Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa
File:                     3230392e38372e3136372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          DMLXvPfVsBenVQ/k+noEiUdyc6U8881ToXIEWGc1RSg=
Subject key identifier:   4D:EE:64:2C:EB:70:F6:EB:8D:CB:7E:4C:B6:61:EE:8D:CA:8A:1F:39
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       6E570404B8AC82C7F696A22A9F86B45BF9BD0635
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa
Signing time:             Wed 30 Jul 2025 13:14:57 +0000
ROA not before:           Wed 30 Jul 2025 13:09:57 +0000
ROA not after:            Wed 29 Jul 2026 13:14:57 +0000
asID:                     834
IP address blocks:        209.87.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 10:28:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:57:04:04:b8:ac:82:c7:f6:96:a2:2a:9f:86:b4:5b:f9:bd:06:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jul 30 13:09:57 2025 GMT
            Not After : Jul 29 13:14:57 2026 GMT
        Subject: CN=4DEE642CEB70F6EB8DCB7E4CB661EE8DCA8A1F39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3f:58:76:5d:43:94:7c:95:b1:b8:38:05:26:
                    f6:65:ab:cd:ec:de:fb:81:08:8e:08:40:83:60:aa:
                    07:9a:86:97:53:e9:79:ac:87:4d:b4:9f:1f:8f:0a:
                    ce:d7:d5:60:ad:b3:4f:a9:31:99:ca:08:fc:3b:c2:
                    bc:c9:27:e5:a4:c0:7e:72:3f:2a:e8:8b:35:5c:6b:
                    88:5d:8e:75:02:0a:61:84:1c:18:af:94:21:ea:9c:
                    37:51:13:8f:51:04:fd:41:b8:67:5e:d5:82:25:08:
                    87:2f:b9:ad:fc:fe:3e:bb:cb:9f:ec:3c:56:c2:8b:
                    23:6b:1d:e7:21:1c:3a:80:0b:dc:c3:74:1a:d8:30:
                    d0:00:58:84:01:6e:fc:93:17:8c:bc:b4:27:f9:d9:
                    8a:fc:a5:fe:40:b5:e5:47:cc:57:ff:00:bf:47:aa:
                    4f:a5:e3:a5:c7:cc:01:52:64:e4:1d:8d:ce:55:ba:
                    84:c2:07:97:f4:61:2d:94:67:e3:7f:e2:61:ec:e7:
                    1d:a4:78:5a:0f:4a:f0:51:0f:f5:15:4d:36:20:42:
                    b0:b1:e5:87:7b:40:5a:64:f9:ab:e0:97:91:b8:5c:
                    82:73:52:be:63:07:7c:e7:89:e0:7f:71:3c:ed:5e:
                    e2:d3:a9:ad:00:2c:84:e2:fc:61:b9:12:ea:bb:68:
                    e9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:EE:64:2C:EB:70:F6:EB:8D:CB:7E:4C:B6:61:EE:8D:CA:8A:1F:39
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         76:dd:da:9c:a6:04:3f:b3:1b:82:fc:9b:84:bd:e6:53:bd:f8:
         28:43:9b:77:74:c6:77:50:70:5c:4b:53:60:8e:99:f9:d8:c1:
         3b:7a:0f:27:0a:62:24:a6:ac:4e:52:12:ca:0b:b8:af:84:9e:
         d7:69:cf:16:ac:be:18:f0:9e:a3:32:be:d5:6f:27:61:a6:ec:
         45:be:97:5e:8c:39:00:5d:8d:ce:ed:ae:44:81:5b:4a:c5:46:
         bc:69:fd:91:e1:4f:5f:2d:b8:c0:dd:1f:dd:a0:d9:02:4e:b6:
         5a:ce:02:45:40:3c:b8:89:6d:df:91:af:21:ad:b1:a3:62:8b:
         eb:50:f2:d2:3d:bc:84:29:d1:4c:aa:ae:64:79:98:bb:d0:a4:
         3f:93:44:2c:5f:54:60:b5:6a:68:50:3b:2a:1e:17:e3:dc:2b:
         f8:59:47:b9:9e:9f:0a:fd:c1:64:3c:00:b7:98:ce:42:98:f7:
         24:41:9a:31:f3:04:45:9f:df:a8:be:f9:5b:03:3d:81:3e:77:
         27:6a:24:35:6e:be:9e:f1:89:25:e1:a6:59:6f:53:29:88:e6:
         dc:ca:11:60:1d:04:7f:d4:fa:e4:fb:4b:bf:99:e9:0a:ac:cf:
         b4:00:eb:5e:8f:b1:19:b3:f6:d8:69:8b:6d:b8:86:35:0c:21:
         1d:d0:e6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 1 18:09:42 2025 by rpki-client