:7e:e2:e8:86:e1:e6:f2:
         8c:4b:18:94:66:79:0d:5f:c1:3c:79:9b:78:8e:b0:99:ea:6e:
         5d:6a:d4:dd:37:a7:97:3f:da:ef:38:b3:f3:32:28:39:57:9e:
         ff:5d:16:24:89:d1:b0:3d:21:ff:5c:0f:32:cb:b9:3d:03:ac:
         8f:8b:87:df:4e:e4:71:59:75:2a:29:58:92:a4:48:b3:6f:50:
         25:2f:7c:8c:92:f1:44:b3:b6:e4:80:8a:af:b0:e7:3f:a8:73:
         65:8c:55:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:04:32 2025 by rpki-client