Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136352e302f32342d3234203d3e203136353039.roa
File:                     3230392e38372e3136352e302f32342d3234203d3e203136353039.roa (raw, json)
Hash identifier:          adkmIivmvqP7qbQ70SNu3590hWwLMiX85iYldh+dDVw=
Subject key identifier:   ED:C8:C5:8A:C3:8C:0B:5E:8F:C5:8D:64:DE:F0:E3:FA:A3:30:17:DF
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       70875A16DEDD66CA3FB37434BB9FEDBA2CDC29B5
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136352e302f32342d3234203d3e203136353039.roa
Signing time:             Sun 25 May 2025 06:26:05 +0000
ROA not before:           Sun 25 May 2025 06:21:05 +0000
ROA not after:            Sun 24 May 2026 06:26:05 +0000
asID:                     16509
IP address blocks:        209.87.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 04:28:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:87:5a:16:de:dd:66:ca:3f:b3:74:34:bb:9f:ed:ba:2c:dc:29:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: May 25 06:21:05 2025 GMT
            Not After : May 24 06:26:05 2026 GMT
        Subject: CN=EDC8C58AC38C0B5E8FC58D64DEF0E3FAA33017DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:55:69:c9:fc:53:30:74:de:a4:1f:0b:e5:d5:
                    6b:ce:87:2f:4c:66:f9:a8:d5:0f:88:38:a2:00:e9:
                    03:e4:2f:80:b1:b8:a1:ef:1f:ba:49:9a:44:1d:4f:
                    6d:ba:2c:83:ed:04:f6:f3:f8:2b:7f:30:1c:61:ff:
                    cb:77:c4:4c:b0:08:7f:cc:b9:8d:3c:56:b6:f7:34:
                    76:1c:84:25:ac:50:eb:99:5d:21:f0:59:85:d9:61:
                    87:cb:ee:79:95:81:b5:01:9b:44:45:63:bf:c2:66:
                    d7:66:53:ed:d7:89:0d:af:44:fa:bf:4b:55:ff:90:
                    4c:0d:13:98:41:74:a3:3a:7a:9e:14:61:69:12:bd:
                    1a:49:71:ea:3b:d2:aa:98:b4:8b:37:d8:e3:e6:e3:
                    c4:ef:dc:74:23:a0:5c:5f:fc:02:b7:2c:12:3a:7c:
                    6e:c1:c3:f5:a1:65:eb:62:b6:b1:82:0a:36:9e:08:
                    bc:29:d1:2e:1c:58:b6:ec:75:39:43:59:06:56:a6:
                    d3:d1:c9:89:55:70:d9:82:43:b6:e2:3b:bb:e1:95:
                    12:6b:39:8c:2b:c3:bf:c5:8e:55:22:8e:71:14:87:
                    e8:8d:9f:bc:e5:19:12:c8:4a:90:5e:c8:72:e7:21:
                    1d:f1:d8:6f:d0:25:c2:af:8d:66:0c:b6:88:28:d2:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:C8:C5:8A:C3:8C:0B:5E:8F:C5:8D:64:DE:F0:E3:FA:A3:30:17:DF
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136352e302f32342d3234203d3e203136353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:9f:1d:7c:26:b5:53:45:66:0b:1e:21:5c:e1:65:aa:d7:cc:
         85:54:51:2c:3b:d4:ad:94:47:61:2d:63:f0:8e:58:d6:9a:e4:
         d5:55:8c:5c:c2:08:9b:8d:80:5e:86:c1:6d:f1:15:ec:4b:19:
         06:0a:e9:8a:f8:07:67:f8:73:d6:a6:56:aa:bd:f5:5b:29:26:
         e4:e8:8c:e7:6e:55:2f:2a:46:6c:63:d0:2d:bc:57:c6:f3:42:
         ae:78:7c:5e:e4:63:25:9f:52:2d:07:8e:a8:b7:60:74:f7:42:
         5c:5b:2e:f7:3f:a0:0d:5d:50:4f:92:23:24:77:a3:0a:29:d9:
         72:01:e8:bc:5a:da:d2:14:ab:29:ec:15:8f:e7:7e:12:a2:74:
         ee:19:2a:00:e1:38:7a:83:29:a1:80:cd:33:75:ee:c3:20:ad:
         6d:8a:42:5e:ed:53:36:ce:e0:7d:26:60:5d:3b:da:32:ef:3b:
         7b:0d:0c:08:b1:e9:61:bd:86:5f:38:59:ae:82:60:40:dc:98:
         00:7d:a8:93:66:9f:67:7b:34:0a:3d:44:53:39:f1:3e:ae:ba:
         95:ff:15:5d:94:77:1b:b7:92:b3:ab:04:ab:9a:f0:ca:32:e4:
         e7:fd:9d:e6:16:92:e0:7d:d5:64:05:e9:c6:a5:93:66:85:49:
         b6:6c:7b:6e
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIUcIdaFt7dZso/s3Q0u5/tuizcKbUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyMTM3YmNhNWEwZmY4MzdiMzgwOGJhNDkzYmQxNGFiNzhj
YzRmZDYyOTY2MjkyNTMwNTEwHhcNMjUwNTI1MDYyMTA1WhcNMjYwNTI0MDYyNjA1
WjAzMTEwLwYDVQQDEyhFREM4QzU4QUMzOEMwQjVFOEZDNThENjRERUYwRTNGQUEz
MzAxN0RGMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1VpyfxTMHTe
pB8L5dVrzocvTGb5qNUPiDiiAOkD5C+Asbih7x+6SZpEHU9tuiyD7QT28/grfzAc
Yf/Ld8RMsAh/zLmNPFa29zR2HIQlrFDrmV0h8FmF2WGHy+55lYG1AZtERWO/wmbX
ZlPt14kNr0T6v0tV/5BMDROYQXSjOnqeFGFpEr0aSXHqO9KqmLSLN9jj5uPE79x0
I6BcX/wCtywSOnxuwcP1oWXrYraxggo2ngi8KdEuHFi27HU5Q1kGVqbT0cmJVXDZ
gkO24ju74ZUSazmMK8O/xY5VIo5xFIfojZ+85RkSyEqQXshy5yEd8dhv0CXCr41m
DLaIKNLPOwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFO3IxYrDjAtej8WNZN7w4/qj
MBffMB8GA1UdIwQYMBaAFE9EnwzLN47G0/zXaqfu1ZrxFZO7MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmOGU1MjM4MWQwMThlODU5Mzg4NGQyYTMwLzAv
NEY0NDlGMENDQjM3OEVDNkQzRkNENzZBQTdFRUQ1OUFGMTE1OTNCQi5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNGFiN2FlNGQtYmQ3Yi00YjMzLTlhODgtNWIyMmQy
YTgzMzdkLzM1MjEzZGI2LTcwM2EtNGFkOC05NDUwLTBhMGUxZDM3MWNmZi8xMzdi
Y2E1YTBmZjgzN2IzODA4YmE0OTNiZDE0YWI3OGNjNGZkNjI5NjYyOTI1MzA1MS5j
ZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5jOi8vcnBr
aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhlNTIzODFkMDE4ZTg1
OTM4ODRkMmEzMC8wLzMyMzAzOTJlMzgzNzJlMzEzNjM1MmUzMDJmMzIzNDJkMzIz
NDIwM2QzZTIwMzEzNjM1MzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANFXpTANBgkqhkiG9w0BAQsF
AAOCAQEAZJ8dfCa1U0VmCx4hXOFlqtfMhVRRLDvUrZRHYS1j8I5Y1prk1VWMXMII
m42AXobBbfEV7EsZBgrpivgHZ/hz1qZWqr31Wykm5OiM525VLypGbGPQLbxXxvNC
rnh8XuRjJZ9SLQeOqLdgdPdCXFsu9z+gDV1QT5IjJHejCinZcgHovFra0hSrKewV
j+d+EqJ07hkqAOE4eoMpoYDNM3XuwyCtbYpCXu1TNs7gfSZgXTvaMu87ew0MCLHp
Yb2GXzhZroJgQNyYAH2ok2afZ3s0Cj1EUznxPq66lf8VXZR3G7eSs6sEq5rwyjLk
5/2d5haS4H3VZAXpxqWTZoVJtmx7bg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:06:32 2025 by rpki-client