Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203632323430.roa
File:                     3230392e38372e3136392e302f32342d3234203d3e203632323430.roa (raw, json)
Hash identifier:          hwt7hEoaO4lwDQN/QUlyhl/RHEuOSVtWRAhLwmFBLJQ=
Subject key identifier:   8F:E4:67:A9:6F:85:52:D7:BC:58:AD:1F:6D:74:75:91:61:50:7B:4A
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       2C4E3AC24D02612E40C2B18E82A4AA8065F7BAD2
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203632323430.roa
Signing time:             Tue 10 Jun 2025 04:29:20 +0000
ROA not before:           Tue 10 Jun 2025 04:24:20 +0000
ROA not after:            Tue 09 Jun 2026 04:29:20 +0000
asID:                     62240
IP address blocks:        209.87.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:43:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:4e:3a:c2:4d:02:61:2e:40:c2:b1:8e:82:a4:aa:80:65:f7:ba:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jun 10 04:24:20 2025 GMT
            Not After : Jun  9 04:29:20 2026 GMT
        Subject: CN=8FE467A96F8552D7BC58AD1F6D74759161507B4A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:85:1c:f9:0a:09:ce:7c:17:28:95:1c:6a:75:
                    1d:a9:ae:b2:81:86:6b:6d:c9:f4:1d:a7:cc:e6:74:
                    7c:82:f0:ec:b9:a0:c2:c3:d9:be:99:dd:9a:bd:a9:
                    9b:f1:ef:a6:7d:56:69:89:c8:db:5f:5e:44:ec:ed:
                    f8:ff:0d:9a:c2:08:ce:c4:3e:8e:84:4e:c9:1d:e1:
                    15:a4:b0:44:52:0d:ea:89:73:23:d6:fd:e0:8b:9f:
                    14:96:3a:7d:d7:9d:25:8c:48:0a:3c:26:b5:fe:74:
                    77:2f:dd:ea:d7:d7:2f:47:f3:fb:e3:d5:b0:a7:09:
                    17:64:68:c7:6c:b9:12:7c:ca:45:d3:cd:f1:25:74:
                    71:1d:24:1b:ec:6a:b3:bc:18:ba:7d:57:5b:f0:68:
                    68:ce:d0:0f:7e:43:a4:0f:7e:42:32:95:e9:d0:f9:
                    82:36:57:34:35:bd:d0:c9:1d:dd:cb:91:70:bc:23:
                    c5:b5:13:16:3a:40:b5:61:27:bc:f1:e1:ed:08:52:
                    ab:4a:e2:40:8d:53:8a:ee:e1:a9:b9:23:e4:a0:3e:
                    93:fb:1e:2a:94:74:2a:25:b8:ca:cc:80:f4:a2:c7:
                    e0:80:5e:dc:31:37:25:51:3a:c2:b3:fd:54:43:b9:
                    b2:ea:62:a2:eb:d9:4f:81:dd:ac:f0:d5:24:a3:24:
                    b5:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E4:67:A9:6F:85:52:D7:BC:58:AD:1F:6D:74:75:91:61:50:7B:4A
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3136392e302f32342d3234203d3e203632323430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:48:15:94:5d:e4:b5:79:ab:74:bb:85:79:cd:59:ec:04:a0:
         25:2c:d8:d9:5b:63:59:1b:ab:23:62:79:7b:42:a3:75:a3:ca:
         9e:b7:f7:2d:23:43:05:f6:16:b5:66:4b:52:30:f1:30:e3:be:
         b3:69:ef:6d:ad:ba:ec:60:ff:f0:e6:65:d3:a2:fd:23:59:84:
         2b:10:0a:7a:dc:9f:7b:bf:e8:63:ca:64:62:22:2b:02:ef:67:
         45:ff:1b:d9:92:23:58:bc:b0:76:fa:99:c1:ae:93:6e:2e:bf:
         75:79:c9:de:65:4b:80:f1:03:c7:74:64:52:b6:ec:da:c0:79:
         14:c2:11:60:a9:78:1d:0e:4d:5c:8d:58:c5:7a:b9:e0:a7:1f:
         0c:ca:0d:cc:3f:ce:b6:c6:60:2d:aa:d8:de:7e:f0:bb:2c:d9:
         95:14:2d:ef:af:24:4e:a9:8f:33:39:27:7d:ac:4d:3e:65:c2:
         a7:d8:f8:1e:11:b7:58:93:53:f2:93:a9:af:1d:e9:e8:6d:3b:
         9e:6d:b2:5c:01:59:3b:9c:64:0c:3d:93:9b:58:c5:7d:8e:11:
         83:56:ea:2e:62:72:7d:3f:3a:45:0b:b7:ec:ff:68:fa:b0:5f:
         db:6b:d9:cd:18:08:30:62:56:05:3c:3f:66:d7:29:d7:95:c6:
         b4:41:1a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:53:56 2025 by rpki-client