Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa
File:                     3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa (raw, json)
Hash identifier:          FJ8YsjKZrw7Cwen+zxTYtxSJb1yWL5qJoFTG5SAIpc8=
Subject key identifier:   4E:95:8C:C7:26:34:20:82:FC:C9:30:E5:7F:29:D8:93:A1:DA:78:0B
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       57137E7A97BC32775DBF24A1AD39312A045D6BCE
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa
Signing time:             Thu 08 May 2025 16:28:32 +0000
ROA not before:           Thu 08 May 2025 16:23:32 +0000
ROA not after:            Thu 07 May 2026 16:28:32 +0000
asID:                     205220
IP address blocks:        209.87.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:13:7e:7a:97:bc:32:77:5d:bf:24:a1:ad:39:31:2a:04:5d:6b:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: May  8 16:23:32 2025 GMT
            Not After : May  7 16:28:32 2026 GMT
        Subject: CN=4E958CC726342082FCC930E57F29D893A1DA780B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:48:6e:1c:82:ed:5c:8f:2e:2f:21:27:76:c4:
                    07:f0:e6:f8:97:ec:1d:0e:05:39:93:7f:fd:af:ca:
                    26:bc:bf:d4:9e:99:04:2a:f7:d6:24:75:4b:54:21:
                    88:32:e1:4a:ae:82:1f:0d:89:ca:59:15:fc:4f:2e:
                    3a:7e:a3:ec:a3:f0:9b:a6:bc:00:5c:2e:66:a6:68:
                    6e:48:ae:b2:5f:20:dd:bb:d2:7f:ba:22:58:b7:47:
                    e8:7b:86:92:b2:4c:1a:cc:74:02:33:ca:02:fd:c5:
                    78:88:33:8b:b2:64:b3:4c:ad:08:3e:67:b0:06:6b:
                    9c:c7:d2:2a:78:a7:a2:3a:ee:2a:7c:e7:d5:04:79:
                    74:27:48:a5:16:f0:c1:ca:26:e9:75:21:c4:f4:76:
                    70:86:fc:a2:71:90:24:01:ff:d8:e5:34:84:69:6f:
                    db:22:59:fe:7a:d4:06:95:73:7a:4a:4b:96:4f:00:
                    a8:56:57:62:8b:b4:6a:bd:14:81:ea:9f:c4:be:cb:
                    cf:bc:21:f2:51:c0:a4:03:0d:37:b8:92:35:0b:95:
                    cd:9a:96:08:2f:4b:85:21:5d:0f:ae:ad:4c:66:c5:
                    e4:2f:d6:f6:fb:23:69:11:0c:5c:6a:cf:b1:09:65:
                    bb:11:87:25:06:07:1c:2a:09:8f:ab:03:af:d5:d4:
                    29:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:95:8C:C7:26:34:20:82:FC:C9:30:E5:7F:29:D8:93:A1:DA:78:0B
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136382e302f32342d3234203d3e20323035323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:af:1d:1e:27:20:27:29:9e:9f:b0:34:d4:2a:20:44:c0:f3:
         6f:27:ef:4f:43:fa:7f:0e:e0:16:78:1e:e4:6c:b9:df:9d:de:
         04:06:6c:a2:cd:fb:73:bb:93:9c:32:84:51:07:88:05:e1:60:
         e4:8c:98:ee:d9:89:37:22:b5:82:a7:7b:47:17:13:39:44:7a:
         a1:c3:48:db:23:cc:f9:a3:d3:c3:56:79:35:da:dc:61:07:8c:
         ef:da:a7:5a:18:76:bc:d7:a7:63:4f:2d:5b:b8:9d:ff:3c:ca:
         71:7b:6b:38:37:7f:28:b1:d1:41:02:b0:3b:80:9d:b1:f3:87:
         75:3a:5a:0f:0b:a7:7c:34:f1:25:fe:c0:4f:ec:f8:4b:28:7e:
         3d:9c:28:20:6e:70:64:5b:43:21:80:45:5b:22:7f:f1:5a:23:
         8c:a6:d0:46:39:65:b1:74:dd:03:82:0e:4d:d6:23:e8:ea:49:
         c1:a7:f8:82:8f:89:f2:c4:62:07:1c:f4:04:c7:6f:6c:dd:51:
         20:84:c3:d9:a0:f3:50:6e:8a:24:f8:e9:e9:e6:29:e8:42:9c:
         46:d9:d2:e1:20:65:e2:d6:3d:e1:2c:d8:3e:e5:b4:c1:bd:32:
         14:34:a8:2d:b8:70:32:06:fe:77:1e:62:c3:e4:7e:9f:54:de:
         c8:f1:b7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:20:12 2025 by rpki-client