Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e20313734.roa
File:                     3231362e3135312e3136382e302f32342d3234203d3e20313734.roa (raw, json)
Hash identifier:          v3sANFZZEAlId3MnoCVEvM+VaenjC6m3fJIvnKeSIUI=
Subject key identifier:   77:2C:89:C7:04:A0:25:83:82:E1:2A:8A:AE:C7:49:2C:54:6E:65:0C
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       2456E244F1D16DC33430789F4823383C633CE324
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e20313734.roa
Signing time:             Sat 12 Jul 2025 07:29:44 +0000
ROA not before:           Sat 12 Jul 2025 07:24:44 +0000
ROA not after:            Sat 11 Jul 2026 07:29:44 +0000
asID:                     174
IP address blocks:        216.151.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 31 Jul 2025 22:38:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:56:e2:44:f1:d1:6d:c3:34:30:78:9f:48:23:38:3c:63:3c:e3:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: Jul 12 07:24:44 2025 GMT
            Not After : Jul 11 07:29:44 2026 GMT
        Subject: CN=772C89C704A0258382E12A8AAEC7492C546E650C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:16:30:7c:9a:6a:d5:19:00:a5:1a:5f:33:8f:
                    69:7e:a6:7c:88:0f:31:aa:0e:1e:9c:23:af:1f:b1:
                    b7:ff:0d:c0:6d:30:10:6a:d5:cd:89:77:a4:9b:77:
                    c6:d6:8a:49:5f:d9:98:7d:f2:53:34:20:99:f2:7f:
                    9a:52:94:58:22:9f:82:90:60:e6:8a:f8:f3:31:81:
                    f6:84:5d:9c:00:7b:e3:59:87:62:65:b7:65:6c:de:
                    00:e3:10:0f:4f:e4:fc:3a:13:db:ff:20:b2:49:90:
                    21:17:ac:5a:f7:d9:86:ec:6e:e0:a9:37:3d:4d:83:
                    fe:a0:6e:da:c1:99:04:fe:7e:7b:db:39:bf:75:11:
                    49:cc:27:63:f9:83:fb:c2:c6:83:da:ea:e4:29:ac:
                    ec:c8:08:b6:81:95:2e:6a:66:7d:75:83:a7:15:cb:
                    6a:30:88:f6:f5:54:d5:d5:45:34:a7:a1:81:01:3e:
                    dc:b0:ca:03:5f:f9:85:8f:d8:a1:87:0d:12:43:88:
                    f8:06:ca:2f:5b:98:c4:74:11:c8:cc:ff:99:2a:8a:
                    c8:c5:0d:13:d0:33:c6:3c:d2:43:ad:fd:65:88:f4:
                    3d:8c:3f:45:94:b2:56:55:6b:02:e5:7a:9b:06:e9:
                    30:80:02:f8:b7:67:46:17:24:09:3b:71:b7:a2:fb:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2C:89:C7:04:A0:25:83:82:E1:2A:8A:AE:C7:49:2C:54:6E:65:0C
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3136382e302f32342d3234203d3e20313734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:0a:b2:09:11:70:c8:7d:c7:fa:6b:11:38:1e:ee:1d:e5:41:
         6d:4d:a3:05:7c:1e:8a:4a:45:29:bb:d3:15:16:da:88:49:4e:
         21:1e:ee:b2:bd:d9:63:7f:d7:43:86:6b:8b:26:b4:73:e5:56:
         8f:53:2e:ad:2e:3e:77:82:81:29:6d:37:06:2a:98:a2:55:2a:
         c0:7b:31:86:40:5c:15:b5:c0:e1:f6:03:10:85:7a:5d:9e:ea:
         4d:34:ec:5b:23:7c:58:6d:5f:3f:4b:ad:f3:c4:18:00:5d:9b:
         53:08:a4:35:45:df:01:8a:f1:cd:ba:04:ba:66:4d:0d:de:8e:
         6e:62:e3:bc:9a:83:00:1d:e6:18:ef:16:9c:c9:6c:4f:58:18:
         d4:68:98:88:54:52:9f:86:35:16:d7:50:26:50:6d:9d:5d:ec:
         dd:9c:f6:14:c1:11:c1:da:b8:3d:9e:5e:59:c3:6c:8e:9d:98:
         01:cd:a2:0d:51:aa:da:f5:3a:ef:8e:d2:99:c0:6f:a7:8b:ea:
         00:fd:c2:6d:3b:9d:2e:d7:26:dd:62:51:b8:66:61:b3:28:8d:
         26:4c:40:da:70:0c:ec:c4:9b:41:e4:ff:fc:82:0f:84:4b:c5:
         36:9f:64:fe:4a:05:2f:3f:4a:c4:7e:4f:da:04:22:6d:cb:38:
         42:5d:50:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 31 06:40:37 2025 by rpki-client