Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e2039333034.roa
File:                     3230392e38372e3136372e302f32342d3234203d3e2039333034.roa (raw, json)
Hash identifier:          T+SH4u1jy1QT7x/nf03p+2jVGnuyzMSh6ke0bnaqpbA=
Subject key identifier:   7B:DB:A0:40:67:00:DF:E1:29:A3:1D:D2:F2:F8:8D:50:37:BA:96:79
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       606BAD7D44C769E00D4E20C0A4FBAC888E7A429D
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e2039333034.roa
Signing time:             Sun 21 Sep 2025 15:15:32 +0000
ROA not before:           Sun 21 Sep 2025 15:10:32 +0000
ROA not after:            Sun 20 Sep 2026 15:15:32 +0000
asID:                     9304
IP address blocks:        209.87.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 20 Oct 2025 16:23:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6b:ad:7d:44:c7:69:e0:0d:4e:20:c0:a4:fb:ac:88:8e:7a:42:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Sep 21 15:10:32 2025 GMT
            Not After : Sep 20 15:15:32 2026 GMT
        Subject: CN=7BDBA0406700DFE129A31DD2F2F88D5037BA9679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:e9:89:cc:c2:35:09:1e:53:a6:78:8a:ca:
                    d9:d7:15:1c:03:59:53:ef:13:be:bf:b5:64:de:df:
                    d1:51:4d:1f:66:c7:5c:4e:61:48:2a:72:47:d5:f6:
                    81:bf:97:fe:aa:49:d1:fd:c5:75:55:3f:ce:42:78:
                    d1:5a:a8:b3:d5:ed:22:8d:16:e7:fb:bc:e6:5c:69:
                    99:74:5c:f8:f5:59:18:35:1f:33:80:a2:b0:e1:1f:
                    a3:b0:f2:d2:f1:3d:0b:cd:77:55:ac:4e:77:52:38:
                    00:42:29:11:16:80:93:bf:c6:58:e9:0f:73:18:8c:
                    3e:1d:7f:21:74:6f:f7:fa:d5:25:70:d3:93:88:6a:
                    e3:c5:a3:bf:df:5a:21:43:ca:02:30:21:26:9d:82:
                    31:02:f6:a8:5a:7a:eb:39:46:e9:95:86:e2:e9:82:
                    9f:2d:39:7d:3b:85:8f:69:f7:37:61:09:4d:20:69:
                    b4:2e:3d:02:c6:43:38:1a:4c:68:9b:37:b8:28:2e:
                    a4:5b:cd:c0:a8:b7:0c:11:f7:b9:10:58:1f:f2:19:
                    41:dd:ea:94:26:50:e8:07:77:8b:f3:c7:db:3e:f7:
                    0c:bd:fb:69:f5:51:e0:ed:5f:6f:19:73:1b:b9:9a:
                    0d:c5:cd:3e:6c:6b:c5:93:89:68:c6:dc:d1:0c:58:
                    a4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:A0:40:67:00:DF:E1:29:A3:1D:D2:F2:F8:8D:50:37:BA:96:79
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136372e302f32342d3234203d3e2039333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:fa:3c:92:9d:ed:82:3c:db:7d:37:5e:a9:ac:aa:0b:15:bb:
         fe:92:de:77:2b:5e:3f:a0:97:d9:f9:a8:34:31:e0:25:2a:ef:
         79:51:28:98:f8:f2:fe:05:16:67:9b:fc:81:d9:72:67:8f:ec:
         da:24:5b:b6:bc:d9:4a:ce:d6:02:d6:77:b2:c9:7d:27:8b:56:
         5d:e9:c2:a8:8e:7d:c3:ae:31:45:6c:6a:54:d5:2e:87:20:9a:
         88:d4:9c:03:c0:02:0c:8d:f0:59:22:7f:66:85:a5:15:aa:2c:
         c2:83:66:dc:09:f2:d1:56:93:57:ed:ba:cb:65:08:95:83:23:
         16:8d:a9:63:f6:5a:47:03:83:4a:56:33:e3:d8:0e:b2:d2:35:
         94:ef:c1:b9:5b:58:f7:95:f3:6b:e3:24:09:73:d9:22:e6:29:
         e6:35:e9:c0:d8:a7:88:4f:66:32:ad:c9:ab:d9:d4:39:92:1c:
         e6:c4:dd:5d:95:28:34:2c:60:cf:e5:9a:2a:67:ba:99:5d:d1:
         98:de:46:fb:78:1a:b9:af:a7:78:47:24:d7:7b:b0:11:47:85:
         99:cc:35:4e:07:17:fc:df:83:86:0c:05:71:c6:e8:1f:0c:14:
         4e:8a:1e:a3:78:f0:13:27:6d:d0:89:bf:fb:85:b5:16:91:a1:
         ba:9a:a1:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:55:08 2025 by rpki-client