Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa
File:                     3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa (raw, json)
Hash identifier:          5zhn/NsDbeOeGuGZPoeaQvCTxptxrQ/vFBoAV0QyuPU=
Subject key identifier:   E0:9D:82:E1:18:BD:8A:3D:24:0A:EC:14:7C:CB:8A:00:A2:B6:48:A7
Certificate issuer:       /CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
Certificate serial:       647637853AD4B8517907FF72EE6581A924288D5D
Authority key identifier: 1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa
Signing time:             Mon 14 Apr 2025 15:28:29 +0000
ROA not before:           Mon 14 Apr 2025 15:23:29 +0000
ROA not after:            Mon 13 Apr 2026 15:28:29 +0000
asID:                     7922
IP address blocks:        216.122.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl
                          rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/f0b1b436-193c-4209-a695-f168f9f2b3b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:57:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:76:37:85:3a:d4:b8:51:79:07:ff:72:ee:65:81:a9:24:28:8d:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c
        Validity
            Not Before: Apr 14 15:23:29 2025 GMT
            Not After : Apr 13 15:28:29 2026 GMT
        Subject: CN=E09D82E118BD8A3D240AEC147CCB8A00A2B648A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d7:56:4e:69:69:40:1e:3d:9a:89:9f:51:82:
                    a4:8f:b4:3f:9f:5a:42:28:99:c9:18:be:8c:2d:3d:
                    55:12:6b:fb:34:08:43:f2:ba:77:8e:0f:8e:80:1c:
                    a2:57:42:4d:fe:f4:e9:69:58:ff:88:17:ed:b8:70:
                    6f:77:9f:87:3e:cb:05:7c:e4:48:75:2f:ad:2a:5b:
                    14:c0:e8:04:95:2e:c4:e6:e2:9a:35:0b:74:0a:71:
                    d8:77:6b:d9:00:94:d8:21:72:ba:c5:fc:33:62:4a:
                    6f:59:a0:eb:27:cd:61:1f:ff:bf:6b:92:30:7c:40:
                    b4:29:ad:1b:11:81:08:31:aa:e7:bf:66:85:1f:5f:
                    ba:01:06:b0:9a:84:f7:92:62:45:d9:1d:4e:3a:72:
                    19:19:be:02:bf:d6:c7:c9:c8:b4:1f:34:da:d6:5e:
                    90:98:c0:a9:36:f1:35:84:70:4a:d9:ac:af:c3:bd:
                    a0:53:d6:b3:52:fd:ac:09:44:16:87:01:40:f9:38:
                    a8:2a:af:6d:12:c7:c2:ed:a0:14:b3:6a:fa:40:4c:
                    a8:0f:e1:8b:21:df:af:b2:9e:1e:0f:d6:2c:c0:87:
                    c4:b5:10:99:7a:7e:c6:3e:d0:4f:b1:71:fb:ad:d5:
                    e6:8d:8f:1e:37:17:6c:a6:57:83:04:e2:c4:2e:a6:
                    fb:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9D:82:E1:18:BD:8A:3D:24:0A:EC:14:7C:CB:8A:00:A2:B6:48:A7
            X509v3 Authority Key Identifier:
                keyid:1D:1D:EB:CD:9F:2E:82:12:22:15:3A:C9:EF:50:37:6A:31:59:CB:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/1D1DEBCD9F2E821222153AC9EF50376A3159CB90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f0b1b436-193c-4209-a695-f168f9f2b3b0/718626eab73596f472dfb020a9c0f3b71ad9dd4fef9947e91c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade80f1a80a0181f0f17541667f/1/3231362e3132322e3131362e302f32322d3234203d3e2037393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b8:7d:55:55:b8:30:1e:b1:f4:9b:a3:65:19:a2:e0:b2:45:75:
         f6:59:ff:da:33:c4:0c:08:b3:82:f6:48:e2:97:3e:af:08:9d:
         cb:ee:72:17:54:f6:ec:4c:b7:80:df:e9:42:fa:6f:9d:f4:40:
         2c:91:2e:67:f4:19:83:e7:33:09:0d:18:f7:d1:be:88:20:2c:
         a0:f4:a4:df:8d:f4:91:23:4d:af:95:6d:89:21:89:03:a3:23:
         d4:cb:74:af:45:95:26:b7:5b:5e:4c:e5:a6:1b:29:45:cd:10:
         5b:01:10:83:78:d9:67:e0:ab:48:b3:92:96:6e:76:cb:e4:38:
         47:41:a1:87:29:ab:79:77:80:ef:76:96:c5:24:cb:59:eb:2b:
         d5:70:ed:34:7b:c2:ec:18:9f:cb:81:5f:cb:58:95:1f:ec:be:
         2d:71:88:42:e8:0f:51:16:b5:9c:51:8a:64:aa:d9:ff:2b:fe:
         1f:91:21:59:63:46:d2:97:41:d6:41:9b:04:0f:1c:28:b1:20:
         01:4f:b5:60:f4:e5:c9:bb:4c:0e:a7:59:99:a3:d5:44:f9:46:
         e4:1b:d9:0f:bf:91:a2:88:c8:f5:35:ac:cf:59:2c:8d:b8:9c:
         a7:04:2b:91:0b:db:92:ce:40:c3:b5:64:cf:58:46:14:0e:69:
         3d:d6:d4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:07:51 2025 by rpki-client