Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32332d3234203d3e20323638353136.roa
File:                     3230392e38372e3136302e302f32332d3234203d3e20323638353136.roa (raw, json)
Hash identifier:          c6Qt3i0Yt8NmWd+eHjz9aiSKFqwA/7ak1EMTPspqrIw=
Subject key identifier:   95:FC:6D:F2:FF:4A:0C:5E:F7:B1:CB:3A:10:2E:3F:D3:0E:C2:32:79
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       49813D9088DD32ACF7F9A73DF655C15C8F9F9288
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32332d3234203d3e20323638353136.roa
Signing time:             Mon 16 Jun 2025 13:49:28 +0000
ROA not before:           Mon 16 Jun 2025 13:44:28 +0000
ROA not after:            Mon 15 Jun 2026 13:49:28 +0000
asID:                     268516
IP address blocks:        209.87.160.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:36:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:81:3d:90:88:dd:32:ac:f7:f9:a7:3d:f6:55:c1:5c:8f:9f:92:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jun 16 13:44:28 2025 GMT
            Not After : Jun 15 13:49:28 2026 GMT
        Subject: CN=95FC6DF2FF4A0C5EF7B1CB3A102E3FD30EC23279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c8:49:21:0e:79:50:41:c0:41:6a:76:0f:8e:
                    aa:c9:82:9f:4e:82:8f:4e:94:c1:93:17:2f:48:4e:
                    c4:fd:fc:9b:08:b4:89:0b:27:84:26:0b:49:10:c9:
                    26:a9:21:ee:9c:3d:f9:a1:a8:53:aa:24:a0:e1:ef:
                    66:55:63:60:7e:24:a4:bf:cb:87:5f:01:00:f0:17:
                    20:1a:c7:68:71:0f:42:c0:ab:8a:21:53:91:5b:4a:
                    a2:3a:1d:6d:7e:47:19:a7:8f:4e:72:f5:3d:ef:a5:
                    f0:a5:04:a1:12:dc:da:3f:d9:68:fb:38:a4:dc:41:
                    35:53:7c:17:11:03:b0:78:54:c2:e9:52:94:47:5e:
                    9c:7d:2e:ab:67:9a:e3:fd:f9:8d:b5:32:1e:0d:3a:
                    94:79:55:ee:30:13:01:fe:34:d6:c6:ff:72:86:cc:
                    15:53:31:79:d4:9f:75:41:e1:bb:45:26:aa:b9:df:
                    87:d9:d1:ef:b1:25:b8:c5:ff:1a:e4:9d:e1:78:72:
                    ab:4f:31:5c:2a:cf:fc:d1:ea:c3:bd:ae:b4:4c:5b:
                    b2:83:2b:34:48:09:ec:1d:a8:dc:66:99:4f:76:35:
                    00:81:cb:84:0a:1a:6a:d9:3e:f2:36:75:96:13:13:
                    a8:3e:e8:89:79:53:c9:23:8f:e2:66:81:95:3f:ef:
                    d7:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:FC:6D:F2:FF:4A:0C:5E:F7:B1:CB:3A:10:2E:3F:D3:0E:C2:32:79
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136302e302f32332d3234203d3e20323638353136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.160.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:ca:0e:7d:c2:2b:07:88:2c:eb:4e:f6:f6:76:4e:89:4f:6d:
         3c:78:34:7f:03:c4:4f:99:4e:a8:ef:02:c5:87:1a:6b:39:db:
         5f:d8:5e:97:a0:ba:74:4d:0a:8d:cf:a4:da:42:aa:72:26:c1:
         81:80:80:8b:c9:f8:ee:2c:47:b8:6b:4d:68:2d:6e:d9:cf:f3:
         1c:21:3a:40:bd:08:88:39:f0:b4:76:1f:f9:2f:4e:ee:65:7c:
         82:8e:55:07:54:fb:64:d7:d2:a4:96:60:6c:9a:dc:ab:1e:0d:
         d3:72:c5:05:45:e2:ac:e4:c9:6d:9c:ef:cc:8b:4a:45:ab:28:
         a1:7e:1d:29:26:15:91:5b:03:f3:1f:65:13:84:fe:71:aa:48:
         95:fd:18:c1:e5:72:cb:1b:97:63:3e:8e:33:58:4d:ae:47:9e:
         be:08:85:35:3e:71:73:67:03:30:e1:b7:29:47:73:4b:ce:78:
         e6:95:97:a9:67:f4:d8:2a:ff:ab:75:43:27:07:12:7a:5f:d7:
         b3:7b:13:d2:09:78:e7:a4:1c:94:ad:ea:37:1b:79:7a:1d:98:
         95:d8:38:9a:48:65:6b:67:73:3e:5e:06:39:4b:20:ab:bc:e1:
         a0:35:0a:61:25:73:b7:a0:72:f1:c2:a0:0c:f1:3f:73:72:53:
         16:74:65:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 08:20:27 2025 by rpki-client