Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e203239383032.roa
File:                     3230392e38372e3137302e302f32342d3234203d3e203239383032.roa (raw, json)
Hash identifier:          oxT1ZaPbJyIQWa2UjE9B+7J7hZgOlrbO6rYov3bMye0=
Subject key identifier:   56:16:C5:03:00:FA:D3:A9:23:93:51:90:3C:05:15:D8:35:5D:A9:0B
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       78005344AB60199CD514839E01E6D4AC39A63CF7
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e203239383032.roa
Signing time:             Thu 31 Jul 2025 17:29:44 +0000
ROA not before:           Thu 31 Jul 2025 17:24:44 +0000
ROA not after:            Thu 30 Jul 2026 17:29:44 +0000
asID:                     29802
IP address blocks:        209.87.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 12:55:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:00:53:44:ab:60:19:9c:d5:14:83:9e:01:e6:d4:ac:39:a6:3c:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jul 31 17:24:44 2025 GMT
            Not After : Jul 30 17:29:44 2026 GMT
        Subject: CN=5616C50300FAD3A9239351903C0515D8355DA90B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:47:02:d5:f9:ab:c0:ea:3e:82:c1:b9:64:eb:
                    16:57:4b:14:c2:a1:9d:f8:4a:36:24:93:b6:22:c2:
                    5e:88:67:ee:57:31:fc:e0:9d:5e:9a:f7:55:5b:69:
                    31:aa:76:3f:d2:24:48:45:12:06:06:e8:a5:9b:38:
                    9c:6b:ba:58:fe:b5:de:54:71:2c:34:6d:c3:f7:75:
                    8f:00:e0:5a:90:a6:5a:c8:6a:7e:8b:fd:a3:fe:68:
                    dc:ce:7b:33:01:ad:b0:1d:64:68:88:73:70:1c:24:
                    31:53:5a:2a:ec:e3:56:c8:ac:87:9b:0d:ab:86:3a:
                    53:8c:6b:90:20:a6:c1:c4:6e:8e:58:04:81:6a:b4:
                    84:a3:8d:49:ff:89:35:49:1f:80:02:35:f3:66:d2:
                    16:fd:f0:fa:c3:97:4b:bd:e1:d2:cd:23:e3:15:db:
                    af:94:db:f1:f3:3a:ea:3e:08:db:a4:98:da:ef:1a:
                    7a:df:5a:11:ea:e0:4d:41:74:e0:87:b1:b9:ea:cd:
                    90:2b:92:dc:72:42:f9:32:76:87:b7:2e:2b:36:74:
                    87:8d:7d:4d:ee:9b:cd:fb:4e:a8:9d:ee:5d:cb:46:
                    78:fd:53:36:2f:24:ed:65:33:ea:f3:6e:31:ef:6d:
                    9d:47:85:9a:26:9a:d0:cd:ca:96:88:db:e1:96:11:
                    ce:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:16:C5:03:00:FA:D3:A9:23:93:51:90:3C:05:15:D8:35:5D:A9:0B
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e203239383032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:b1:a7:82:fa:86:11:08:78:0f:2b:20:2b:1c:79:28:29:b4:
         3a:62:b3:95:16:53:9c:92:fd:53:6b:a0:cf:ed:a8:78:3c:45:
         1c:96:d5:7b:54:48:b4:e6:ef:60:3e:5e:f3:e3:7b:31:a4:e5:
         70:33:b6:ae:ef:eb:ad:a2:e8:9f:ae:2c:7c:1b:77:b4:ca:2c:
         67:21:29:2d:1e:3b:6f:f2:52:d5:f6:66:a7:a7:aa:98:6f:01:
         4b:ce:75:70:3e:9a:5e:68:a4:e1:08:eb:f0:b7:08:fd:be:2f:
         fc:97:97:b2:9e:79:1a:9d:c1:23:96:df:65:76:6b:22:85:b3:
         31:e9:57:86:30:ef:22:98:d4:fe:6e:fb:ed:7c:8d:e5:ec:17:
         80:2b:d0:7f:a2:d7:7e:53:0f:df:e5:4b:d0:52:e4:ef:01:51:
         5e:11:3b:23:c5:0a:94:7f:f0:53:2e:60:42:52:12:62:63:48:
         99:b6:7f:f1:f6:40:9a:00:19:87:66:84:bd:a2:b6:7d:68:f5:
         dd:e6:15:be:35:a3:9e:c1:11:b2:8e:c1:1e:1c:5f:49:bc:b6:
         ae:ff:eb:4d:c6:6e:37:bd:64:2d:8c:30:aa:1d:7d:cf:7d:e5:
         8a:d4:f3:02:1a:08:0a:e2:a9:8c:45:26:bc:c3:59:28:37:e5:
         7d:af:5b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:07:29 2025 by rpki-client