Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e203631333137.roa
File:                     3230392e38372e3137302e302f32342d3234203d3e203631333137.roa (raw, json)
Hash identifier:          Y3JsIof6LVyHYqtJQD2mqZOEzjj49OH3WPMs1BxHP2c=
Subject key identifier:   E7:7E:C6:48:8F:10:19:A3:D5:E4:2F:41:43:31:99:8D:7B:B0:F6:8D
Certificate issuer:       /CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
Certificate serial:       539F075C11E8075BB307CBE35004DFAE5DCFF73E
Authority key identifier: 4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e203631333137.roa
Signing time:             Wed 04 Jun 2025 21:29:14 +0000
ROA not before:           Wed 04 Jun 2025 21:24:14 +0000
ROA not after:            Wed 03 Jun 2026 21:29:14 +0000
asID:                     61317
IP address blocks:        209.87.170.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/35213db6-703a-4ad8-9450-0a0e1d371cff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 23:40:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9f:07:5c:11:e8:07:5b:b3:07:cb:e3:50:04:df:ae:5d:cf:f7:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051
        Validity
            Not Before: Jun  4 21:24:14 2025 GMT
            Not After : Jun  3 21:29:14 2026 GMT
        Subject: CN=E77EC6488F1019A3D5E42F414331998D7BB0F68D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:db:10:78:4d:a7:b9:a7:0b:c4:a0:a0:19:f9:
                    0a:34:af:53:63:64:dc:de:ed:27:57:7c:d5:fb:58:
                    6c:e3:bb:fd:01:d8:fc:56:23:06:03:1f:08:66:2f:
                    50:c4:f3:29:0a:f2:fd:3c:37:2e:ce:48:31:cd:aa:
                    8a:91:25:8c:d3:27:fd:23:ec:45:dd:95:81:be:91:
                    18:64:91:c0:a7:d2:be:1d:8c:ba:1f:d2:cb:fc:1d:
                    4b:7a:15:b7:8f:4b:6e:5c:04:9c:86:c3:41:02:29:
                    c3:cc:0e:f9:6d:67:65:d5:60:53:15:fe:44:03:6d:
                    07:5d:d5:1d:15:5f:e3:86:f5:c0:12:25:e9:65:a5:
                    3a:e3:a4:2c:7c:93:09:70:b1:cb:ac:ea:3f:25:56:
                    e3:de:7a:ff:17:42:7c:12:2a:a8:67:cd:b1:7a:f3:
                    e4:e1:5c:7a:88:a6:86:12:3f:99:b2:73:e6:bb:60:
                    ee:84:5a:ee:a2:3f:78:c5:07:6c:f1:3c:cf:b9:40:
                    cc:71:31:4a:97:38:7b:8e:e2:05:92:e7:99:cd:3b:
                    6c:5a:5a:e6:8d:83:65:06:8e:86:67:e0:3c:22:b6:
                    a7:73:55:e2:5d:ca:7e:6d:9c:77:03:3c:68:f0:ce:
                    ca:af:cb:d5:e7:fb:4a:ce:8d:15:40:35:87:55:6e:
                    8e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7E:C6:48:8F:10:19:A3:D5:E4:2F:41:43:31:99:8D:7B:B0:F6:8D
            X509v3 Authority Key Identifier:
                keyid:4F:44:9F:0C:CB:37:8E:C6:D3:FC:D7:6A:A7:EE:D5:9A:F1:15:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/4F449F0CCB378EC6D3FCD76AA7EED59AF11593BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/35213db6-703a-4ad8-9450-0a0e1d371cff/137bca5a0ff837b3808ba493bd14ab78cc4fd6296629253051.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8e52381d018e8593884d2a30/0/3230392e38372e3137302e302f32342d3234203d3e203631333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.87.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:a6:0f:91:0f:68:dc:26:91:4b:60:40:24:a6:cf:01:8c:ed:
         7c:fa:29:3f:82:5a:c5:34:38:8c:87:c5:7f:39:1f:4f:fe:d9:
         c7:03:d6:62:68:e3:a5:77:42:46:72:c4:90:45:c4:a6:8f:6b:
         d9:b6:21:0a:fd:1b:4a:be:d9:36:25:90:69:52:4d:1b:6e:71:
         fc:17:10:80:71:5d:ee:06:5c:4c:1f:97:7b:d9:0c:df:e3:56:
         66:29:ba:30:51:b8:73:f3:41:97:18:33:54:18:f0:de:d6:d8:
         8a:68:52:ad:19:2b:8a:96:ad:95:4a:32:42:06:d7:8f:5c:39:
         68:8a:ce:f6:b3:c4:e4:a2:0e:0f:99:18:d3:e5:78:e2:f0:86:
         74:6d:15:a1:d1:40:be:b4:7c:a8:25:bf:0a:e1:ff:98:67:1a:
         01:0f:7e:57:d4:57:ef:88:9c:ff:b0:5f:dc:78:5e:f5:8f:93:
         bb:f9:20:b3:60:32:c5:4b:3c:83:c9:46:89:94:cd:2a:e0:55:
         cc:a0:62:ad:0a:03:6e:4e:4e:2b:0a:33:12:e3:c8:1a:e2:36:
         ce:17:4a:8a:1f:22:e3:68:5e:45:33:f6:d0:03:45:d6:83:31:
         d0:32:46:a8:14:87:ec:d1:5d:df:8c:af:1b:80:9f:be:45:fa:
         c0:97:79:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:05:24 2025 by rpki-client