Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3137342e302f32342d3234203d3e203230343733.roa
File:                     3231362e3135312e3137342e302f32342d3234203d3e203230343733.roa (raw, json)
Hash identifier:          6I5IjRbqk/V7q7161ioyC2i8O3rp6nYPRKgLTRY01Vo=
Subject key identifier:   8F:1A:D5:A7:2D:85:EB:DD:B1:43:80:33:A3:67:5E:19:6A:52:52:A8
Certificate issuer:       /CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
Certificate serial:       0DB4B0DBE06B658A23F7921F61F594BB50FA350E
Authority key identifier: C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3137342e302f32342d3234203d3e203230343733.roa
Signing time:             Sat 31 May 2025 08:29:00 +0000
ROA not before:           Sat 31 May 2025 08:24:00 +0000
ROA not after:            Sat 30 May 2026 08:29:00 +0000
asID:                     20473
IP address blocks:        216.151.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/efa01acb-51ec-4048-8589-d09390791aed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 12:28:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:b4:b0:db:e0:6b:65:8a:23:f7:92:1f:61:f5:94:bb:50:fa:35:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b
        Validity
            Not Before: May 31 08:24:00 2025 GMT
            Not After : May 30 08:29:00 2026 GMT
        Subject: CN=8F1AD5A72D85EBDDB1438033A3675E196A5252A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:69:a5:88:62:60:b9:05:b0:32:83:c0:fd:16:
                    3d:7f:ce:9c:c7:a5:ca:4b:16:1c:35:f0:a7:68:12:
                    ac:ed:ea:f0:be:29:a5:0a:18:91:4c:da:3b:04:e5:
                    3a:23:f4:33:e8:e6:00:71:1b:11:08:38:18:8d:48:
                    a6:61:79:4f:0e:70:d5:98:b7:bc:44:8b:71:63:f2:
                    e0:bd:9a:dc:0f:90:37:8c:12:30:47:69:4d:53:3a:
                    fc:59:3d:52:35:48:e2:87:49:80:4a:fe:68:4f:c0:
                    9f:53:21:12:11:ed:fb:c5:f3:05:34:61:70:50:c8:
                    6d:7f:6b:a7:5b:ec:fe:c6:aa:17:6f:ef:83:3b:b9:
                    e9:70:94:43:58:be:57:1f:24:51:20:17:8f:02:34:
                    05:79:93:30:a0:6f:fa:1f:b9:cd:f1:58:e2:20:8c:
                    e7:10:bc:d8:21:2d:51:97:ac:70:ad:43:1b:81:81:
                    d8:a1:44:70:95:8c:6f:b9:fb:92:8f:6f:af:90:c2:
                    57:2a:cb:c5:1f:02:54:54:0d:67:b8:15:08:df:0a:
                    53:29:bc:c7:56:cc:84:14:c4:6c:2f:ed:98:18:c7:
                    9c:25:78:1e:2f:c0:0c:77:6f:cd:4e:37:9e:47:26:
                    42:bc:37:54:3e:1b:1f:7b:03:f9:4c:94:a5:90:f6:
                    00:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1A:D5:A7:2D:85:EB:DD:B1:43:80:33:A3:67:5E:19:6A:52:52:A8
            X509v3 Authority Key Identifier:
                keyid:C3:A3:D9:17:F4:39:9B:C2:6C:0A:68:77:18:2B:EA:3C:D9:FE:F4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/C3A3D917F4399BC26C0A6877182BEA3CD9FEF402.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/efa01acb-51ec-4048-8589-d09390791aed/7e2bb4e56cdfe2f40f824abdccd9b523466eccddb306c90c5b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade8fded1a0019006e97cb128ef/0/3231362e3135312e3137342e302f32342d3234203d3e203230343733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.151.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:3c:aa:54:6f:26:e9:35:62:c8:75:85:e1:2a:de:1d:bb:6b:
         1d:14:36:4b:3b:6c:5b:72:85:1c:1f:ec:5a:87:21:7c:54:94:
         28:ee:36:aa:3b:e5:79:ef:e6:74:19:b6:2c:25:1e:d8:3a:7b:
         af:da:d9:be:d6:cb:25:d7:47:0c:5f:84:cd:e4:0d:ab:d0:36:
         1d:b4:d5:b6:11:e8:dc:07:1a:f8:cf:fe:aa:3f:86:c4:bd:4d:
         ad:b4:c4:91:22:27:33:33:a2:74:ed:ab:d4:2c:f6:00:42:d7:
         94:8c:6b:7e:d4:0c:6a:c7:a7:fc:b0:1c:b8:3d:9c:47:02:27:
         b1:ec:f0:df:cf:20:0f:89:3d:16:7a:15:6c:94:1e:57:5e:be:
         aa:fe:d1:c2:5e:61:79:a3:e1:8c:e2:1a:39:70:38:af:b4:b9:
         61:82:6a:40:f8:e8:a7:30:2a:4c:f9:a6:35:50:09:35:4c:8f:
         17:1b:98:65:68:98:36:d3:6b:c3:15:4a:2e:c0:7f:32:69:2e:
         4b:64:ba:38:5b:7a:45:2c:86:e1:05:b0:11:92:43:d3:b0:23:
         47:99:f6:cf:11:58:c6:14:31:5c:91:72:f2:aa:60:38:64:fa:
         8c:c7:d3:06:d5:98:5e:f9:fa:ee:b0:b7:27:c6:0d:1f:42:c9:
         46:4e:e8:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:37:29 2025 by rpki-client