Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20333939303733.roa
File:                     3230342e36392e3231372e302f32342d3234203d3e20333939303733.roa (raw, json)
Hash identifier:          iZHkY5jxw45iaqeZfLgcBYrAeF1BwgF4jZCglcnryLg=
Subject key identifier:   98:C4:53:0A:4D:D2:7A:5B:A4:DC:EE:58:C2:7D:00:97:A5:00:99:73
Certificate issuer:       /CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
Certificate serial:       1461F83ED16EA06DFDE20E9DFBD947407CD2AD89
Authority key identifier: A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20333939303733.roa
Signing time:             Tue 29 Jul 2025 07:24:48 +0000
ROA not before:           Tue 29 Jul 2025 07:19:48 +0000
ROA not after:            Tue 28 Jul 2026 07:24:48 +0000
asID:                     399073
IP address blocks:        204.69.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 03:46:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:61:f8:3e:d1:6e:a0:6d:fd:e2:0e:9d:fb:d9:47:40:7c:d2:ad:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
        Validity
            Not Before: Jul 29 07:19:48 2025 GMT
            Not After : Jul 28 07:24:48 2026 GMT
        Subject: CN=98C4530A4DD27A5BA4DCEE58C27D0097A5009973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:3f:31:7b:d7:f0:92:7c:2c:29:cc:6d:0f:
                    d5:4c:ef:12:a2:4f:22:e7:b2:4d:ec:93:58:d0:07:
                    e5:04:9b:31:c1:22:ca:cc:49:12:e7:d8:f0:58:7c:
                    61:de:a4:26:f4:dc:29:46:64:16:33:0b:bd:04:82:
                    2a:11:01:89:25:fd:40:0e:60:f2:7c:5b:f3:8d:f8:
                    1d:5b:76:77:51:c9:d7:94:8f:62:77:3a:37:5c:45:
                    1f:0b:1c:cc:77:ab:00:ab:d2:b1:71:38:13:97:59:
                    9d:2e:c7:4b:3a:2a:27:6a:76:a9:7d:61:41:c7:ef:
                    e4:4a:d9:8e:83:fe:ca:1e:99:e7:a5:63:c5:aa:dd:
                    dd:fa:d2:51:b5:7d:ca:82:85:98:8b:ab:59:ae:fc:
                    3f:b1:87:93:39:08:18:2b:84:0e:4d:e1:3a:2b:67:
                    c5:ba:ba:8a:c5:95:fb:4d:37:d1:86:46:6f:d7:83:
                    45:c8:04:a6:44:ce:3e:ad:49:bd:e8:0d:98:9a:a6:
                    0e:b3:e4:85:72:e9:32:5d:87:2c:78:ce:8e:2a:44:
                    7c:f3:ac:ec:a4:cc:ed:d7:91:71:a0:d4:24:28:fc:
                    fb:71:1d:bf:f5:cf:8a:d4:42:b6:17:5e:39:bd:b1:
                    bd:9b:49:37:23:48:31:ad:8e:96:df:a1:e3:03:f6:
                    2a:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C4:53:0A:4D:D2:7A:5B:A4:DC:EE:58:C2:7D:00:97:A5:00:99:73
            X509v3 Authority Key Identifier:
                keyid:A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/3230342e36392e3231372e302f32342d3234203d3e20333939303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:44:c6:f5:79:ae:c8:02:47:0d:7f:31:24:f0:de:54:75:f6:
         d0:95:12:2d:0a:63:3c:43:64:cd:42:25:24:df:c5:f2:bc:61:
         27:3b:28:46:87:dd:23:6d:04:02:86:83:aa:52:91:2c:10:9c:
         bd:42:bd:ba:e0:da:26:22:c8:4f:c3:47:66:0d:0f:b9:3c:2c:
         e8:c4:68:a8:50:71:63:87:22:d2:cf:be:b5:52:77:4d:71:98:
         1f:91:fa:4b:17:72:90:75:5a:79:e8:1a:5b:08:24:8d:ca:2a:
         e8:7d:c9:16:15:ec:8a:8e:a9:38:22:56:5e:a9:f9:f1:e5:30:
         29:ba:ae:3d:4a:30:c9:bf:28:e7:1d:d9:35:8f:ae:cf:14:a7:
         9d:9b:d1:16:4a:27:16:a6:6e:bf:93:be:4b:b4:ed:df:91:07:
         f7:22:63:47:f3:e4:e5:fc:2a:3e:24:c8:98:13:bf:fe:87:5d:
         b1:1a:db:a9:94:c0:3e:8a:a5:3a:25:2d:20:8f:ac:96:75:5f:
         cf:be:7f:7c:fa:c9:80:88:54:43:d1:e6:f6:20:f6:61:b0:d3:
         c0:d2:c5:7d:37:4a:58:28:71:c3:dd:5a:49:4a:73:46:22:99:
         08:ce:6d:30:1e:13:ed:d9:f0:0f:33:a4:5b:c4:36:aa:96:b4:
         7c:4e:e6:7b
-----BEGIN CERTIFICATE-----
MIIFtDCCBJygAwIBAgIUFGH4PtFuoG394g6d+9lHQHzSrYkwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmYyZGIxNDRhZTFjOGFlNWI4NjE5YTVlMDliNGQ5YjU3
OTRkMzdlOTA2MTIwODcyMjAwHhcNMjUwNzI5MDcxOTQ4WhcNMjYwNzI4MDcyNDQ4
WjAzMTEwLwYDVQQDEyg5OEM0NTMwQTRERDI3QTVCQTREQ0VFNThDMjdEMDA5N0E1
MDA5OTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt10/MXvX8JJ8
LCnMbQ/VTO8Sok8i57JN7JNY0AflBJsxwSLKzEkS59jwWHxh3qQm9NwpRmQWMwu9
BIIqEQGJJf1ADmDyfFvzjfgdW3Z3UcnXlI9idzo3XEUfCxzMd6sAq9KxcTgTl1md
LsdLOionanapfWFBx+/kStmOg/7KHpnnpWPFqt3d+tJRtX3KgoWYi6tZrvw/sYeT
OQgYK4QOTeE6K2fFurqKxZX7TTfRhkZv14NFyASmRM4+rUm96A2YmqYOs+SFcuky
XYcseM6OKkR886zspMzt15FxoNQkKPz7cR2/9c+K1EK2F145vbG9m0k3I0gxrY6W
36HjA/Yq6wIDAQABo4ICtDCCArAwHQYDVR0OBBYEFJjEUwpN0npbpNzuWMJ9AJel
AJlzMB8GA1UdIwQYMBaAFKKNJzMJyfx2VUJJVF0p04gGgOp/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2Y2Q3YTg4MzE0MmUwLzEv
QTI4RDI3MzMwOUM5RkM3NjU1NDI0OTU0NUQyOUQzODgwNjgwRUE3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2Q5NmRmMmM0LTJiYmEtNDBlMi04NDFkLThjN2MwYThkZWUxMy82ZjJk
YjE0NGFlMWM4YWU1Yjg2MTlhNWUwOWI0ZDliNTc5NGQzN2U5MDYxMjA4NzIyMC5j
ZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjg2OTQxZDVjMDE4NmNk
N2E4ODMxNDJlMC8xLzMyMzAzNDJlMzYzOTJlMzIzMTM3MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzMzOTM5MzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUF
Bw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEXZMA0GCSqGSIb3DQEB
CwUAA4IBAQBaRMb1ea7IAkcNfzEk8N5UdfbQlRItCmM8Q2TNQiUk38XyvGEnOyhG
h90jbQQChoOqUpEsEJy9Qr264NomIshPw0dmDQ+5PCzoxGioUHFjhyLSz761UndN
cZgfkfpLF3KQdVp56BpbCCSNyirofckWFeyKjqk4IlZeqfnx5TApuq49SjDJvyjn
Hdk1j67PFKedm9EWSicWpm6/k75LtO3fkQf3ImNH8+Tl/Co+JMiYE7/+h12xGtup
lMA+iqU6JS0gj6yWdV/Pvn98+smAiFRD0eb2IPZhsNPA0sV9N0pYKHHD3VpJSnNG
IpkIzm0wHhPt2fAPM6RbxDaqlrR8TuZ7
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:53:22 2025 by rpki-client