Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa
File:                     3230392e38372e3136372e302f32342d3234203d3e20383334.roa (raw, json)
Hash identifier:          OjfrPnilCG04lR+MKH+V/aAH6LRDM1HxeCjQUx3E8Ag=
Subject key identifier:   3E:CB:18:1F:88:64:52:24:F6:67:CE:75:05:15:1C:9B:93:3A:BD:C5
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       61B9FF3F127DBDF3954D6AA4A2DCB882E5E7DFE8
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa
Signing time:             Tue 09 Sep 2025 04:54:13 +0000
ROA not before:           Tue 09 Sep 2025 04:49:13 +0000
ROA not after:            Tue 08 Sep 2026 04:54:13 +0000
asID:                     834
IP address blocks:        209.87.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 17 Sep 2025 10:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b9:ff:3f:12:7d:bd:f3:95:4d:6a:a4:a2:dc:b8:82:e5:e7:df:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Sep  9 04:49:13 2025 GMT
            Not After : Sep  8 04:54:13 2026 GMT
        Subject: CN=3ECB181F88645224F667CE7505151C9B933ABDC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:89:71:30:a6:95:ad:d4:ae:c0:80:1a:b6:2f:
                    1d:2d:e5:c0:44:e8:01:e3:69:a9:54:88:49:22:bf:
                    94:dc:e2:de:32:7b:f8:ed:6a:50:c2:7a:24:60:2c:
                    e6:4f:75:6a:92:a8:41:cb:10:03:36:99:3b:db:d3:
                    6e:d2:1e:41:6d:0c:8a:b6:98:b8:dd:05:17:f3:79:
                    aa:66:9b:e9:16:ae:42:70:a9:60:c3:1c:0a:c9:61:
                    c4:7b:1a:a6:9d:bd:1f:32:55:78:2a:5b:fe:4f:1d:
                    50:a3:d3:b6:7d:08:ce:c0:13:b8:9e:5f:a3:96:a8:
                    68:8d:bc:d1:97:5e:2c:5b:12:69:3f:8a:1e:d3:24:
                    d9:a2:73:9c:a0:b7:0b:92:8a:59:aa:70:c8:8e:5c:
                    7c:5e:1b:b2:93:25:7b:f2:13:fb:e3:ef:e9:25:f7:
                    65:1a:ae:32:a8:20:84:fe:64:14:94:96:62:ce:54:
                    d7:2a:b8:80:25:73:be:48:e3:10:72:a9:b6:37:d3:
                    3c:58:4e:56:4a:49:47:36:3c:83:02:9a:4d:5d:a9:
                    2e:7b:ff:cd:da:51:ea:c2:b4:28:12:49:45:00:d5:
                    4c:ee:36:a7:dd:ba:8b:8e:b2:ae:89:bf:11:5c:56:
                    7f:85:06:f9:c1:55:fe:cd:21:a2:2a:32:56:39:08:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:CB:18:1F:88:64:52:24:F6:67:CE:75:05:15:1C:9B:93:3A:BD:C5
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e20383334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:f5:88:e4:d2:3b:aa:76:44:64:17:52:3d:12:43:51:f0:dc:
         b5:48:c3:4f:8c:57:ef:47:c6:fc:8e:13:e3:4d:cf:59:23:86:
         72:b7:e9:6f:76:6b:62:52:93:2a:cd:c2:5f:65:52:b7:8f:33:
         f6:e8:32:f5:81:ab:3d:e3:f0:fe:b5:a8:b3:c9:d9:34:ce:9a:
         33:51:b3:8b:61:ce:10:75:c5:6f:30:b5:c0:e7:62:27:e3:4d:
         3c:9f:8a:6e:40:2f:94:d5:e6:90:e5:1e:e2:12:21:0a:e8:e3:
         c6:3e:cb:98:e2:67:a9:58:61:c4:00:25:6c:11:14:13:c4:7c:
         19:0f:4a:48:54:8f:57:0d:f4:af:8c:3e:f3:ad:85:30:b2:45:
         9e:f0:a2:32:e4:e8:30:1d:c1:60:1e:8a:ab:e1:e6:16:51:99:
         a7:75:bd:01:d8:c0:66:91:14:f8:4c:4a:2f:0a:35:88:3b:74:
         50:4c:1b:94:a5:31:e2:e0:3c:3a:3f:51:68:a8:59:cb:25:56:
         79:f2:ee:48:02:4e:36:9e:9f:2c:f7:2e:a9:0d:97:74:9a:6a:
         80:02:2b:83:25:93:f9:15:d9:62:3d:96:e6:11:9f:79:54:ff:
         01:bc:da:35:ef:c1:e5:63:58:45:48:a1:4d:47:92:87:18:93:
         38:44:b4:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 16 17:42:48 2025 by rpki-client