Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136362e302f32342d3234203d3e20323133393930.roa
File:                     3230392e38372e3136362e302f32342d3234203d3e20323133393930.roa (raw, json)
Hash identifier:          +yljN/SmKJjS/OSuqgmss7yi/+6fobSAiog+FZmukxU=
Subject key identifier:   51:5C:D9:AC:11:F7:D6:A8:2B:52:23:35:78:A6:1E:E7:16:77:37:1E
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       61806D6185CDC91537B985B10872DEBE31EF5C76
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136362e302f32342d3234203d3e20323133393930.roa
Signing time:             Wed 30 Jul 2025 13:13:13 +0000
ROA not before:           Wed 30 Jul 2025 13:08:13 +0000
ROA not after:            Wed 29 Jul 2026 13:13:13 +0000
asID:                     213990
IP address blocks:        209.87.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 10:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:80:6d:61:85:cd:c9:15:37:b9:85:b1:08:72:de:be:31:ef:5c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jul 30 13:08:13 2025 GMT
            Not After : Jul 29 13:13:13 2026 GMT
        Subject: CN=515CD9AC11F7D6A82B52233578A61EE71677371E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6e:74:6d:34:f8:78:78:8b:76:16:73:0d:57:
                    ae:f2:56:2a:bb:8a:4c:ae:71:bf:5f:ce:22:65:ee:
                    f4:89:b8:0e:2e:39:71:b1:9b:c4:64:97:f1:9a:06:
                    68:77:be:14:3e:f8:ad:be:32:77:1d:b7:d1:ff:0a:
                    d9:64:5d:23:ba:16:16:19:7c:22:0f:a2:7e:61:bb:
                    51:2c:45:83:74:fe:ac:f8:60:99:2a:31:bc:25:58:
                    de:0c:64:ac:e8:55:c7:bd:80:a9:fa:cf:26:12:b7:
                    87:f6:df:81:43:c0:f6:99:1f:5e:5b:1d:1c:17:5c:
                    ed:f6:dd:62:09:f8:ef:3d:34:cc:2c:eb:c7:0a:04:
                    5e:dd:8d:a4:ab:3b:a0:a5:e9:e4:35:e7:20:8c:46:
                    c9:fa:a1:f3:f1:c2:a6:ed:fa:f7:51:01:47:c0:9e:
                    44:8d:9a:16:1b:b5:3c:5f:7a:7c:61:a1:10:96:88:
                    5a:c2:40:af:95:17:68:84:96:a8:e4:69:2a:31:5d:
                    eb:c4:07:07:2f:8c:43:7c:72:ca:e9:17:67:07:08:
                    9b:29:3e:e8:89:c1:0b:e7:ac:c7:70:f6:f6:c8:4a:
                    42:81:f1:1c:f1:de:ec:05:8c:08:7b:fb:44:9c:27:
                    64:f9:46:60:cb:98:01:f6:03:28:19:43:20:47:14:
                    75:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5C:D9:AC:11:F7:D6:A8:2B:52:23:35:78:A6:1E:E7:16:77:37:1E
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136362e302f32342d3234203d3e20323133393930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:3b:2b:f1:00:2d:c8:a5:d6:05:5b:50:40:4d:b8:fb:c8:ec:
         c0:c1:ce:d5:3f:09:c4:50:6a:dc:76:a4:ba:f8:df:1d:46:43:
         cc:12:41:11:00:f3:45:19:20:00:13:20:e0:b2:1a:fd:01:08:
         95:5b:3b:8d:27:2d:3b:dc:67:4c:de:b4:81:b2:96:70:f8:6e:
         b9:c0:11:b0:48:11:55:f5:df:23:87:c1:4c:38:31:49:12:1a:
         5c:6e:26:53:4b:b6:49:50:8e:3e:fb:c7:2c:1f:48:0a:22:08:
         3e:cd:29:dd:8d:c4:4a:dc:4f:b0:01:77:3f:9c:6e:c9:59:b4:
         bd:0a:23:34:f6:f5:24:52:eb:3c:0c:df:ed:90:77:19:54:48:
         65:95:3c:d6:38:36:cc:6e:3b:9f:3c:8d:4c:43:a9:63:a1:a5:
         51:cb:2b:e4:32:74:f1:37:b6:68:a1:72:ff:59:94:52:2a:e0:
         62:64:ef:33:91:e0:21:ed:dc:2c:6d:c6:56:66:fc:40:22:bc:
         8b:82:e1:4d:11:5c:d1:3e:3c:89:f6:8e:94:fe:ff:43:94:63:
         27:8c:dd:52:c7:10:64:b6:4e:c7:d8:39:74:0d:28:92:20:bb:
         78:f3:d1:7b:0f:3f:fb:44:a1:6b:59:4a:02:b4:1a:73:a2:1c:
         59:66:cf:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:37 2025 by rpki-client